


Use of the community package repository is optional. No need for discussion, there are many reasons we don't need to get into, mostly it protects our ability to ensure all infrastructure costs can be paid for. Commercial code is not open source - and it won't be open sourced.No 3rd party advertising - We do feel that our commercial options make sense for anyone that can afford them, so you will see we lean folks to that.No Data Collection / Telemetry - No call home, not even in our commercial options (license tracking is honor-based) and there are organizations (or internal processes) that verify/validate (and karma) that will adjust any abuses of licensing.Completely offline - By default choco is installed with the community package repository as a source, but that is easily adjusted to internal repositories.Chocolatey is also verified against VirusTotal - 60-70 amped up anti-virus scanners.

On release, everything is authenticode signed.With Chocolatey (choco) client itself, these are the important things to know: But to give you a high level of what to expect with Chocolatey. We know you are going to read this entire document anyway.
