google · frkngksl · Sep 19, 2025
diff --git a/chocolatey/Dockerfile b/chocolatey/Dockerfile
@@ -0,0 +1,21 @@
+# Use Ubuntu 22.04 base
+FROM ubuntu:22.04
+
+# Install bash explicitly (Ubuntu images usually have it, but to be safe)
+RUN apt-get update && apt-get install -y bash
+
+# Create the chocolatey folder
+RUN mkdir -p /test/chocolatey/
+
+# App for putting scalibr binary inside the container
+RUN mkdir -p /app
+
+# Copy local chocolatey directories into the container
+COPY chocolatey/ /test/chocolatey/
+
+# Set working directory (optional)
+WORKDIR /app
+
+# Default command: start bash so the container stays alive interactively
+CMD ["/bin/bash"]
+
diff --git a/chocolatey/README.md b/chocolatey/README.md
@@ -0,0 +1,10 @@
+# OSV-Scalibr: Chocolatey Extractor
+
+This directory contains the test Dockerfile for testing OSV-Scalibr Chocolatey Extractor plugin. Chocolatey is software management automation for Windows Systems. It stores .nuspec files under the C:\ProgramData\chocolatey\lib for each installed packages. This plugin enumerates folder paths under this directory to extract name, version and other metadata from .nuspec files.
+
+## Setup
+
+```sh
+docker build -t chocolatey-test .
+docker run -it --rm -v $(pwd):/app chocolatey-test (to put scalibr binary inside the container)
+```
diff --git a/chocolatey/chocolatey/lib/atom.install/atom.install.nuspec b/chocolatey/chocolatey/lib/atom.install/atom.install.nuspec
@@ -0,0 +1,41 @@
+<?xml version="1.0"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2011/08/nuspec.xsd">
+  <metadata>
+    <id>atom.install</id>
+    <version>1.60.0</version>
+    <title>Atom (Install)</title>
+    <authors>GitHub Inc.</authors>
+    <owners>Thilas</owners>
+    <licenseUrl>https://github.com/atom/atom/blob/master/LICENSE.md</licenseUrl>
+    <projectUrl>https://atom.io/</projectUrl>
+    <iconUrl>https://cdn.jsdelivr.net/gh/Thilas/chocolatey-packages@058df13746c9cfa791d72eedd05f888d48a1bc1a/atom/icon.png</iconUrl>
+    <requireLicenseAcceptance>false</requireLicenseAcceptance>
+    <description>Atom is a text editor that's modern, approachable, yet hackable to the core—a tool you can customize to do anything but also use productively without ever touching a config file.
+
+### Cross-platform editing
+Atom works across operating systems. You can use it on OS X, Windows, or Linux.
+
+### Built-in package manager
+Search for and install new packages or start creating your own—all from within Atom.
+
+### Smart autocompletion
+Atom helps you write code faster with a smart, flexible autocomplete.
+
+### File system browser
+Easily browse and open a single file, a whole project, or multiple projects in one window.
+
+### Multiple panes
+Split your Atom interface into multiple panes to compare and edit code across files.
+
+### Find and replace
+Find, preview, and replace text as you type in a file or across all your projects.</description>
+    <summary>A hackable text editor for the 21st Century.</summary>
+    <releaseNotes>[Release notes](https://atom.io/releases)</releaseNotes>
+    <copyright>Copyright © GitHub Inc.</copyright>
+    <tags>atom admin text editor notepad github package autocompletion</tags>
+    <projectSourceUrl>https://github.com/atom/atom</projectSourceUrl>
+    <packageSourceUrl>https://github.com/Thilas/chocolatey-packages/tree/master/atom.install</packageSourceUrl>
+    <docsUrl>https://atom.io/docs</docsUrl>
+    <bugTrackerUrl>https://github.com/atom/atom/issues</bugTrackerUrl>
+  </metadata>
+</package>
diff --git a/chocolatey/chocolatey/lib/atom/atom.nuspec b/chocolatey/chocolatey/lib/atom/atom.nuspec
@@ -0,0 +1,44 @@
+<?xml version="1.0"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2011/08/nuspec.xsd">
+  <metadata>
+    <id>atom</id>
+    <version>1.60.0</version>
+    <title>Atom</title>
+    <authors>GitHub Inc.</authors>
+    <owners>bradgearon,Thilas</owners>
+    <licenseUrl>https://github.com/atom/atom/blob/master/LICENSE.md</licenseUrl>
+    <projectUrl>https://atom.io/</projectUrl>
+    <iconUrl>https://cdn.jsdelivr.net/gh/Thilas/chocolatey-packages@058df13746c9cfa791d72eedd05f888d48a1bc1a/atom/icon.png</iconUrl>
+    <requireLicenseAcceptance>false</requireLicenseAcceptance>
+    <description>Atom is a text editor that's modern, approachable, yet hackable to the core—a tool you can customize to do anything but also use productively without ever touching a config file.
+
+### Cross-platform editing
+Atom works across operating systems. You can use it on OS X, Windows, or Linux.
+
+### Built-in package manager
+Search for and install new packages or start creating your own—all from within Atom.
+
+### Smart autocompletion
+Atom helps you write code faster with a smart, flexible autocomplete.
+
+### File system browser
+Easily browse and open a single file, a whole project, or multiple projects in one window.
+
+### Multiple panes
+Split your Atom interface into multiple panes to compare and edit code across files.
+
+### Find and replace
+Find, preview, and replace text as you type in a file or across all your projects.</description>
+    <summary>A hackable text editor for the 21st Century.</summary>
+    <releaseNotes>[Release notes](https://atom.io/releases)</releaseNotes>
+    <copyright>Copyright © GitHub Inc.</copyright>
+    <tags>atom admin text editor notepad github package autocompletion</tags>
+    <projectSourceUrl>https://github.com/atom/atom</projectSourceUrl>
+    <packageSourceUrl>https://github.com/Thilas/chocolatey-packages/tree/master/atom</packageSourceUrl>
+    <docsUrl>https://atom.io/docs</docsUrl>
+    <bugTrackerUrl>https://github.com/atom/atom/issues</bugTrackerUrl>
+    <dependencies>
+      <dependency id="atom.install" version="[1.60.0]" />
+    </dependencies>
+  </metadata>
+</package>
diff --git a/chocolatey/chocolatey/lib/cmake/cmake.nuspec b/chocolatey/chocolatey/lib/cmake/cmake.nuspec
@@ -0,0 +1,51 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2013/05/nuspec.xsd">
+  <metadata>
+    <id>cmake</id>
+    <version>4.1.1</version>
+    <title>CMake</title>
+    <authors>Andy Cedilnik, Bill Hoffman, Brad King, Ken Martin, Alexander Neundorf</authors>
+    <owners>chocolatey-community, dtgm</owners>
+    <requireLicenseAcceptance>false</requireLicenseAcceptance>
+    <licenseUrl>https://gitlab.kitware.com/cmake/cmake/blob/master/Copyright.txt</licenseUrl>
+    <projectUrl>https://www.cmake.org/</projectUrl>
+    <iconUrl>https://cdn.jsdelivr.net/gh/chocolatey-community/chocolatey-packages@5633c4413a8b71f75f379190546a0047c0e0b12b/icons/cmake.png</iconUrl>
+    <description>CMake is an open-source, cross-platform family of tools designed to build, test and package software. CMake is used to control the software compilation process using simple platform and compiler independent configuration files, and generate native makefiles and workspaces that can be used in the compiler environment of your choice. The suite of CMake tools were created by Kitware in response to the need for a powerful, cross-platform build environment for open-source projects such as ITK and VTK.
+
+[Development](https://www.cmake.org/developer-resources/)
+
+#### MSI Properties
+
+`ADD_CMAKE_TO_PATH`
+- `0` = Do not add CMake to PATH
+- `1` = Add CMake to system PATH for __all users__ (default)
+
+`DESKTOP_SHORTCUT_REQUESTED`
+- `0` = Do not create desktop icon (default)
+- `1` = Create CMake desktop icon
+
+`ALLUSERS`
+- `0` = Install for the current user only
+- `1` = Install for all users (default)
+
+For example: `choco install cmake --installargs 'ADD_CMAKE_TO_PATH=System' --apply-install-arguments-to-dependencies`
+
+## Notes
+
+- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**</description>
+    <summary>Cross-platform, open-source build system including CMake, CTest, CPack, and CMake-GUI</summary>
+    <releaseNotes>#### Program
+* [News](https://blog.kitware.com/tag/CMake/)
+* [Changelog](https://www.cmake.org/download/#latest)</releaseNotes>
+    <copyright>© 2000 Kitware Inc</copyright>
+    <tags>cmake compiler make build foss cross-platform</tags>
+    <projectSourceUrl>https://gitlab.kitware.com/cmake/cmake</projectSourceUrl>
+    <packageSourceUrl>https://github.com/chocolatey-community/chocolatey-packages/tree/master/automatic/cmake</packageSourceUrl>
+    <docsUrl>https://www.cmake.org/documentation/</docsUrl>
+    <mailingListUrl>https://cmake.org/mailing-lists/</mailingListUrl>
+    <bugTrackerUrl>https://gitlab.kitware.com/cmake/cmake/issues</bugTrackerUrl>
+    <dependencies>
+      <dependency id="cmake.install" version="[4.1.1]" />
+    </dependencies>
+  </metadata>
+</package>
diff --git a/chocolatey/chocolatey/lib/git/git.nuspec b/chocolatey/chocolatey/lib/git/git.nuspec
@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2013/05/nuspec.xsd">
+  <metadata>
+    <id>git</id>
+    <version>2.51.0</version>
+    <title>Git</title>
+    <authors>The Git Development Community</authors>
+    <owners>chocolatey-community</owners>
+    <requireLicenseAcceptance>false</requireLicenseAcceptance>
+    <licenseUrl>http://www.gnu.org/licenses/old-licenses/gpl-2.0.html</licenseUrl>
+    <projectUrl>https://git-for-windows.github.io/</projectUrl>
+    <iconUrl>https://cdn.jsdelivr.net/gh/chocolatey-community/chocolatey-packages@10a8d98b2f320b565fa5349a4352e79666db71ff/icons/git.svg</iconUrl>
+    <description>Git for Windows focuses on offering a lightweight, native set of tools that bring the full feature set of the Git SCM to Windows while providing appropriate user interfaces for experienced Git users and novices alike.
+
+## Features
+
+- **Git BASH**: Git for Windows provides a BASH emulation used to run Git from the command line. *NIX users should feel right at home, as the BASH emulation behaves just like the "git" command in LINUX and UNIX environments.
+- **Git GUI**: As Windows users commonly expect graphical user interfaces, Git for Windows also provides the Git GUI, a powerful alternative to Git BASH, offering a graphical version of just about every Git command line function, as well as comprehensive visual diff tools.
+- **Shell Integration**: Simply right-click on a folder in Windows Explorer to access the BASH or GUI.
+
+## Package parameters
+
+See the [Git Package Parameters documentation page](https://github.com/chocolatey-community/chocolatey-packages/blob/master/automatic/git.install/ARGUMENTS.md).
+
+Example for passing in package parameters:
+`choco install git.install --params "'/GitAndUnixToolsOnPath /WindowsTerminal /NoAutoCrlf'"`
+
+## Notes
+
+- The package uses default install options minus desktop icons.
+- **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**
+- Starting with version 2.49.0, installers for 32bit platforms are no longer available. If this is required, use an older version of the package.</description>
+    <summary>Git for Windows offers a native set of tools that bring the full feature set of the Git SCM to Windows</summary>
+    <tags>git vcs dvcs version-control msysgit foss cross-platform cli</tags>
+    <projectSourceUrl>https://github.com/git-for-windows/git</projectSourceUrl>
+    <packageSourceUrl>https://github.com/chocolatey-community/chocolatey-packages/tree/master/automatic/git</packageSourceUrl>
+    <docsUrl>http://git-scm.com/doc</docsUrl>
+    <mailingListUrl>http://groups.google.com/group/git-for-windows</mailingListUrl>
+    <bugTrackerUrl>https://github.com/git-for-windows/git/issues</bugTrackerUrl>
+    <dependencies>
+      <dependency id="git.install" version="[2.51.0]" />
+    </dependencies>
+  </metadata>
+</package>
diff --git a/chocolatey/chocolatey/lib/vscode/vscode.nuspec b/chocolatey/chocolatey/lib/vscode/vscode.nuspec
@@ -0,0 +1,50 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2013/05/nuspec.xsd">
+  <metadata>
+    <id>vscode</id>
+    <version>1.104.0</version>
+    <title>Visual Studio Code</title>
+    <authors>Microsoft</authors>
+    <owners>chocolatey-community</owners>
+    <requireLicenseAcceptance>false</requireLicenseAcceptance>
+    <licenseUrl>https://code.visualstudio.com/License</licenseUrl>
+    <projectUrl>https://code.visualstudio.com/</projectUrl>
+    <iconUrl>https://cdn.jsdelivr.net/gh/chocolatey-community/chocolatey-packages@00a000c7e5d8cc0d8416468e164eef281f843bff/icons/vscode.png</iconUrl>
+    <description>Build and debug modern web and cloud applications. Code is free and available on your favorite platform - Linux, Mac OSX, and Windows.
+
+## Features
+
+* **Meet IntelliSense:** Go beyond syntax highlighting and autocomplete with IntelliSense, which provides smart completions based on variable types, function definitions, and imported modules.
+* **Print statement debugging is a thing of the past:** Debug code right from the editor. Launch or attach to your running apps and debug with break points, call stacks, and an interactive console.
+* **Git commands built-in:** Working with Git has never been easier. Review diffs, stage files, and make commits right from the editor. Push and pull from any hosted Git service.
+* **Extensible and customizable:** Want even more features? Install extensions to add new languages, themes, debuggers, and to connect to additional services. Extensions run in separate processes, ensuring they won't slow down your editor.
+
+## Package parameters
+
+* `/NoDesktopIcon` - Don't add a desktop icon.
+* `/NoQuicklaunchIcon` - Don't add an icon to the QuickLaunch area.
+* `/NoContextMenuFiles` - Don't add an _Open with Code_ entry to the context menu for files.
+* `/NoContextMenuFolders` - Dont't add an _Open with Code_ entry to the context menu for folders.
+* `/DontAddToPath` - Don't add Visual Studio Code to the system PATH.
+
+Example: `choco install vscode --params "/NoDesktopIcon /DontAddToPath"`
+
+## Notes
+
+* The package uses default install options except that it adds context menu entries and Visual Studio Code isn't started after installation.
+* For disabling the auto-update functionality see the [Visual Studio Code Auto Update Deactivation package](https://chocolatey.org/packages/visualstudiocode-disableautoupdate).
+* **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**
+
+![screenshot](https://cdn.jsdelivr.net/gh/chocolatey-community/chocolatey-coreteampackages@6dc510f16b69a2134e901f2576e991c462a18e9b/automatic/vscode/screenshot.png)</description>
+    <summary>Visual Studio Code</summary>
+    <releaseNotes>https://code.visualstudio.com/Updates</releaseNotes>
+    <tags>microsoft visualstudiocode vscode development editor ide javascript typescript admin foss cross-platform</tags>
+    <projectSourceUrl>https://github.com/Microsoft/vscode</projectSourceUrl>
+    <packageSourceUrl>https://github.com/chocolatey-community/chocolatey-packages/tree/master/automatic/vscode</packageSourceUrl>
+    <docsUrl>https://code.visualstudio.com/docs</docsUrl>
+    <bugTrackerUrl>https://github.com/Microsoft/vscode/issues</bugTrackerUrl>
+    <dependencies>
+      <dependency id="vscode.install" version="[1.104.0]" />
+    </dependencies>
+  </metadata>
+</package>
diff --git a/chocolatey/chocolatey/lib/winrar/winrar.nuspec b/chocolatey/chocolatey/lib/winrar/winrar.nuspec
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="utf-8"?>
+<package xmlns="http://schemas.microsoft.com/packaging/2011/08/nuspec.xsd">
+  <metadata>
+    <id>winrar</id>
+    <version>7.13.0</version>
+    <title>WinRAR</title>
+    <authors>win.rar GmbH</authors>
+    <owners>Maurice Kevenaar</owners>
+    <requireLicenseAcceptance>false</requireLicenseAcceptance>
+    <licenseUrl>http://www.win-rar.com/winrarlicense.html</licenseUrl>
+    <projectUrl>http://www.win-rar.com/</projectUrl>
+    <iconUrl>https://cdn.jsdelivr.net/gh/mkevenaar/chocolatey-packages@646ffab0085403b1476d1d7e4ad50a1a82203e67/icons/winrar.png</iconUrl>
+    <description>**NOTE** When a new version is released, not all translations are avaialbe. Currently there is no solution to permanently fix this. For more information have a look at issue [#20](https://github.com/mkevenaar/chocolatey-packages/issues/20)
+
+## WinRAR
+
+WinRAR is a powerful archive manager. It can backup your data and reduce the size of email attachments, decompress RAR, ZIP and other files downloaded from Internet and create new archives in RAR and ZIP file format.
+
+You can find themes for WinRAR [here](http://www.rarlab.com/themes.htm).
+
+### Commercial software
+
+You can try WinRAR before you [buy](https://shop.win-rar.com/16/purl-shop-1984-1-n).
+
+### Package Parameters
+
+The following package parameters can be set:
+
+* `/LCID:` - the language code you want to install - defaults to your current language
+* `/English:` - force English language to install
+
+To pass parameters, use `--params "''"` (e.g. `choco install packageID [other options] --params="'/ITEM:value /ITEM2:value2 /FLAG_BOOLEAN'"`).
+To have choco remember parameters on upgrade, be sure to set `choco feature enable -n=useRememberedArgumentsForUpgrades`.
+
+**Please Note**: This is an automatically updated package. If you find it is
+out of date by more than a day or two, please contact the maintainer(s) and
+let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.</description>
+    <summary>A powerful archive manager</summary>
+    <releaseNotes>http://www.rarlab.com/rarnew.htm</releaseNotes>
+    <copyright>win.rar GmbH</copyright>
+    <tags>trial rar compression archive nagware admin</tags>
+    <packageSourceUrl>https://github.com/mkevenaar/chocolatey-packages/tree/master/automatic/winrar</packageSourceUrl>
+    <docsUrl>http://www.win-rar.com/faq.html</docsUrl>
+  </metadata>
+</package>