Chocolatey comes from Chocolatey Software.

To verify the binaries:

* Ensure you have Git installed.

* Run `git clone https://github.com/chocolatey/choco.git`
* Switch to the tag of the released version. For instance:
`git checkout 0.10.11`
* Run `build.bat` (`.\build.bat` in PowerShell)
* Once that is successfully completed, head into the
code_drop\temp\_PublishedApps\choco_merged folder where you will find
choco.exe.
* Verify the checksum you find there with the checksum shown on the package
page of the community repository.

NOTE: For prereleases we don't always post a tag. However, the version of
choco.exe in those prereleases does carry the git SHA as part of the
version (informational version). So you can start out with downloading
the package (left menu on the community repo), then extract that as a
zip file. If you right click on the choco.exe at the top level of
tools\chocolateyInstall and choose "Properties", click on "Details", then
look at Product Version, you can see the SHA there. You would check out
that specific SHA and then run the build.