Chocolatey comes from Chocolatey Software.

To verify the binaries:

* Ensure you have Git installed.
* Run `git clone https://github.com/chocolatey/choco.git`
* Switch to the tag of the released version. For instance:
    `git checkout 0.10.11`
* Run `build.bat` (`.\build.bat` in PowerShell)
* Once that is successfully completed, head into the
    code_drop\temp\_PublishedApps\choco_merged folder where you will find
    choco.exe.
* Verify the checksum you find there with the checksum shown on the package
    page of the community repository.

NOTE: For prereleases we don't always post a tag. However, the version of
      choco.exe in those prereleases does carry the git SHA as part of the
      version (informational version). So you can start out with downloading
      the package (left menu on the community repo), then extract that as a
      zip file. If you right click on the choco.exe at the top level of
      tools\chocolateyInstall and choose "Properties", click on "Details", then
      look at Product Version, you can see the SHA there. You would check out
      that specific SHA and then run the build.
