Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
38 changes: 38 additions & 0 deletions bucket/claude.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,38 @@
{
"version": "0.14.10",
"description": "A next generation AI assistant built by Anthropic",
"homepage": "https://claude.ai",
"license": "Proprietary",
"architecture": {
"64bit": {
"url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/AnthropicClaude-0.14.10-full.nupkg",
"hash": "0be53c645f8f7fb08ea8fe66bc8833f5af4ad3c78482a25b5f4a3e90f90683fc"
},
"arm64": {
"url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-arm64/AnthropicClaude-0.14.10-full.nupkg",
"hash": "82733b0b6ef2e2f8d22a499b23ee7642b45d5ea7a69b84799827bb62a1fb60a3"
}
},
"extract_dir": "lib\\net45",
"shortcuts": [
[
"claude.exe",
"Claude"
]
],
"checkver": {
"url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/RELEASES",
"regex": "([\\d.]+)-full",
"reverse": true
},
"autoupdate": {
"architecture": {
"64bit": {
"url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/AnthropicClaude-$version-full.nupkg"
},
"arm64": {
"url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-arm64/AnthropicClaude-$version-full.nupkg"
}
}
}
Comment on lines +28 to +37
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check if hashes are available in the RELEASES file for Claude

echo "=== Checking RELEASES file for 64bit ==="
curl -sL "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/RELEASES" 2>&1 | head -20

echo -e "\n=== Checking RELEASES file for arm64 ==="
curl -sL "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-arm64/RELEASES" 2>&1 | head -20

echo -e "\n=== Checking for SHA256SUMS file (64bit) ==="
curl -I "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/SHA256SUMS" 2>&1 | head -3

echo -e "\n=== Checking for checksums.txt file (64bit) ==="
curl -I "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/checksums.txt" 2>&1 | head -3

echo -e "\n=== Checking for HASHES file (64bit) ==="
curl -I "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/HASHES" 2>&1 | head -3

Repository: ScoopInstaller/Extras

Length of output: 4567


🌐 Web query:

Claude Anthropic distribution Windows nupkg hash verification Scoop package manager

💡 Result:

Short answer — yes. Recommended workflow and commands:

  1. Obtain the official Claude Windows nupkg from Anthropic (their downloads/docs). [1]

  2. Compute the SHA256 of the downloaded .nupkg (PowerShell):
    Get-FileHash .\claude-.nupkg -Algorithm SHA256
    Copy the Hash value. [4]

  3. Create a Scoop manifest including that SHA256 in the "hash" field (Scoop uses SHA256 by default). Example minimal manifest:
    {
    "version": "x.y.z",
    "url": "https://.../claude-x.y.z.nupkg",
    "hash": "012345... (sha256)",
    "bin": "claude.exe"
    }
    Scoop will verify the downloaded file against that hash on install. [2][3]

  4. (Optional) For autoupdate, use scoop's autoupdate.hash options to extract published hashes or let Scoop download+hash when building the manifest. [3]

Sources: Anthropic downloads/docs; Scoop app-manifest and autoupdate docs; PowerShell Get-FileHash. [1][2][3][4]

References:
[1] Anthropic Claude downloads/docs. (support.anthropic.com)
[2] Scoop App Manifests (hash field). (github.com)
[3] Scoop App Manifest Autoupdate (autoupdate.hash modes). (github.com)
[4] Get-FileHash (PowerShell) usage (SHA256). (pdq.com)

If you want, I can generate a complete manifest for a specific Claude nupkg URL + hash — paste the URL or the .nupkg hash.

Citations:


Add hash extraction to the autoupdate block.

The RELEASES file is available and contains SHA1 hashes for all versions. Hash extraction can be configured to automatically extract these hashes during autoupdate, enabling file integrity verification and reducing manual maintenance.

For each architecture, add hash extraction from the RELEASES file:

Recommended hash extraction configuration
"autoupdate": {
    "architecture": {
        "64bit": {
            "url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/AnthropicClaude-$version-full.nupkg",
            "hash": {
                "url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-x64/RELEASES",
                "regex": "^([A-Fa-f0-9]+)\\s+AnthropicClaude-\\$version-full\\.nupkg"
            }
        },
        "arm64": {
            "url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-arm64/AnthropicClaude-$version-full.nupkg",
            "hash": {
                "url": "https://storage.googleapis.com/osprey-downloads-c02f6a0d-347c-492b-a752-3e0651722e97/nest-win-arm64/RELEASES",
                "regex": "^([A-Fa-f0-9]+)\\s+AnthropicClaude-\\$version-full\\.nupkg"
            }
        }
    }
}
🤖 Prompt for AI Agents
In @bucket/claude.json around lines 28 - 37, The autoupdate block lacks hash
extraction for integrity checks; update the autoupdate -> architecture entries
for "64bit" and "arm64" to add a "hash" object that points to the corresponding
RELEASES file URL and uses a regex to capture the SHA1 for the
AnthropicClaude-$version-full.nupkg filename (refer to the existing autoupdate,
architecture, 64bit and arm64 entries and add hash.url = the RELEASES URL and
hash.regex to capture ^([A-Fa-f0-9]+)\s+AnthropicClaude-\$version-full\.nupkg so
the autoupdate process can automatically extract and verify the file hash).

}