Chocolatey vs Yarn

Chocolatey has a massive community package repository of installs (more than 4,000 packages), and its open nature allows everyone to contribute more as needed.

Installs silently without crapware.

Just open powershell and type choco install firefox to install Firefox, or choco install java to install Java.

To install Chocolatey simply copy the text from their site and paste it into either cmd.exe or powershell.

choco upgrade all is like Windows Update for all of your 3rd party software. ... or for the more succinct command use 'cup' !!

Chocolatey requires checksums by default for files downloaded over non-secure locations and highly recommends it for HTTPS/SSL locations. It is moving towards requiring checkums by default for downloading from secure locations.

From install to upgrade to uninstall, Chocolatey manages the whole process.

You can put Chocolatey install commands into your powershell scripts.

It's licensed under Apache License 2.0 with source code available on GitHub.

Packages can be installed from multiple sources, including private sources.

Unattended installation and PowerShell.

There's a package called ChocolateyGUI that can be installed and lets you use Chocolatey with a UI frontend.

Chocolatey integrates with almost every infrastructure automation tool out there.

There is a business edition available for organizations that need more support. The business edition also includes a Package Synchronizer, Package Internalizer, Package Builder, and a host of other features.

Chocolatey allows installing extension packages that add PowerShell functions to your package automation scripts.

It has programs that can't be found in scoop or ninite.

It has ability to add custom sources.

One of the most important aspects of Yarn is determinism (predictability). The lock file ensures that the same dependencies will always be installed in the same way and order regardless of the machine for a given repository.

yarn why <query> can tell you why a package was installed and what other packages depend on it.

Yarn efficiently queues up requests and avoids request waterfalls in order to maximize network utilization.

If you've installed a package before, you can install it again without any internet connection.

Resolve mismatching versions of dependencies to a single version to avoid creating duplicates.

Install any package from either npm or Bower and keep your package workflow the same.

A single request failing won't cause an install to fail. Requests are retried upon failure.

It looks like it has good documentation.

Even though it's still in its early stages of development, security is one of the core values on which Yarn is built. It uses checksums to verify the integrity of every package before executing its code. This also helps avoiding errors related to faulty caching or captive portals.

Further steps are also being taken to improve the security of Yarn which will be implemented in the future.

Even though it's backed by Facebook, Yarn is built as a community project first and foremost. It's completely open source and hosted on Github. It's released under a standard open source client and has its own GitHub organization and set up to work under the same governance model that other successful projects have used in the past, such as Rust and Ember.

All of this means that both existing and new contributors will always work together to improve the product and introduce new features while also keeping in mind suggestions coming from the community.

Was created in a collaboration of Facebook with Exponent, Google and Tilde.