Snynet Solution Logo
MON - SUN: 10 AM - 6 PM
+60 11 5624 8319

Blog

Windows Package Manager stumbles at the first hurdle

Image Description

Microsoft was forced to put a stop to automatic submissions to the repository of the new Windows 10 package manager after witnessing a spike in bad and duplicate submissions. 

The command-line Windows Package Manager, also known as Winget, has been available in early access for some time, but Microsoft released its milestone 1.0 release at last week’s Build 2021 event.

Package managers, a staple of the Linux desktop, have existed on Windows in the form of third-party options such as Chocolatey. However, Microsoft has now built the functionality into the operating system itself citing developer use-cases.

At the event, Microsoft’s senior program manager Demitrius Nelon had highlighted the ease with which new packages can be submitted to Winget’s repository, with the help of a tool called the Windows Package Manager Manifest Creator.

Taking charge

Windows enthusiasts were quick to capitalize on the tool’s ease of use to submit all kinds of packages to the repository, resulting in several duplicate ones, as well as many that weren’t properly manifested.

Some users also highlighted other shortcomings of the automated submission process. One suggested that the lack of manual screening could allow mischievous users to sneak in a package claiming to install one package, while it actually installed something else.

This forced Microsoft to take charge of the automated submission process and introduce manual human moderation to check each and every submission.

"Windows Package Manager team administrators will begin manually reviewing submissions to reduce the number of duplicate submissions, and manifests with sub-optimal metadata. We have also implemented moderation to help maintain the quality of the community catalog,” said Nelon on GitHub while introducing the change in the package submission process.

Via The Register

Date

03 Jun 2021

Sources


Share


Other Blog

  • Google Cloud boosts backup and disaster recovery capabilities with Actifio deal

    Google Cloud signs agreement to acquire data management firm Actifio.

    Read More
  • Namecheap adds new Bitcoin payment option, offers free training course

    Namecheap has added BTCPay as a payment option and the company has also created a free course for students.

    Read More
  • Forget about looking for MacBook Pro deals on Prime Day, get the Razer Blade 15 instead

    The Razer Blade 15 has never been as cheap as it is on Amazon Prime Day, and if you’ve been hunting for MacBook Pro deals, in particular, stop right now, buy this instead.

    Read More
  • Microsoft 365 customers are getting a handy new tool for no extra cost

    Microsoft is bringing a lightweight version of its Visio diagram software to Microsoft 365 users for free.

    Read More

Find Out More About Us

Want to hire best people for your project? Look no further you came to the right place!

Contact Us