- Liittynyt
- 20.10.2016
- Viestejä
- 6 573
Noniin, eipä siinä kauaa mennytkään, eli validointi on todella heikkoa ja automatisoitua...Tuon kanssa kannattaa olla varovainen, vaikka erinomainen työkalu onkin kyseessä.
![]()
Windows 10's package manager flooded with duplicate, malformed apps
Microsoft's Windows 10 package manager Winget's GitHub has been flooded with duplicate apps and malformed manifest files raising concerns among developers with regards to the integrity of apps.www.bleepingcomputer.com
Furthermore, when contributors submit a manifest to Winget's GitHub, with some exceptions, the manifests are automatically validated by Winget's bot against set criteria.
But, over this Memorial Day weekend, multiple pull requests emerged on Winget's GitHub containing names of apps that had already existed in the package manager's registry.
Moreover, some pull requests contained incorrect application names in the manifests or "bad" links from where the application should get fetched.
And, in few other cases, new pull requests would overwrite existing applications' manifests, with incomplete info.
Nyt sitten vapaaehtoiset manuaalisesti noita tieten katsoo läpi.
Moderation needed. · Issue #14621 · microsoft/winget-pkgs
Describe issue People are submitting bad or duplicate manifests without checking if the app already exists or not in this repository. Some examples Duplicate pr's - #14546 #14606 #14498 #14605 #146...