Is Winget repo secure

The Windows Package Manager Community App Repository performs multiple automated scans of the packages submitted including dynamic analysis. After that has been successful, a moderator will also review the metadata before the package is added. It is primarily community maintained, so the updates for new versions of software depend on the community or the publisher to keep them current. We have provided tooling to help publishers automate the process using https://github.com/microsoft/winget-create.

Hi there,

The security of winget is same as that of apps that you get from the store .
The winget client is distributed within the App Installer package, which is pre-installed on Windows. When you go to the Microsoft Store, you can simply update the App Installer and the winget command line tool will be installed.

All antivirus that you use to scan the PC will scan the apps that you install from the winget too, and the update is same as that of the apps that gets installed from the store.

You can get more info from here https://video2.skills-academy.com/en-us/windows/package-manager/winget/

--------------------------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--

Hi,

Thanks for the answer @Limitless Technology

One other question then related to Winget but also to Endpoint Manager and Microsoft Store.

Microsoft is ending support for Microsoft Stores for Business "soon" and want companies to start using Microsoft Store.
If I today want to deploy and app from Microsoft Stores for Business I can search and easily deploy this app from https://businessstore.microsoft.com and Endpoint Manager.

Now If I want to deploy a app from Microsoft Store, then when I login to Endpoint Manager > Apps> I have to apply Appstore URL I guess, but will this application be regularly updated without user interaction ?

As of today we are using public repo chocolatey to deploy several applications to Company Portal, so users can select which one they want to install, and we have configured a script that will updates these packages when a client reboot. If we want the same thing to work with Microsoft Store, do we need to Install Winget ? I am struggling to see what's the best solution here...

Comments ?

Also, why aren't all store apps on winget? "Microsoft Store" I can't get Netflix, etc...?