Replying to @⁨Reygle@lemmy.world⁩

According to MS there are various validation steps when app is added to repository, including virus checks:

Each submission to the Windows Package Manager Repository is run through several antivirus programs. These programs all have different virus detection algorithms for identifying potentially unwanted applications (PUA) and malware.

https://learn.microsoft.com/en-us/windows/package-manager/package/repository#validation-process

So I guess it’s safer to install apps trough winget, at least as much as much You trust Microslop doing good job.

Microsoft Learnlearn.microsoft.comSubmit your manifest to the repositoryAfter you create a package manifest that describes your application, you're ready to submit your manifest to the Windows Package Manager repository.

Replying to an earlier post

Better title: “make sure you’re on the official website when you’re trying to download software, even if you’ve used it before”.

The list includes widely used tools like PowerToys, CrystalDiskMark, EasyBCD, Lively Wallpaper, and Wintoys, all cloned onto lookalike domains that in most cases rank above the real project pages on Google.

Off the top of my head, I wouldn’t know the right domain to download CrystalDiskMark or EasyBCD, for example. It doesn’t sound like these clones are perfect replicas, but a convincingly close enough domain name with the same page contents might fool a ton of people