[Note] Hold a package for review if Get-WebFile followed by running an executable

chocolatey / package-validator

Windows service to validate packages conform to package standards

Apache License 2.0

31 stars 29 forks source link

[Note] Hold a package for review if Get-WebFile followed by running an executable #165

Open ferventcoder opened 7 years ago

ferventcoder commented 7 years ago

This was noted as a way to intentionally circumvent the checksum check, violating safety standards for the community repository. This should be viewed with extreme prejudice.