nmap / npcap

Nmap Project's Windows packet capture and transmission library
https://npcap.com
Other
2.91k stars 508 forks source link

Old version of Npcap on winget #732

Open StepanKuklis opened 1 month ago

StepanKuklis commented 1 month ago

Hello, there is 0.86 (from 2016) version of npcap on winget package manager.

λ  winget search npcap
Name  Id             Version Source
Npcap Insecure.Npcap 0.86    winget
λ  winget show Insecure.Npcap
Found Npcap [Insecure.Npcap]
Version: 0.86
Publisher: Insecure
Publisher Url: https://insecure.org/fyodor/
Description: Nmap Project's Windows packet capture and transmission library
Homepage: https://nmap.org/npcap/
License: Proprietary
Privacy Url: https://insecure.org/privacy.html
Copyright: Copyright 2016 Insecure.Com LLC ("The Nmap Project")
Installer:
  Installer Type: nullsoft
  Installer Url: https://nmap.org/npcap/dist/npcap-0.86.exe
  Installer SHA256: ab677b9037dc377303e6d68a9b8a8195c8e976efd550a6bb6ce91eed551c5cbe

Im not sure if you know. If you do, I think it is better to have no version there than a very old version.

I found an older discussion here about distributing the OEM version, but this is unrelated (I think) so Im opening this new one. https://github.com/nmap/npcap/issues/588

I found this in winget issues https://github.com/microsoft/winget-pkgs/issues/6494

fyodor commented 1 month ago

Thanks for the details. Yeah we absolutely don't want Npcap (especially Version 0.86) on Winget. That's more than 7 years old and is subject to dozens of critical bugs that we've fixed since then (see the Npcap Changelog for details. The cleanest approach would be to convince Winget folks to remove it. But we may also have to look at technical countermeasures such as putting the old versions of Npcap behind a captcha and/or maybe even adding one to the installer. I'd hate to just remove the old versions from our download directory since they do have occasional valid uses.