{"slug": "winget", "name": "winget", "category": "dev-libs", "category_name": "Libraries and frameworks", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.636, "rising": 0.35, "first": "2026-02-01", "latest": "2026-08-12", "why": "I use a package manager that checks the hash of the downloaded installer against what's recorded in the package listing for that version. WinGet has been built in to Windows", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 0, 0, 2, 0, 0, 0, 0, 0, 1, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "I use a package manager that checks the hash of the downloaded installer against what's recorded in the package listing for that version. WinGet has been built in to Windows", "icon": true, "domain": null, "github_repo": null, "official_url": "https://learn.microsoft.com/windows/package-manager/", "pricing": "", "aliases": ["winget", "WinGet"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 788344176, "item_id": 49271511, "url": "https://news.ycombinator.com/item?id=49271511", "by": "dvorka", "date": "2026-08-12", "stance": "recommend", "quote": "packaging for Windows via winget was actually much simpler", "excerpt": "So true - I packaged C++, C and recently Python app for Linux and it takes me so much time even if I try to automate as much as possible. I hate it. I needed to read through poor or obsolete documentation, non-existent guides and tools, do ugly tricks, use various exceptionsto make it usable/work ... and now generative AI policies and exceptions. I use Linux exclusively for ~30 years, but packaging for Windows via wi", "context": "Linux user for ~30 years, packages C++, C and Python apps", "use_case": "packaging software for Windows", "switched_from": "", "story": "I hate packaging my software for Linux"}, {"id": 750065473, "item_id": 46879092, "url": "https://news.ycombinator.com/item?id=46879092", "by": "tonymet", "date": "2026-02-03", "stance": "recommend", "quote": "I recommend removing notepad++ and installing via winget which installs the EXE directly without the winGUP updater service.", "excerpt": "I noticed I had version 8.9 on Dec 28, 2025 and it seems clean according to https://arstechnica.com/security/2026/02/notepad-updater-was-compromised-for-6-months-in-supply-chain-attack/ I recommend removing notepad++ and installing via winget which installs the EXE directly without the winGUP updater service. Here's an AI summary explaining who is affected. Affected Versions: All versions of Notepad++ released prior ", "context": "", "use_case": "installing software safely", "switched_from": "", "story": "Notepad++ supply chain attack breakdown"}, {"id": 749640384, "item_id": 46852524, "url": "https://news.ycombinator.com/item?id=46852524", "by": "Lammy", "date": "2026-02-01", "stance": "recommend", "quote": "I use a package manager that checks the hash of the downloaded installer against what's recorded in the package listing for that version. WinGet has been built in to Windows", "excerpt": "I use a package manager that checks the hash of the downloaded installer against what's recorded in the package listing for that version. WinGet has been built in to Windows since one of the 2018-era releases of Windows 10: https://i.ibb.co/VYGXdc56/2026-02-01-20-46-28-Greenshot.png", "context": "", "use_case": "verified software installs/updates", "switched_from": "", "story": "Notepad++ hijacked by state-sponsored actors"}]}], "caveats": [], "who": [{"by": "dvorka", "context": "Linux user for ~30 years, packages C++, C and Python apps", "url": "https://news.ycombinator.com/item?id=49271511", "date": "2026-08-12"}], "tags": [], "use_cases": ["packaging software for windows", "installing software safely", "verified software installs/updates"], "compared": [], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49270764", "title": "I hate packaging my software for Linux", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46878338", "title": "Notepad++ supply chain attack breakdown", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46851548", "title": "Notepad++ hijacked by state-sponsored actors", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {}, "2026-01": {}, "2026-02": {"recommend": 2}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {"recommend": 1}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 788344176, "item_id": 49271511, "url": "https://news.ycombinator.com/item?id=49271511", "by": "dvorka", "date": "2026-08-12", "stance": "recommend", "quote": "packaging for Windows via winget was actually much simpler", "excerpt": "So true - I packaged C++, C and recently Python app for Linux and it takes me so much time even if I try to automate as much as possible. I hate it. I needed to read through poor or obsolete documentation, non-existent guides and tools, do ugly tricks, use various exceptionsto make it usable/work ... and now generative AI policies and exceptions. I use Linux exclusively for ~30 years, but packaging for Windows via wi", "context": "Linux user for ~30 years, packages C++, C and Python apps", "use_case": "packaging software for Windows", "switched_from": "", "story": "I hate packaging my software for Linux"}, {"id": 750065473, "item_id": 46879092, "url": "https://news.ycombinator.com/item?id=46879092", "by": "tonymet", "date": "2026-02-03", "stance": "recommend", "quote": "I recommend removing notepad++ and installing via winget which installs the EXE directly without the winGUP updater service.", "excerpt": "I noticed I had version 8.9 on Dec 28, 2025 and it seems clean according to https://arstechnica.com/security/2026/02/notepad-updater-was-compromised-for-6-months-in-supply-chain-attack/ I recommend removing notepad++ and installing via winget which installs the EXE directly without the winGUP updater service. Here's an AI summary explaining who is affected. Affected Versions: All versions of Notepad++ released prior ", "context": "", "use_case": "installing software safely", "switched_from": "", "story": "Notepad++ supply chain attack breakdown"}, {"id": 749640384, "item_id": 46852524, "url": "https://news.ycombinator.com/item?id=46852524", "by": "Lammy", "date": "2026-02-01", "stance": "recommend", "quote": "I use a package manager that checks the hash of the downloaded installer against what's recorded in the package listing for that version. WinGet has been built in to Windows", "excerpt": "I use a package manager that checks the hash of the downloaded installer against what's recorded in the package listing for that version. WinGet has been built in to Windows since one of the 2018-era releases of Windows 10: https://i.ibb.co/VYGXdc56/2026-02-01-20-46-28-Greenshot.png", "context": "", "use_case": "verified software installs/updates", "switched_from": "", "story": "Notepad++ hijacked by state-sponsored actors"}]}