logoalt Hacker News

dale_huevo06/25/20252 repliesview on HN

winget is just Windows developers' version of curl | bash. Yet another example of Microsoft copying Linux features.


Replies

ocdtrekkie06/25/2025

Except curl | bash definitely executes code by the author controlling the URL you put in, and if the URL is HTTPS, in a reasonably secure fashion.

There is no validation when you winget whether or not the executable is from the official source or that a third party contributor didn't tamper with how it's maintained.

show 3 replies
TiredOfLife06/25/2025

Windows already has

irm <URL> | iex