"Chocolatey is that they depended on a bad upstream tool"
Hindsight is amazingly much clearer than decisions you make at the time with all the constraints and requirements you have in the moment. :D
Hindsight is amazingly much clearer than decisions you make at the time with all the constraints and requirements you have in the moment. :D
Recently my team started using it for cloud formation app deployment and I see it has reviewed and approved packages now.
I was also under the misaprehension that chocolatey packages contained binaries but they typically download from the software makers site at install time - so no binary interference to inject nasties by package authors.
Have to say I'm impressed with the updates to security and will look into using it privately as a result.
Thanks for your work!