Welcome to the Windows Package Manager Community Repository
This repository contains the manifest files for the Windows Package Manager. You are highly encouraged to submit manifests for your favorite application.
The Windows Package Manager is an open source client. You will find the source code here.
Submitting a Package
To submit a package to the repository, you should follow these steps:
- Follow the Contributing guidelines below
- Author a Manifest
- Test your manifest
- Submit your PR
- Respond to any feedback
Note: Please check that the package's manifest you intend to submit does not already exist in the manifests folder, and that there are no open PRs for it in order to avoid duplicates.
Authoring a Manifest
You can either use the Windows Package Manager Manifest Creator, or you can follow the following manual steps.
The minimal manifest syntax is below. Additional information on writing manifests can be found on Microsoft Docs or on the v1.0 manifest spec.
Current limitations are:
- One manifest per PR
Be sure the manifest filenames match the PackageIdentifier manifest naming conventions and the manifest is located in the folder path matching manifests\<first lower case letter of publisher>\<publisher>\<package>\<version>\.yaml
Using the YAMLCreate.ps1
To help author manifest files, we have provided a YAMLCreate.ps1 powershell script located in the Tools folder.
The script will prompt you for the URL to the installer, then will prompt you to fill in metadata.
I recommend running the script in the location where you want to produce the manifest file. For example: manifests\<publisher>\<package>\. After successful completion, it will produce the YAML file.
Using Windows Package Manager YAML Generator
If you prefer to use a GUI to generate YAML files, you can use the Windows Package Manager YAML Generator. It is available as an app in the Microsoft Store and the code is also available on GitHub.
Although the Windows Package Manager YAML Generator can create YAML files with multiple installers, winget does not support more than one installer for now.
Test your manifest
Now that you have authored your manifest, you should make sure it works as expected.
Locally
- Verify the syntax. You can do that by typing the following command:
winget validate <manifest> - Test the install. You can do that by installing the manifest:
winget install -m <manifest>For more details, see packages.
In Windows Sandbox
You can use the Tools\SandboxTest.ps1 script for testing a manifest installation in Windows Sandbox. The manifest will be also validated.
Just provide the path to manifest as parameter:
.\Tools\SandboxTest.ps1 <path-to-manifest>Submit your PR
With the manifest verified, you will need to submit a PR. Your manifest should be located in the folder path matching manifests\<first lower case letter of publisher>\<publisher>\<package>\<version>.yaml
Validation Process
The PR request will go through a validation process. During the process, the PR request will get labels to help drive the validation. In the event of a failure, the BOT will suggest where the problem is with the submission and assign the PR back to you.
Respond to PR feedback
If the PR has been assigned to you, a timer is triggered. You will have 7 days to resolve the issue, or the PR will be closed automatically by the BOT.
The installer may be identified as malware. If you believe it's a false positive you can submit the installer to the defender team for analysis from here.
For a list of the BOT labels, see packages.
Contributing
This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.
When you submit a pull request, a CLA bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all Microsoft repositories using our CLA.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
For the avoidance of doubt, you may not make any Submissions linking to third party materials if such Submission is prohibited by the applicable third party and/or otherwise violates such third party's rights.