npcap icon indicating copy to clipboard operation
npcap copied to clipboard

Old version of Npcap on winget

Open StepanKuklis opened this issue 1 year ago • 4 comments

Hello, there is 0.86 (from 2016) version of npcap on winget package manager.

λ  winget search npcap
Name  Id             Version Source
Npcap Insecure.Npcap 0.86    winget
λ  winget show Insecure.Npcap
Found Npcap [Insecure.Npcap]
Version: 0.86
Publisher: Insecure
Publisher Url: https://insecure.org/fyodor/
Description: Nmap Project's Windows packet capture and transmission library
Homepage: https://nmap.org/npcap/
License: Proprietary
Privacy Url: https://insecure.org/privacy.html
Copyright: Copyright 2016 Insecure.Com LLC ("The Nmap Project")
Installer:
  Installer Type: nullsoft
  Installer Url: https://nmap.org/npcap/dist/npcap-0.86.exe
  Installer SHA256: ab677b9037dc377303e6d68a9b8a8195c8e976efd550a6bb6ce91eed551c5cbe

Im not sure if you know. If you do, I think it is better to have no version there than a very old version.

I found an older discussion here about distributing the OEM version, but this is unrelated (I think) so Im opening this new one. https://github.com/nmap/npcap/issues/588

I found this in winget issues https://github.com/microsoft/winget-pkgs/issues/6494

StepanKuklis avatar May 15 '24 11:05 StepanKuklis

Thanks for the details. Yeah we absolutely don't want Npcap (especially Version 0.86) on Winget. That's more than 7 years old and is subject to dozens of critical bugs that we've fixed since then (see the Npcap Changelog for details. The cleanest approach would be to convince Winget folks to remove it. But we may also have to look at technical countermeasures such as putting the old versions of Npcap behind a captcha and/or maybe even adding one to the installer. I'd hate to just remove the old versions from our download directory since they do have occasional valid uses.

fyodor avatar May 15 '24 17:05 fyodor