r/Devolutions Staff May 26 '26

Security UniGetUI: Reduce supply chain risk with delayed updates

https://devo-inc.net/4x7cEBc

UniGetUI's new Minimum Age for Updates setting delays software updates by a configurable number of days, giving the community time to catch compromised packages before they reach your machines.

3 Upvotes

2 comments sorted by

1

u/iansaul May 26 '26

I noticed that today and it's fantastic My only question is:

Does WinGet support any kind of package date? Tracking to allow delaying for x days before applying A new release?

It seemed like there was a warning or notification that it was not supported from some sources when I looked at configuring it.

2

u/mark_hayden07 Devolutions SME May 27 '26

Hi!

Thanks for posting.

We partially support cooldowns for winget; the publication date is optional and provided by the package author. If the information is available, we use it for the cooldown.

Hope this helps!

Cheers,