chocolatey / chocolatey/choco

outdated - Show diff of packages for outdated / upgrade --noop to review changes

Open
#1,881 1 comment 0 reactions 0 assignees View on GitHub
0 - Backlog Enhancement Security
Dominant language
C#
Stars
11.5k
Forks
961
PR merge metrics
No merged PRs in 30d

Description

As a user I would like to be able to find out what changed in packages that are about to be updated to find out if there were changes that might be malicious, e.g. download url is suspicious for the package or the install script performs other steps than previously.

Acceptance tests:
- The `outdated` command shows a hint to view the diff of the packages files that are outdated
- The `upgrade --noop` command shows a hint to view the diff of the packages files that are outdated
- There is a switch for the `outdated` and `upgrade --noop` command that creates a diff of the packages files that are outdated/about to be upgraded

Contributor guide

Open the contributing guide

Research direction

Start with the entry points for the `outdated` and `upgrade --noop` commands, then trace how they identify package files and render command output. Done means both commands provide a diff switch and show a hint for outdated or soon-to-be-upgraded package files, as specified by the acceptance tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
cli, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.