chocolatey / chocolatey/docs

Package Moderation - Account for finding Uninstall-ChocolateyPackage call in chocolateyinstall.ps1

Open
#586 3 comments 0 reactions 0 assignees View on GitHub
0 - Triaging Documentation
Dominant language
MDX
Stars
223
Forks
248
Avg merge
3d 2h
Merged PRs (30d)
8

Description

## What New Or Updated Would You Like To See?

An uninstall of a package written within the install of another can be a potentially malicious action. Would like to see a fail in the moderation process and a need for a larger discussion if such behavior is found within a packages install code.

We should update the moderation guidelines to look for this.

## Why Is It Needed?

Uninstalling a package from the install script should be done in the chocolateyBeforeModify script if possible for consistency. An Install script is for installing.

## Additional Context?

N/A

__This issue was originally raised by @imm0rtalsupp0rt_

Contributor guide

No contributing guide indexed for this repository

Research direction

Search the documentation for the moderation guidelines and existing references to Uninstall-ChocolateyPackage. Review how chocolateyinstall.ps1 and chocolateyBeforeModify are described, then update the guidance so an uninstall call in an install script is identified for moderation and further discussion. Done means the guideline clearly covers this case and the preferred script location.

Written by the indexing model from the issue text.

Assessment

Tech stack
powershell
Domain
documentation
Issue type
Documentation
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.