Security & Verification

Trust, Sources & Security

Win Setup Forge is an installer orchestrator, never an application host. We never host, mirror, repackage, or modify third-party software installers.

Our Sourcing Hierarchy

Every application in the Win Setup Forge catalog is bound to an official, verified distribution channel according to strict priority order:

Priority 1 — Official Publisher Source

Manifests published or maintained by the official software publisher (e.g. Google LLC, Mozilla, Microsoft, GitHub, Python Software Foundation).

Priority 2 — Official Microsoft Store Source

Packages cryptographically signed and distributed via Microsoft Store infrastructure.

Priority 3 — Verified WinGet Community Manifests

Community-submitted manifests in the official Microsoft WinGet repository that resolve strictly to the authentic first-party publisher URLs with authoritative checksums.

What Win Setup Forge Does NOT Do

Never hosts or mirrors binaries

Never bundles installers or adware

Never alters publisher executables

Never redirects to random mirrors

Never hardcodes stale installer versions

Never executes obfuscated code or payloads

Full Script Transparency

Every generated setup.bat is plain-text ASCII/UTF-8. You can open and read it in Notepad before running it.

Only uses the official Microsoft winget install --id <package> commands.
Elevates automatically with Windows User Account Control (UAC).
Never hides error codes or suppresses critical diagnostic output.
Generates an audit trail report in WinSetupForge-report.txt.

Legal and Verification Notice

Win Setup Forge does not grant licenses to third-party applications. Applications remain subject to their respective publisher licenses and terms. Win Setup Forge generates installation instructions/scripts that reference trusted package sources.

Signatures and checksums improve verification confidence but do not guarantee that software is completely free from malware.