[FEATURE REQUEST] Specify package manager location/path

[headquarter8302]

Please confirm these before moving forward

• I have searched for my feature proposal and not found a work-in-progress/duplicate/resolved/discarded issue.
• This proposal is a completely new feature. If you want to suggest an improvement or an enhancement, please use this template

Describe the new feature

In my install of WingetUI, NPM is not found, and the PowerShell Gallery uses the older version of PowerShell (PS5). I would like to change the location/path of these providers.

Describe how this new feature could help users.

One can specify newer versions of these and/or fix nonstandard installations, in my case, my NPM install is nonstandard so a lot of programs depending on it needs manual tweaking. CLI switches that can override the location of providers also help.

[mrixner]

I think this is subject to the same pitfalls as #3038, right?

[marticliment]

Yes, it is the same thing. It would be very easy to set a custom executable and trick the user into running something as administrator.

[headquarter8302]

Martí Climent (@marticliment) Do you have plans regarding this? Or do feature requests that require arbitrary user input into the command line execution process will be dropped?

[marticliment]

What I am thinking I will do is to create some kind of special settings that can only be enabled or disabled with administrator rights, and I would lock this dangerous features with a toggle that would require an UAC prompt to be enabled. Then, a potentially malicious agent wouldn't be able to change said settings without notice, as they would require admin permissions.

[mrixner]

This could also be extended to allowing you to set a custom path to any executable UniGetUI requires, and CoreTools.Which could just use the value of this setting.

[mrixner]

This could also be extended to allowing you to set a custom path to any executable UniGetUI requires, and CoreTools.Which could just use the value of this setting.

[marticliment]

I don't think it would be positive to allow the user to change every single executable... I think it could give more headackes than advantages.