Cyber Security News

Microsoft Open-Sources winapp, a New CLI Tool for Streamlined Windows App Development

Microsoft has announced the public preview of the Windows App Development CLI (winapp), a new open-source command-line tool designed to simplify Windows application development across multiple frameworks and toolchains.

The tool is now available on GitHub for developers working outside traditional Visual Studio or MSBuild environments.

The winapp CLI targets developers using cross-platform frameworks including Electron, .NET, C++, Rust, and Dart.

The tool eliminates complexity in accessing modern Windows APIs such as Windows AI APIs, security features, and shell integrations directly from any development toolchain.

Traditional Windows development involves managing multiple SDKs, editing manifests, generating certificates, and navigating complex packaging requirements.

Installation and setup (source: windows)

The winapp CLI consolidates these tasks into a unified command-line interface, allowing developers to focus on building applications rather than configuration management.

Core Features and Capabilities

Environment Setup: The winapp init command automates workspace bootstrapping by downloading necessary SDK packages, generating C++/WinRT projections, and configuring projects with manifest creation, asset generation, certificate setup, and dependency management.

Package Identity for Debugging: Developers can add package identity to executables with winapp create-debug-identity, enabling immediate testing of APIs requiring Package Identity without full packaging and installation. This feature is crucial for testing Windows AI APIs, Security, Notifications, and MCP Hosts.

Manifest and Certificate Management: The CLI automates appxmanifest.xml creation and development certificate setup. Commands like winapp manifest update-assets generate image assets in correct aspect ratios, while winapp cert generate creates self-signed development certificates for testing.

MSIX Packaging: The winapp pack command simplifies application packaging by handling packing and signing processes to produce store-ready or sideload-ready MSIX packages.

Electron Integration: Available as an npm package, the CLI includes winapp node add-electron-debug-identity for injecting Package Identity into Electron processes, enabling seamless Windows AI API integration through experimental NodeJS projections.

The winapp CLI is available via WinGet (winget install microsoft.winappcli) or npm (npm install --save-dev @microsoft/winappcli) with documentation and framework-specific guides on the GitHub repository.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago