winappsdk-Foundation

Security Holding Package

This package name has been reserved by MSRC to prevent dependency confusion attacks.

Why does this package exist?

This placeholder package was published to protect against a type of supply chain attack called "dependency confusion" where an attacker publishes a malicious package with the same name as an internal/private package.

Are you the legitimate owner of this package name?

If you are a Microsoft employee or vendor and need this package name for legitimate use, we can transfer ownership to you.

Contact: depscan@microsoft.com

Please include:

• The package name you need
• Your PyPI username
• The GitHub repository or project that will use this package
• Brief description of the package's purpose