Quiet and unattended installation with apt-get (2015)

My experience with apt-get makes me so wary of package management as a whole that I'm finding myself afraid of winget. Centralized package management never appealed to me and package managers have been nothing but problems (broken state, incompatible mismatches of shared libraries, one installation at a time only, etc) for whatever marginal benefit (disk space is a lot cheaper than it was in the 90s and programs updating their own libraries works just fine, and you can always drop in a new dll yourself if it's so important)

I have also had painful experiences with broken APT state being quite difficult to recover from.

But if you leave it up to developers of each program to update all their own dependencies, it just won't happen. Old versions of libraries (possibly with CVE) would stick around in the wild a lot longer this way.

Package managers assume they own the entire system. When you use something like Debian, which tends to have older versions of things, and want to run something that wants a newer version of something fundamental like libc, you can run into problems.

> whatever marginal benefit

Saving developer time and factoring code multiple programs use into a library is probably more than a marginal benefit.

> programs updating their own libraries works just fine

Until you have a security vulnerability in something like openssl, the package management system lets you patch this vulnerability for many programs at once. You then have things like resolver and socket libraries which you probably tend to want consistent across your system.

> you can always drop in a new dll yourself if it's so important

It should probably be easier to override a library version locally in case you do need to do that. That probably gets into security issues, as if anything can modify library versions, it also lets malicious software hook into those libraries.

> My experience with apt-get makes me so wary of package management as a whole that I'm finding myself afraid of winget.

They're very different programs solving mostly different problems. Has your experience with Internet Explorer so turned you off to the idea of a web browser that you'd refuse to use Chrome or Firefox?

> Centralized package management never appealed to me and package managers have been nothing but problems (broken state, incompatible mismatches of shared libraries, one installation at a time only, etc) for whatever marginal benefit (disk space is a lot cheaper than it was in the 90s and programs updating their own libraries works just fine

The primary benefit I've always seen has nothing to do with disk space and everything to do with management. I can run a single command and have my entire system up-to-date, from kernel to applications (and I can do this without every single application running a persistent background process), and install any supported package from a trusted repository with equally little effort.

> you can always drop in a new dll yourself if it's so important

Windows allowing this remains a massive security hole. It would be better if they only allowed it in folders that were read-only to unprivileged users, but I'm not aware that they ever added any restrictions. On Unix at least the person running the program has to override ld's path.