I've had working versions of software stolen from me by Google chrome auto updating extensions and Android autoupdating apps. There needs to be something like p

I've had working versions of software stolen from me by Google chrome auto updating extensions and Android autoupdating apps. There needs to be something like package.json or cargo.toml to protect users from rogue application developers, rogue operating system developers, and rogue chrome extension developers.