Unfortunately another package manager that doesn't seem to be interested in the idea of digital signing for security, at least for the install process anyway, w

Unfortunately another package manager that doesn't seem to be interested in the idea of digital signing for security, at least for the install process anyway, which seems to be using the windows equivalent of curl | bash over an unencrypted connection to boot.