Endpoint engineering

AppPackager

PowerShell automation for keeping MECM applications up to date.

Open source (MIT)Source ↗
PowerShellWPFMECM / ConfigMgrNIST NVD

What it is

AppPackager is a PowerShell toolkit with a WPF interface for keeping MECM applications current. It includes 91 packagers, each written for a specific application. A packager finds the latest release, downloads it from the vendor, creates the necessary wrappers and detection logic, and publishes the application to MECM.

The Version Monitor compares deployed versions with current vendor releases. It produces an HTML report of outdated applications and checks them against the NIST NVD for known CVEs.

The problem

Keeping third-party applications current takes a lot of repetitive work. Each update means checking the vendor, downloading an installer, extracting its metadata, building wrappers, copying content, and creating the application in MECM. Falling behind can also leave known vulnerabilities unpatched.

How it works

Each packager supports three actions: check, stage, and package. Check finds the latest version. Stage downloads the files and writes a manifest containing the installation settings and detection logic. Package copies the content to the network share and creates the application through the ConfigMgr module. The same manifests can also be used with PSADT and Intune tooling.

The WPF interface finds the available packagers automatically. Its one-click option checks vendor releases, skips versions already present in MECM, and packages the rest. The work runs in the background while the interface displays a live log. Check frequency can be set per application, and new content can be distributed automatically.

Vendor differences

Vendors publish releases through APIs, download pages, redirects, and several installer formats. Each requires different version detection, metadata extraction, and silent-install handling.

Status

AppPackager is open source under the MIT license and available on GitHub. The repository includes templates for MSIX, Intunewin, Squirrel, PSADT, and Chocolatey packagers.