Update Google.Picasa version 3.9.141.259

[wtrbtl03]

Updated installer source URL

• Have you signed the Contributor License Agreement?
• Have you checked that there aren't other open pull requests for the same manifest update/change?
• Have you validated your manifest locally with winget validate --manifest <path>?
• Have you tested your manifest locally with winget install --manifest <path>?
• Does your manifest conform to the 1.0 schema?

Note: <path> is the name of the directory containing the manifest you're submitting.

---

Microsoft Reviewers: Open in CodeFlow

[wingetbot]

/AzurePipelines run

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).

[KaranKad]

Obsolete application from unofficial download link not allowed.

[ItzLevvie]

Download link must come from the ISV's servers.

[wtrbtl03]

Obsolete application from unofficial download link not allowed.

Discontinued but still popular and widely used. Official link not available due to the same reason, hence the use of arvhive.org link.

[wtrbtl03]

Download link must come from the ISV's servers.

ISV source not available as application has been discontinued by Google. Due to being discontinued, the application doesn't even connect to the internet, this should straighten out some security concerns.
If it's still against some policy do tell me. I'll close the PR.

[wtrbtl03]

@ItzLevvie can you provide further instructions

[ItzLevvie]

A couple months ago, we had people distributing someone else's apps on OneDrive, Dropbox, and more, despite there being an official download link.

If I remember correctly, according to Kevin (who's one of the administrators of the Windows Package Manager), the URL must come from the ISV's server, and if it's unavailable, it won't be able to be accepted.

Since the application has been discontinued and no longer downloadable on Google's website - I can't confirm if the application has been tampered with in any way.

I'm sure Chocolately has similar or same policies to ensure trustworthiness https://community.chocolatey.org/packages/picasa because this shows that the application is hidden from users and there hasn't been a replacement for more than 4 years.

[arjun-msft]

Nice summary @ItzLevvie! And it is correct, the software needs to come from the ISV's server.

[wtrbtl03]

I understand. Even though it is claimed and believed that archive.org only stores the snapshot of the website without any alterations, adding a source from there only adds inconsistencies. I'm taking the PR down.

[upintheairsheep]

http://dl.google.com/dl/desktop/R/en/GoogleDesktopSetup.exe
Google still keeps Google Desktop online despite being discontinued for ages