hwa-prototype
Advanced tools
Command-Line interface for deploying HWAs locally and remotely via HWA-Server.
npm i -g hwa-clihwa convert path/to/chrome/app.crx or hwa convert path/to/chrome/app.zip.appx will appear in the same folder as your Chrome package.You are now ready to upload your Hosted Web App to the Windows Store. Upload your AppX package by navigating to the "Packages" page in the Submissions section.
Be sure to check out the guide below for more information on migrating your Hosted Web App.
The following package formats are supported: .crx, .zip.
During the conversion process, you will be prompted for an Identity Name, Publisher Identity, and Publisher Display Name. To retrieve these values, visit the Dashboard in the Windows Dev Center.
Click on "Create a new app" and reserve your app name.
Next, click on "App identity" in the menu on the left under the "App management" section.
You should see the three values for which you are prompted listed on the page.
Package/Identity/NamePackage/Identity/PublisherPackage/Properties/PublisherDisplayNameApplication Content URI Rules (ACURs) or Content URIs define the scope of your Hosted Web App through a URL allow list in your app package manifest. In order to control the communication to and from remote content, you must define which URLs are included in, and/or excluded from, this list. If a user clicks a URL that is not explicitly included, Windows will open the target path in the default browser. With ACURs, you are also able to grant a URL access to Universal Windows APIs.
At the very minimum, your rules should include your app’s start page. The conversion tool will automatically create a set of ACURs for you, based on your start page and its domain. However, if there are any programmatic redirects, whether on the server or on the client, those destinations will need to be added to the allow list.
Note: ACURs only apply to page navigation. Images, JavaScript libraries, and other similar assets are not affected by these restrictions.
Many apps use third-party sites for their login flows, e.g. Facebook and Google. The conversion tool will automatically create a set of ACURs for you, based on the most popular sites. If your method of authentication is not included in that list, and it’s a redirect flow, you will need to add its path(s) as an ACUR. You can also consider using a web authentication broker.
Flash is not allowed in Windows 10 apps. You will need to make sure your app experience is not affected by its absence.
For ads, you will need to make sure your ad provider has an HTML5 option. You can check out Bing Ads and Ads in Apps.
YouTube videos should still work, as they now default to HTML5 <video>, so long as you are using the <iframe> embed method. If your app still uses the Flash API, you will need to switch to the aforementioned style of embed.
The Chrome web store already requires a 128x128 app icon image in your app package. For Windows 10 apps, you must supply 44x44, 50x50, 150x150, and 600x350 app icon images, at the very minimum. The conversion tool will automatically create these images for you, based on the 128x128 image. For a richer, more polished app experience, we highly recommend creating your own image files. Here are some guidelines for tile and icon assets.
App capabilities must be declared in your package manifest in order to access certain APIs and resources. The conversion tool will automatically enable three popular device capabilities for you: location, microphone, and webcam. With the former, the system will still prompt the user for permission before granting access.
Note: Users are notified of all the capabilities that an app declares. We would recommend removing any capabilities that your app does not need.
Traditional file downloads, like you see in the browser, are not currently supported.
Chrome provides apps with special-purpose APIs that can be run as background script. These are not supported. You can find equivalent functionality, and much more, with the Windows Runtime APIs.
For more information, visit this page.
FAQs
Command-Line interface for deploying HWAs locally and remotely via HWA-Server.
We found that hwa-prototype demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.
Security News
GitHub has revoked npm classic tokens for publishing; maintainers must migrate, but OpenJS warns OIDC trusted publishing still has risky gaps for critical projects.
Security News
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.