yt-dlp

For managed Windows deployments, pin yt-dlp to the official GitHub release asset you intend to support, then record the exact build with yt-dlp --version. The upstream project publishes Windows binaries such as yt-dlp.exe from its GitHub releases, so software-inventory and detection rules should key off the installed file version/output rather than a generic product name alone.

yt-dlp has a built-in updater: yt-dlp -U. It also supports channel/target syntax such as yt-dlp --update-to nightly, yt-dlp --update-to [email protected], and yt-dlp --update-to master. In enterprise packaging, decide whether users may self-update or whether updates must come only from your managed package; mixing both approaches can make installed versions drift from Intune, ConfigMgr, or RMM detection.

Official source context: the project documents update syntax and FFmpeg recommendations in its yt-dlp README, and publishes Windows release assets at github.com/yt-dlp/yt-dlp/releases/latest.