Why is Nuget automatically installed from an untrusted repository?

Question

PowerShell

You need to convert .iso to .vhdx. I found a video instruction - https://www.youtube.com/watch?v=mgNq41PlULA

I opened PowerShell as administrator and ran the first command from the video:
Install-Module -Name Convert-WindowsImage
After that I confirmed the automatic installation of Nuget and after a minute Powershell asked me if I want to install something something from an untrusted repository.



A number of questions follow from this:
1. What kind of repository are we talking about? Where can I see the link to the repository that Powershell uses?
2. Why does Powershell use an untrusted repository by default? Before that, I didn’t open powershell at all and didn’t touch the settings associated with it and with any system repositories.
3. Where can I manually download this Nuget so that it installs as Powershell asks (i.e. in C:\Program Files\PackageManagement\ProviderAssemblies)? From the official Nuget site from the "Download" section, a simple .exe file is downloaded - CLI.

Answer 1

It's just that all repositories, even the default PSGallery , are not reliable by default.
Make it reliable so that there are no unnecessary questions.
View info about it, including URL
Get-PSRepository
Make it trusted
Set-PSRepository -Name PSGallery -InstallationPolicy Trusted
By the way, PackageManagement and PowerShellGet should also be updated.

Answer 2

stop using youtube as guides to solve those problems
use Disk2Virtual
Question - what the fuck?