A computer-implemented method comprising: receiving an indication to install an application on a computing device , the application being available for download as an archive file storing a manifest file and one or more installation files, the manifest file including an address of a resource utilized by the application that is not included in the archive file; determining whether installation of the application is permissible or not permissible, the determining including: without downloading the archive file, downloading at least a portion of the manifest file including the address of the resource utilized by the application that is not included in the archive file; and determining , based on the at least a portion of the manifest file including the address of the resource utilized by the application that is not included in the archive file, that installation of the application on the computing device would comply with a device management policy for the computing device by using the address to determine that the resource is accessible by the computing device before installing the application, wherein the address of the resource utilized by the application that is not included in the archive file is extracted from the at least a portion of the manifest file; and upon determining that the resource is accessible by the computing device and installation of the application is permissible, downloading the archive file and installing the application from the archive file. receiving an indication to install an application on a computing device , the application being available for download as an archive file storing a manifest file and one or more installation files, the manifest file including an address of a resource utilized by the application that is not included in the archive file; determining whether installation of the application is permissible or not permissible, the determining including: without downloading the archive file, downloading at least a portion of the manifest file including the address of the resource utilized by the application that is not included in the archive file; and determining , based on the at least a portion of the manifest file including the address of the resource utilized by the application that is not included in the archive file, that installation of the application on the computing device would comply with a device management policy for the computing device by using the address to determine that the resource is accessible by the computing device before installing the application, wherein the address of the resource utilized by the application that is not included in the archive file is extracted from the at least a portion of the manifest file; and without downloading the archive file, downloading at least a portion of the manifest file including the address of the resource utilized by the application that is not included in the archive file; and determining , based on the at least a portion of the manifest file including the address of the resource utilized by the application that is not included in the archive file, that installation of the application on the computing device would comply with a device management policy for the computing device by using the address to determine that the resource is accessible by the computing device before installing the application, wherein the address of the resource utilized by the application that is not included in the archive file is extracted from the at least a portion of the manifest file; and upon determining that the resource is accessible by the computing device and installation of the application is permissible, downloading the archive file and installing the application from the archive file. <EOS>