We're improving NuGet ecosystem supply-chain security by reducing API key durations. They drop to 30d on August 17th. NuGet Trusted Publishing avoids the need to manage API keys. PTAL if you publish packages.
NuGet
@nuget
#NuGet is the package manager for .NET.
Packages: NuGet.org
Docs: docs.microsoft.com/nuget
Blog: blog.nuget.org
GitHub: github.com/nuget/home
- We’re strengthening NuGet security with clearer standards for package ID characters, reducing name confusion and protecting developers from malicious packages. Learn more: github.com/NuGet/Announce… #NuGet #Security #DotNet
- 🚀 NuGet Pruning is cleaner restores and fewer false positives. Better security signals. In .NET 10, NuGet package pruning removes platform-provided dependencies from your graph, so you only see what actually matters: actionable alerts. Learn more:
- NuGet team would really value your input on a new feature proposal to add DNS hostname for audit: 🪞github.com/NuGet/Home/pul… We’re especially looking for input on design, edge cases, and compatibility or migration. Thanks for supporting the NuGet community. #NuGet #DotNet
