#nuget — Public Fediverse posts

I don't develop using #npm, and I guess this happens with #pypi and #nuget as well.
What's the answer? Only install stuff completely manually? Don't store credentials on your dev PCs, only in your e.g. smartphone and enter them manually? Let humans manually verify each upload to package registries? /s

Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime

https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/?hide_banner=true

#dotnet #nuget #security

From the .NET blog...

In case you missed it earlier...

Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security

via @dotnet : Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime

https://ift.tt/3IOsjnU
#NuGet #NuGetTrustedPublishing #APITokenSecurity #APIAccessSecurity #APIKeyRotation #OpenIDConnect #OIDC #SecurityNews #SupplyChainSecurity #DevOps #CI/CDSe…

Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/

#microsoft #NET #NuGet #Security

From the .NET blog...

Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ #dotnet #NuGet #Security

From the archives...

Give .NET Its Props - Central Package Management
https://barretblake.dev/posts/development/2026/04/give-dotnet-its-props/ #nuget #packagemanagement #dotnet

Как я посадил WireMock.Net на gRPC стероиды

WireMock.Net умеет мокать gRPC . Но для этого он заставляет разработчика таскать .proto файлы и поддерживать лишнюю конфигурацию. Я контрибьютил в проект несколько месяцев, разобрался в кишках и написал своё расширение WireMock.Grpc.Protobuf Пакет предлагает gRPC моки через типизированные контракты Google.Protobuf . Получилось короче, надёжнее и заметно удобнее. В статье покажу, почему мой способ удобнее стандартного, как всё устроено под капотом и зачем вашему проекту пакет WireMock.Grpc.Protobuf Кстати, подобные инженерные разборы, open-source и внутренности .NET я регулярно публикую в Telegram-канале StepOne . Если статья зайдёт — заглядывайте. dotnet add package WireMock.Grpc.Protobuf

https://habr.com/ru/articles/1063162/

#grpc #proto #protobuf #wiremock #google #csharp #dotnet #nuget #github #mock

I just released version 0.9 of ConsoleRenderer!

This version increases performance for sparsely populated screens by a significant margin, thanks to @micutio!

This version also drops support for .NET 8 in favor of .NET 10, which is the latest LTS version.

The previous version is still very stable, so if you you depend on ConsoleRenderer and haven't moved your project to .NET 10, you can still use that without issue.

https://www.nuget.org/packages/ConsoleRenderer/

#nuget #rendering #terminal #foss

If you're a C# #developer and need some helpful generalized/reusable code, you can check out an offshoot of my big project called #CapyKit.

https://git.jordanwages.com/wagesj45/CapyKit

Documentation: https://capykit.happycapy.net/

Available in #nuget via #selfhosted #Foregejo repository. Or build it yourself.

#TIL Nowadays #NuGET replaces #API keys with what they call trusted publishing which is kind of oAuth where CI runs (currently only #GitHub actions, it seems) ask for a short-lived token, receive it and publish a package. Reason number 42 for me to stay on gitHub. #DotNet

I just blogged: Switching the Aspire Community Toolkit to NuGet Trusted Publishing - https://www.aaron-powell.com/posts/2026-07-03-switching-aspire-to-nuget-trusted-publishing/

#aspire #nuget #github-actions #security #devops #dotnet

Just blogged: Follow-up to my 2021 console stack post: templates scaffold well, but shared glue code drifts when you maintain many CLI tools.

Now I use Devlead.Console.Template plus the Devlead.Console source package. Scaffold once, update bootstrap via NuGet. Partial Program hooks for your commands and DI.

https://www.devlead.se/posts/2026/2026-06-27-template-plus-source-package-my-dotnet-console-stack-in-2026

#dotnet #csharp #oss #nuget

File-based apps в .NET 10

Для небольших скриптов на C# долгое время приходилось создавать полноценный проект даже ради нескольких строк кода. В.NET 10 появилась поддержка file‑based apps — теперь приложение можно запускать и публиковать прямо из одного.cs‑файла. Разбираемся, как это работает и где новый подход действительно полезен.

https://habr.com/ru/companies/otus/articles/1049290/

#NET_10 #C# #filebased_apps #Native_AOT #ASPNET_Core #minimal_API #NuGet #CLI_утилиты #автоматизация #скрипты

I really wish #NuGet had an SBOM tab, i.e., #dotnet tools show "This package has no dependencies." which, from a NuGet package point of view, is true, but .NET tools can have plenty of dependencies, they're just bundled. Dependencies aren't just a package graph; they're acknowledgement and risk.

Just released the StyloExtract packages https://www.nuget.org/packages?q=styloextract&includeComputedFrameworks=true&prerel=true&sortby=relevance

Really for internal use but someone might find them useful.
It's an adaptive HTML to (AI Friendly, structural) Markdown converter designed for extensibility and AoT compatibility.

It's the basis of a future StyloBot feature where it will auto generate any upstream page to markdown for AI scrapers automatically. This lets it be FAST!

#nuget #stylobot

Changes to NuGet package ids

nuget.org now requires new package IDs to use only ASCII letters, digits, dots, and dashes, similar to the conventions used by npm, PyPI, and other major registries. Existing packages and existing IDs remain available.

Enforced for new packages, and from 15th July for existing packages.

https://github.com/NuGet/Announcements/issues/75

#dotnet #nuget

Opening #NuGet packages & decompiling assemblies in them was possible for a long time. Net-new will be a search & download capability for arbitrary NuGet feeds #ilspy #comingsoon

Rust внутри .NET: как упаковать native-библиотеку в один NuGet-пакет

FFI, P/Invoke, EmbeddedResource, DllImportResolver и кроссплатформенная доставка без ручного копирования .dll , .so и .dylib . Когда .NET-коду нужно вызвать Rust-библиотеку, первый прототип обычно заводится быстро: Rust собирается как cdylib ; функции экспортируются через extern "C" ; C# вызывает их через DllImport ; результат возвращается через указатель.

https://habr.com/ru/articles/1043276/

#dotnet #rust #ffi #invoke #nuget #nativelibrary #dllimportresolver

https://github.com/dennisdoomen/dotnet-library-starter-kit - #dotNET library starter kit is a bunch of dotnet new templates to quickly get you started building high-quality #NuGet packages.

KeyboardHook: кроссплатформенный глобальный перехват клавиатуры и мыши для .NET

Рассказываю, как написал кроссплатформенную .NET-библиотеку для глобального перехвата клавиатуры и мыши. Под капотом: WH_KEYBOARD_LL на Windows, CGEventTap на macOS и polling через XQueryKeymap на Linux. Один интерфейс, три реализации, ноль внешних зависимостей.

https://habr.com/ru/articles/1040932/

#nuget #c# #net #windows #linux #macos #global_hooks #keyboardhooker #crossplatform

NuGet PackageReference for C++ Projects in Visual Studio

https://devblogs.microsoft.com/cppblog/nuget-packagereference-for-c-projects-in-visual-studio/

#nuget #cpp #visualstudio #packagemanager

NuGet Package Pruning: Cleaner Dependencies and Actionable Vulnerability Reports

https://devblogs.microsoft.com/dotnet/nuget-package-pruning-in-dotnet-10/?hide_banner=true

#nuget #dotnet #packagemanager #security

From the .NET blog...

In case you missed it earlier...

NuGet Package Pruning: Cleaner Dependencies and Actionable Vulnerability Reports
https://devblogs.microsoft.com/dotnet/nuget-package-pruning-in-dotnet-10/ #dotnet #NuGet #Security #audit #dotnet10 #packagepruning #vulnerabilities