dependency-check / dependency-check/DependencyCheck
nuget packages scan - support for CPM (Central Package Management)
- Dominant language
- Java
- Stars
- 7.7k
- Forks
- 1.4k
- Avg merge
- 9d 22h
- Merged PRs (30d)
- 13
Description
**Is your feature request related to a problem? Please describe.**
We have a very large visual studio solution, thousand of csproj projects.
To easier maintenancy of nuget dependencies we enabled CPM (central package management), described here :
(https://learn.microsoft.com/en-us/nuget/consume-packages/central-package-management#enabling-central-package-management)
This allow to have only one reference to a package version using a specific file (Directory.Packages.props) !
**Describe the solution you'd like**
I would like that DependencyCheck tool scan also Directory.Packages.Props files to know which specific package is used by which project and use the result to scan dependencies vulnerabilities.
Contributor guide
Assessment
This issue has not been assessed yet.