Expand Audit to include diagnostic information about packages
- Dominant language
- C#
- Stars
- 3.2k
- Forks
- 1.3k
- PR merge metrics
- PR metrics pending
Description
At present, Audit is focused on CVEs in NuGet packages. It should be expanded more broadly. This will undoubtably need to be described in a spec.
Here's some ideas to report on:
- PackageRef lifts a package graph to a new major version
- PackageRef is to non-latest package
- PackageRef is to deprecated/unsupported packages
- PackageRef is to package that hasn't been updated in n months/years.
- TFM/target runtime is EOL
- TFM/target runtime doesn't support current OS
Tracking issues:
- https://github.com/NuGet/Home/pull/13598
- https://github.com/NuGet/Home/issues/14085
- https://github.com/NuGet/Home/issues/14087
- https://github.com/dotnet/core/issues/9714
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.