NuGet
NuGet in the Enterprise
Posted on April 11th, 2024.Learn about the complexities of NuGet, the risks of using third-party packages from NuGet.org, and how to effectively manage both proprietary and open-source packages in the enterprise.
Learn about the complexities of NuGet, the risks of using third-party packages from NuGet.org, and how to effectively manage both proprietary and open-source packages in the enterprise.
When you develop .NET applications, you most certainly will work with NuGet packages to manage libraries and dependencies. Making sure these packages are safe for production use is a crucial responsibility. Chances are you've also used the NuGet or dotnet CLI to scan all your packages.
Debugging your NuGet packages can be a total pain. In fact, it’s one of the main reasons that development teams are hesitant to break apart their monolithic .NET solution. Fortunately, there's a pretty easy solution to this problem; NuGet Symbol Packages. In this article I’ll discuss how.
This article is part of our series on NuGet at Scale, also available as a chapter in our free, downloadable eBook. Are you deploying applications to production with packages downloaded directly from NuGet.org? Many organizations start this way—it’s the default behavior of most NuGet clients. But while convenient, this approach can...
This article is part of our series on NuGet at Scale, also available as a chapter in our free, downloadable eBook. So, you set up a local, private NuGet repository on a network file share for your small team, and it worked great… At first. But as an organization scales and more packages (and more developers) join the mix, things...
A quick explainer article to understand Symbols and Symbol packages for NuGet package debugging.
Learn what Source Servers are, what SourceLink is, how they relate to Symbols, and how all three come together to help with NuGet package debugging.
When NuGet packages are stored on third-party platforms, proprietary stuff isn't private. Setting up a private NuGet server is free and easy.
What's the difference between GitHub Advisories, CVE, and NVD in terms of NuGet Vulnerability Scanning? How does it affect your packages?
NuGet.org is a great source for packages to jump-start a project, but it's important to filter packages from the open-source community before downloading.