Featured
Posted by
Eric Seng on October 9th, 2023.
When you develop .NET applications, you most certainly will work with NuGet packages to manage libraries and dependencies. Making sure these packages are safe for production use is a crucial responsibility. Chances are you've also used the NuGet or dotnet CLI to scan all your packages.
Featured
Posted by
Eric Seng on October 2nd, 2023.
Debugging your NuGet packages can be a total pain. In fact, it’s one of the main reasons that development teams are hesitant to break apart their monolithic .NET solution.
Fortunately, there's a pretty easy solution to this problem; NuGet Symbol Packages. In this article I’ll discuss how.
Featured
Posted by
Eric Seng on September 27th, 2023.
Are you deploying applications to production with packages downloaded directly from NuGet.org? A lot of organizations do this. It’s basically the default approach for working with NuGet packages. But it’s not a secure approach, and it can lead to a lot of problems down the line. Packages from NuGet.org are not vetted for...
Featured
Posted by
Eric Seng on July 12th, 2023.
So, you set up a local NuGet feed on a network file share for your team small. But as you and the team add more and more packages to your feed, things start slowing down. It’s also a bit inconvenient to use a network share when everything is web-based, especially over a VPN. Local NuGet feeds are simple: it’s just a...
Featured
Posted by
Eric Seng on May 9th, 2023.
Learn what Source Servers are, what SourceLink is, how they relate to Symbols, and how all three come together to help with NuGet package debugging.
Featured
Posted by
Eric Seng on May 1st, 2023.
What's the difference between GitHub Advisories, CVE, and NVD in terms of NuGet Vulnerability Scanning? How does it affect your packages?