Is this project still maintained?

[kevinkuszyk]

Hi,

It doesn't look like there's been much activity recently.

I'm planning a cloud service which plugs into GitHub to check NuGet dependencies, but I don't want to re-invent there wheel or duplicate what you have here.

Best,
Kevin.

[damianh]

Lack of response would suggest it is not.

Although there have been commits since: ddf457e

[eoftedal]

I have not had the time to focus on this project, and it has been marked as inactive over at OWASP

[eoftedal]

That said, I did do a search through release notes on nuget before the most recent commit, and I couldn't find anything else that was marked as insecure in the repo. But there might be more as some of the nuget packages don't publish there release notes on nuget.org

[damianh]

Thanks for the update @eoftedal ; I will seek another way.

[felickz]

Looks like we need some updates for .NET Core...

3>Checking C:\Users\xyz\Source\xyz\packages.config ...
3>No packages.config found

[mcallaghan-bsm]

What is the plan? What is a recommended alternative?

[digitalcoyote]

What is the plan? What is a recommended alternative?

I'm a bit biased, but have a look at NuGetDefense