NuGet / Home

Repo for NuGet Client issues
Other
1.5k stars 253 forks source link

The vulnerability InfoBar in the Solution Explorer disappears when adding a new project #12891

Open CiciLi1 opened 1 year ago

CiciLi1 commented 1 year ago

NuGet Product Used

Visual Studio Package Management UI

Product Version

NuGet Client Dev\6.8.0.115

Worked before?

No response

Impact

It bothers me. A fix would be nice

Repro Steps & Context

Repro Steps:    

  1. Create a C# Console App (.Net core) project.    

  2. Right-click the project in Solution Explorer and select "Manage NuGet Packages…" menu item to open PM UI.

  3. Select the package source: “nuget.org” near the gear button.

  4. Go to the "Browse" tab and search for a vulnerable package (e.g. "Newtonsoft.Json").

  5. Select a vulnerable package version (e.g. 12.0.1) and click the “Install” button on the right.

  6. Right-click the solution in Solution Explorer window and add a new project.

  

Expected:     

The golden InfoBar and the link “Manage NuGet Packages” still show on the top of the Solution Explorer window since the message is “The solution contains package with vulnerabilities”.

Actual:     

The vulnerability InfoBar in the Solution Explorer disappears when adding a new project as below: info

Note: 

  1. The repro rate is 100%.     

  2. This is not a regression, since it is a new feature change. 

Verbose Logs

No response

erdembayar commented 10 months ago

I can repro this.

CiciLi1 commented 1 month ago

It still reproes on VS Main\35222.175 + NuGet Client Dev\6.12.0.82.