Open WeihanLi opened 3 months ago
@WeihanLi
Are you asking for a CLI addition or an SDK? I see you've selected all options.
@nkolev92 yes, I only know I could operate on nuget.org website, is there an HTTP API for this? In addition to the http API, the CLI/SDK support would be great, we could use the CLI from dotnet SDK easily in a CI step
I wasn't referring to the HTTP API.
CLI = dotnet.exe functionality SDK = NuGet.Protocol package https://www.nuget.org/packages/NuGet.Protocol/6.11.0-preview.2, so that people can implement it individiually.
Sounds like your preference is more about the CLI though, so I'll mark it as such.
Yep, think both SDK and CLI needed, and I suppose the SDK is based on the HTTP API, is it right? Find a little info about vulnerability-info: https://learn.microsoft.com/en-us/nuget/api/vulnerability-info#samples , but seemed had to analyze the whole files, any query parameter to filter by packageId and package version?
Vulnerability info is a static resource, so no query parameters.
NuGet Product(s) Involved
NuGet.exe, dotnet.exe, NuGet SDK
The Elevator Pitch
Some packages are deprecated as scheduled, it would be great if we could support package deprecation via API, so that we could automate the deprecation process in automation job/CI etc
Additional Context and Details
No response