search

aboutcode-org / nuget-inspector

Inspect and resolve .NET and NuGet package dependencies like dotnet and nuget do. Fetch manifests data. Runs on Linux, Windows and macOS as a standalone application.
https://github.com/nexB/nuget-inspector
4 stars 4 forks source link

No package metadata found warning for project references #53

Open georg-eckert-zeiss opened 4 months ago

georg-eckert-zeiss commented 4 months ago

Hi everyone,

when analyzing my project with nuget-inspector I get lots of warnings like the following:

nuget-inspector \
  --project-file=src/B/B/B.csproj \
  --nuget-config="src/nuget.config" \
  --json="nuget-inspector-results/results.json"

Effective project framework: net8.0-windows10.0.22621 
Loading nuget.config: src/nuget.config

PopulateResources: Loaded 2 package sources from nuget.config
    AddSourceRepo: adding new https://api.nuget.org/v3/index.json
    AddSourceRepo: adding new https://pkgs.dev.azure.com/internal/A/_packaging/A-Dependencies/nuget/v3/index.json

ProjectScanner: Using filename as project name: B
      No project version found

Running scan of: src/B/B/B.csproj with fallback: False
  Using project-assets.json lockfile at: /home/myuser/src/B/B/obj/project.assets.json
LockFile: NuGet.ProjectModel.LockFile
LockFile.Path: /home/myuser/src/B/B/obj/project.assets.json
LockFile.PackageSpec: NuGet.ProjectModel.PackageSpec
LockFile.PackageSpec.TargetFrameworks: System.Collections.Generic.List`1[NuGet.ProjectModel.TargetFrameworkInformation]
    Found #27 dependencies with data_source_id: dotnet-project.assets.json
    Project resolved: B
      Fetching package metadata for: System.Reactive.6.0.0
      Fetching package metadata for: System.Reactive.6.0.0
    Nuspec copyright: Copyright (c) .NET Foundation and Contributors.
    Nuspec repo.type: git
    Nuspec repo.url: https://github.com/dotnet/reactive
    Nuspec repo.branch: 
    Nuspec repo.commit: e29c7a50db88513a87651c366088da8b7f40b1f0
# ISSUES STARTING HERE
      Fetching package metadata for: B.Application.1.2.3
No package metadata found for B.Application.1.2.3.
        Failed to get remote metadata for name: 'B.Application' version: '1.2.3'. 
      Fetching package metadata for: B.Core.1.2.3
No package metadata found for B.Core.1.2.3.

<truncated>

This is to be expected since those are my own projects which reside in the same parent directory. What is the correct way to handle this?

Best regards.

sschuberth commented 3 months ago

Sounds a bit related to https://github.com/nexB/nuget-inspector/issues/37.