dotnet / roslyn

The Roslyn .NET compiler provides C# and Visual Basic languages with rich code analysis APIs.
https://docs.microsoft.com/dotnet/csharp/roslyn-sdk/
MIT License
19.07k stars 4.04k forks source link

Create a single nuget feed with upstreams #71667

Open tmat opened 10 months ago

tmat commented 10 months ago

Currently our nuget.config file has many feeds. We should replace it with a single one that aggregates them.

Alternatively, we would need to define nuget mapping: https://aka.ms/nuget-package-source-mapping

jaredpar commented 10 months ago

The problem with single feeds is they are not OSS friendly. The restore operation is a read / write, not a pure read, for the first time restore of a packge. That means that to reliably restore you need to auth first.

ViktorHofer commented 9 months ago

cc @mmitche

mmitche commented 9 months ago

We're still waiting on better guidance from 1ES. We sent a proposal over (which includes allowing what we do today).