search

microsoft / OSSGadget

Collection of tools for analyzing open source packages.
MIT License
311 stars 47 forks source link

Replace moq with NSubstitute #441

Open gfs opened 1 year ago

gfs commented 1 year ago

Starting with Moq 4.20, Moq includes an opaque blob (SponsorLink) that appears to harvest e-mail addresses from the git config using a source analyzer.

https://github.com/moq/moq/issues/1372

scovetta commented 1 year ago

We could also lock to 4.18.2 for the time being to see where this goes.

https://github.com/Azure/azure-sdk-for-net/issues/38111#issuecomment-1671367977

gfs commented 1 year ago

I found this gist that may help with migrating: https://gist.github.com/AlbertoMonteiro/daeab549df57727ddaa7

I've also opened a PR to lock the version in the interim. #442