Consider Removal of Moq due to Privacy and data exfiltration Issues

microsoftgraph / msgraph-sdk-dotnet

Microsoft Graph Client Library for .NET!

https://graph.microsoft.com

Other

703 stars 248 forks source link

Consider Removal of Moq due to Privacy and data exfiltration Issues #2090

Open madhon opened 1 year ago

madhon commented 1 year ago

Consider removing Moq due to the following concerns.

Devlooped.SponsorLink must not perform I/O outside of compiler APIs
Harvesting user email addresses without any form of consent is against GDPR regulation
Will cause packages to be no-go in corporate
Privacy issues with SponsorLink, starting from version 4.20

MerijnHendriks commented 8 months ago

What's the current status on this?

madhon commented 6 months ago

What's the current status on this?

Looks like they are ignoring it....

timvandenhof commented 6 months ago

Well, Moq did reverse the SponsorLink integration: Restore GDPR compliance and privacy #1402

andrueastman commented 6 months ago

We're keeping this open in case the scenario changes. However, as @timvandenhof mentioned, latest release of Moq reverted/fixed the concerns raised. So, there will probably be no change here in the short term.