search

pumasecurity / puma-scan

Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
https://www.pumascan.com
Mozilla Public License 2.0
447 stars 79 forks source link

Set NuGet Package as DevelopmentDependency #27

Closed kyleherzog closed 7 years ago

kyleherzog commented 7 years ago

The PumaScan NuGet package should set itself as a development dependency, as it is a dependency that is only useful for development and should not be required by other packages by default. This can be done by adding the following to the .nuspec file.

<developmentDependency>true</developmentDependency>
ejohn20 commented 7 years ago

Sounds simple enough. Adding this to the next release. Does this have any downstream effects on the rules running during MSBuild?

kyleherzog commented 7 years ago

Personally, I haven't experienced any impact to the MSBuild process by adding this setting.

ejohn20 commented 7 years ago

Released.