ssg / SimpleBase

.NET library for encoding/decoding Base16, Base32, Base58 and Base85.
Apache License 2.0
147 stars 21 forks source link

Binaries contained in nuget are not generated using a strong name #60

Closed alonsoto closed 1 month ago

alonsoto commented 1 month ago

Binaries contained in your NuGet are not generated using a strong name, when we use your asset as third party we receive the advise from Cybersecure auditory.

Use strong-naming have some benefits explained by Microsoft official documentation

https://learn.microsoft.com/en-us/dotnet/standard/library-guidance/strong-naming

The benefits of strong naming on .NET Framework are:

Thanks in advance.

ssg commented 1 month ago

You should strong name your open-source .NET libraries if their targets include .NET Framework or .NET Standard. Strong naming is not required for libraries that target .NET Core/5+ only.

https://github.com/dotnet/docs/blob/main/docs/standard/library-guidance/strong-naming.md#create-strong-named-net-libraries