muiriswoulfe/nuget-transitive-dependency-finder

The NuGet Transitive Dependency Finder analyzes .NET projects and solutions to find superfluous dependencies that have been explicitly added to projects. The goal is to simplify dependency management.

nuget-transitive-dependency-finder's Issues

Update .NET Core to v5.0.1

Summary

Update .NET Core to the latest version, v5.0.1.

Create new "all" mode for outputting all dependencies

Feature Request

Summary

Create a new "all" mode for outputting all dependencies, which will allow for the detection of version changes in non-transitive dependencies. This will reduce risk by allowing for the detection of unexpected changes as the result of changing the dependency list.

Proposed Solution

The list of non-transitive dependencies can be readily obtained from the current code, albeit after making some minor changes. This just needs to be exposed via the API and command-line options.

Alternatives Considered

In the future, it would be preferable to automate more of the logic to ensure that removal of transitive dependencies does not lead to other changes. However, that is likely to require significant changes that will delay immediate release. Therefore, the current design was selected as a tradeoff between convenience and speed of delivery.

Enable NuGet Publishing

Feature Request

Summary

Packages should be published to NuGet for consumption by other projects.

Proposed Solution

Automatic publishing of NuGet packages whenever the "release" GitHub Action is run.

Alternatives Considered

Manual publishing of the packages could be used, but this is open to error and is likely to be missed. Therefore, automatic publishing is recommended.

Update Support Information

Summary

Following general availability of Discussions as a GitHub feature, this project is dropping the provision of support via Issues.

Proposed Solution

This will require deleting the Support Request Issue template and updating all referencing documentation.

Add testing

Summary

Add tests for the project so that it becomes safer to make changes, reducing the risk of regressions.

Depedancy Removal

Summary

Thanks for your excellent tool, I needed something just like it but to automatically remove the transitive dependencies as well. I'd happily clean up what I have and submit a pull request if you're looking for contributions of this sort.

Proposed Solution

Submit pull request adding a remove transitive dependencies mode & corresponding flag

Alternatives Considered

Additional Information

Update GitHub Actions Markdown Link Checker

Summary

Update the GitHub Actions Markdown Link Checker to the latest version

Update to .NET 5.0

Feature Request

Summary

.NET 5.0 was released on 10 November 2020. The project should be upgraded from .NET Core 3.1 and .NET Standard 2.1 to the unifying version of .NET 5.0 to simplify the solution and leverage the latest advancements.

Proposed Solution

Upgrading to .NET 5.0.

Alternatives Considered

Leaving the .NET version as is. This will work, but it would mean that the project would become increasingly out of date, unable to leverage the latest advances in .NET.

Additional Information

Release details can be located at https://github.com/dotnet/core/releases/tag/v5.0.0.

Enhance GitHub Actions

Feature Request

Summary

The GitHub Actions should be enhanced for clarity and to leverage the latest code scanning technologies available.

Proposed Solution

• Enhance readability of GitHub Actions YAML.
• Onboard CodeQL for security scanning.
• Onboard Security Scan for security and license scanning.
• Resolve issues identified.

Alternatives Considered

The Actions could be left unchanged, but this would lead to decreased security and lower readability.

Additional Information

N/A