Nuget 安全漏洞?

Nuget Security Vulnerabilities?

通过安装nuget包,我们是下载源代码还是二进制文件?

我们如何检查包裹是否没有安全漏洞

By installing nuget packages, do we download source codes or binary files?

是的,二进制文件会自动下载。

How do we check if the package is free from security vulnerabilities?

您可以使用 dotnet.exe: dotnet list package --vulnerable。 link: How to Scan NuGet Packages for Security Vulnerabilities