The NuGet Blog

Deprecating NuGet.org authentication

Anand GauravFebruary 27, 2018Feb 27, 201802/27/18

As announced in our NuGet Fall 2017 Roadmap blog post, we are transitioning away from NuGet.org’s home-grown authentication mechanism which will eventually allow us to add support for additional security systems such as two-factor authentication (2-FA). In preparation for this transition, we had already added support for Microsoft accounts (

NuGet.org package publishing workflow – behind the scenes

Anand GauravFebruary 1, 2018Feb 1, 201802/1/18

In December 2017, we changed the NuGet.org backend publishing pipeline to introduce a set of validation steps for submitted packages. Our goal is to maintain the same level of experience in terms of the time and effort it would take to publish a package and have it available for download. However, these new validation steps caused a few incide

NuGet Package Signing

RidoSeptember 14, 2017Sep 14, 201709/14/17

In our NuGet Fall 2017 Roadmap, we highlighted security as the main area of investment over the next few months. This blog post describes a major part of that roadmap in greater detail – package signing. We started talking about supporting signed packages on NuGet.org a while ago. For example, in 2015 we published a post on Package Signing

Changes to NuGet.org service management, and performance improvements in China

Karan NandwaniSeptember 7, 2017Sep 7, 201709/7/17

NuGet.org, the package manager for .NET, was purpose-built as a global service with high scale performance regardless of the developer’s location. We are finding that this is not always the case, particularly for developers accessing the service from China, which is the second largest region for .NET developers. They frequently face higher d

What’s Nu in NuGet with Visual Studio 2017 version 15.3?

Anand GauravAugust 15, 2017Aug 15, 201708/15/17

We are happy to announce an update to the NuGet client that comes bundled with Visual Studio 2017 version 15.3 RTW and .NET Core 2.0 SDK. This release introduces support for new scenarios such as .NET Core 2.0/.NET Standard 2.0, some new features, a series of bug fixes and performance improvements. You can see more details, known issues, and w

NuGet Fall 2017 Roadmap

Unni RavindranathanAugust 9, 2017Aug 9, 201708/9/17

Over the past 6 months, the NuGet team has been working hard to ensure the growth of the .NET ecosystem. NuGet has grown significantly during this timeframe: NuGet.org is closing in on 4 billion packages served (up from a billion packages just a year ago), we have enabled new .NET scenarios such as .NET Standard 2.0, and have improved the over

NuGet.org Gets a Facelift

Jon ChuJuly 18, 2017Jul 18, 201707/18/17

It’s been a long time coming, and today we are excited to announce some big changes coming to NuGet.org. With almost 3 million monthly page views, NuGet.org is the gateway for .NET developers to find packages that accelerate their projects. However, as a package management website, so much more can be done. We decided to give NuGet.org a r

NuGet Package Identity and Trust

Daniel JacobsonApril 17, 2017Apr 17, 201704/17/17

Update on 10/16/2017: Package ID Prefix Reservation is now live. The documentation can be found here. We want to start this post with a huge thanks to you, the NuGet community. Over the last several months we have been talking to many of you to get feedback on NuGet package identity and trust. We’ve learned so much from you and we hope that

NuGet is now fully integrated into MSBuild

Karan NandwaniMarch 16, 2017Mar 16, 201703/16/17

In the past, NuGet packages were managed in two different ways - packages.config and project.json - each with their own sets of advantages and limitations. With Visual Studio 2017 and .NET Core, we have improved the NuGet package management experience by introducing the PackageReference feature in MSBuild. PackageReference brings new and impro

Introducing scoped API keys

Anand GauravFebruary 2, 2017Feb 2, 201702/2/17

Update 2/14 (05:00 PM PST): This feature is now live! Login to your nuget account and expand the API Keys section to see the new experience. Since last year, we have been working on several fronts to advance NuGet as a secure environment for package distribution. This post describes an experience that will allow you to have better control of