The NuGet Blog

NuGet.org will only support MSA/AAD starting June 1st, 2018

Anand Gaurav May 15, 2018 May 15, 2018 05/15/18

We had previously announced the deprecation of NuGet.org's home-grown authentication in favor of Microsoft accounts (MSA) that will allow us to add support for additional security systems such as two-factor authentication (2FA). We will be disabling the NuGet.org's home-grown authentication mechanism starting June 1st, 2018. This means that ...

Welcoming SymbolSource to the .NET Foundation

Karan Nandwani May 1, 2018 May 1, 2018 05/1/18

We are excited to welcome SymbolSource.org to the .NET Foundation! SymbolSource has been providing a valuable service to the .NET Community for years with the ability to host Symbols for public NuGet packages on SymbolSource. With recent progress made in several areas, including SymbolSource being published to GitHub and NuGet.org planning a ...

Organizations on NuGet.org

Anand Gaurav April 17, 2018 Apr 17, 2018 04/17/18

We are happy to announce support for Organizations on NuGet.org. This will help businesses and open-source projects collaborate on packages using a single nuget.org identity. Why organizations? NuGet.org used to allow you to create an account and publish packages through that account with little support to manage and publish packages as a ...

Migrate to PackageReference with 3 clicks

Karan Nandwani April 9, 2018 Apr 9, 2018 04/9/18

Last year, we introduced the option to make PackageReference the default package management format for managing NuGet dependencies when installing the first NuGet package for a newly created projects. With Visual Studio Version 15.7 Preview 3, we have introduced the capability to migrate existing projects that use the packages.config format to...

Incident report – NuGet.org downtime on March 22, 2018

Svetlana Kofman March 22, 2018 Mar 22, 2018 03/22/18

We did this blog post to report about the incident that happened on March 22, 2018. In the last couple of days we digged deeper into the incident. Here is the summary of our findings and proposed next steps. Customer Impact NuGet.org website and V2 APIs were unavailable for 2 hours on March 22, 2018 between 8:45AM - 11:30AM UTC. More than 1....

NuGet Spring 2018 Roadmap

Anand Gaurav March 1, 2018 Mar 1, 2018 03/1/18

In August 2017, we published the NuGet Fall 2017 Roadmap where we outlined our backlog for the upcoming quarter. Since then, we’ve published specifications for these experiences on GitHub for the community to review. You have provided a ton of great feedback that has helped us ensure we deliver the right experiences. Thank you for your ...

Deprecating NuGet.org authentication

Anand Gaurav February 27, 2018 Feb 27, 2018 02/27/18

As announced in our NuGet Fall 2017 Roadmap blog post, we are transitioning away from NuGet.org’s home-grown authentication mechanism which will eventually allow us to add support for additional security systems such as two-factor authentication (2-FA). In preparation for this transition, we had already added support for Microsoft accounts (...

NuGet.org package publishing workflow – behind the scenes

Anand Gaurav February 1, 2018 Feb 1, 2018 02/1/18

In December 2017, we changed the NuGet.org backend publishing pipeline to introduce a set of validation steps for submitted packages. Our goal is to maintain the same level of experience in terms of the time and effort it would take to publish a package and have it available for download. However, these new validation steps caused a few ...

NuGet Package Signing

Rido September 14, 2017 Sep 14, 2017 09/14/17

In our NuGet Fall 2017 Roadmap, we highlighted security as the main area of investment over the next few months. This blog post describes a major part of that roadmap in greater detail – package signing. We started talking about supporting signed packages on NuGet.org a while ago. For example, in 2015 we published a post on Package Signing ...

Changes to NuGet.org service management, and performance improvements in China

Karan Nandwani September 7, 2017 Sep 7, 2017 09/7/17

NuGet.org, the package manager for .NET, was purpose-built as a global service with high scale performance regardless of the developer’s location. We are finding that this is not always the case, particularly for developers accessing the service from China, which is the second largest region for .NET developers. They frequently face higher ...