dotnet-retire icon indicating copy to clipboard operation
dotnet-retire copied to clipboard

[Announcement] Deprecating `dotnet retire`

Open johnkors opened this issue 4 years ago • 0 comments

With the latest .NET 5 SDK (5.0.200) now including a vulnerability scanner, the CLI tool dotnet retire is no longer needed and will be deprecated. See https://devblogs.microsoft.com/nuget/how-to-scan-nuget-packages-for-security-vulnerabilities/.

Microsoft has so far no plans/ solutions for automating reporting on vulnerable runtimes , so that component will still live on here until they do (if they do).

johnkors avatar Mar 10 '21 10:03 johnkors