Curtis Carter
Curtis Carter
Plugins for Milkman that currently do not have a Chocolatey package need to be added and then the plugins meta-package needs to be updated to depend on them. This can...
Keeping these packages up to date is made possible via automation. However, the descriptions are often cut out of the original projects readme files. For this I'm looking for PR's...
**Describe the bug** per #82 NVD scan did not report the vulnerability in version 1.11.23 of Microsoft.ChakraCore **To Reproduce** Steps to reproduce the behavior: 1. Add Microsoft.ChakraCore 1.11.23 to a...
**Describe the bug** `--vulnerability-data-bin` was never hooked up and does nothing. **Expected behavior** NuGetDefense.NVD and NuGetDefense need to be modified to allow passing in the Offline Vulnerability Data path for...
**What is the Feature? Please describe.** It's not clear what the key is in the dictionaries without looking further into NuGetDefense. This needs to be reworked for anyone using NuGetDefense...
I'd love to get some documentation started for the 3.x branch. Any PR's should be in the form of edits to the ReadMe on the 3.x branch or additional markdown...
Added Chocolatey Install Instructions
## Added Chocolatey install instructions - Link to Chocolatey's Why-Chocolatey Page for users who don't recognize it - I can add links to each package as well - Example command...
**What is the Feature? Please describe.** The NuGet team has expressed that 6.8 includes all the vulnerability features needed and as long as NuGetDefense can parse them out, there is...
**What is the Feature? Please describe.** Update to pull data from the newer NVD API's **Additional context** They are deprecating and soon disabling the older feeds so this will need...