Support for additional Nuget feeds

[priorax]

Story

As a engineer who utilises private feeds, I want to be able to scan internal packages, so that I am also conscious of drift from internal standards.

Current research done

At the moment it looks like the URL for api.nuget is hard coded, is it possible to have this project either utilise the package sources section of nuget.config file or at least an environment variable so that multiple feeds could be targetted?

I did a very quick look (and hope to look further tonight) and I think the main concerns I would have if you'd like me to contribute this would be:

• Where in a repository is a nuget.config file supported (eg, top level only, or is the first file found utilised)?
• Is any validation required for the use of <clear /> or is it just a case of "anything listed takes priority"?
• Is any authentication required that should be considered?