Deprecated dependencies make newest Visual Studio fail the build
When updating Visual Studio to latest version, it is now more thorough when reporting vulnerable dependencies.
My project references RazorLight (v2.3.1) NuGet package which in its turn references Microsoft.Extensions.Caching.Memory (v6.0.0) which has high vulnerability, hence error.
As a result I cannot build the project on new version of Visual Studio.
Can you please update dependencies to non-vulnerable versions?
That's an ideal first Pull Request you could make to the project, I'd be more than welcome to merge it
That's an ideal first Pull Request you could make to the project, I'd be more than welcome to merge it
While I would normally agree, the dependencies in RazorLight are particularly old and it is non-trivial for an "outsider" to upgrade them. There are many gotchas like Microsoft.AspNetCore.Hosting.Abstractions being deprecated in favor of Microsoft.Extensions.Hosting.Abstractions and similar.