PackageVulnerabilityChecker 1.0.3

PackageVulnerabilityChecker v1.0.3

Detect and audit NuGet package versions and vulnerabilities in your .NET projects.

📦 What is it?

PackageVulnerabilityChecker is a lightweight yet powerful CLI tool that scans your .csproj files to:

• List NuGet packages you're using.
• Check if they are up to date.
• Detect known vulnerabilities via Sonatype OSS Index.
• Generate clear, color-coded reports with upgrade suggestions and alerts.

It helps keep your dependencies secure and current with minimal effort.

✨ New in v1.0.3

This release introduces important improvements to help you integrate the tool seamlessly into your CI/CD pipelines:

• --fail-on-vulnerabilities
  When this flag is active, the tool will cause the pipeline to fail if any vulnerabilities are detected, enabling strict enforcement of security standards during automated builds.

• --output <filename>.json
  Generate a detailed vulnerability report in JSON format with the filename you specify.
  The file is saved at the root of your project, making it easy to consume or publish as a build artifact.

• Improved visual output in the console with enhanced color-coding for better readability.

🚀 Getting Started

dotnet tool install --global PackageVulnerabilityChecker  
packagevulnerabilitychecker path/to/your/Project.csproj