Automic VaultAutomic Vault

brew

nuget mit Homebrew, dnf, Nix, pacman, scoop, winget installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für nuget in AI-Agent-Workflows.

Agent-Sicherheit

Antwort zur Agent-Sicherheit

nuget manages .NET packages and registry publishing.

Credential-Zugriff

Reads NuGet API keys, package source credentials, and config files.

Änderungen an Remote-Zustand

Can push packages and change package-source state.

Publish-/Artefakt-Risiko

Can publish .NET packages and symbols.

Empfohlene Kontrolle

Gate push, delete, source credential, and API-key commands.

Hinweise für Agent-Nutzung

Allow restore/list; require approval for package publication and credential changes.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install nuget

local Homebrew formula metadata

Linux

Fedora dnfverifiziert · 92%
sudo dnf install nuget

Fedora Rawhide package metadata · nuget · Quelle: dl.fedoraproject.org

Nixverifiziert · 92%
nix profile install nixpkgs#nuget

nixpkgs package indexes · pkgs/by-name/nu/nuget/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%
sudo pacman -S nuget

Arch Linux sync databases · nuget · Quelle: geo.mirror.pkgbuild.com

Windows

Scoopverifiziert · 92%
scoop install main/nuget

Scoop official bucket manifest trees · bucket/nuget.json · Quelle: api.github.com

Windows Package Managerverifiziert · 92%
winget install --id Microsoft.NuGet -e

Windows Package Manager source index · Microsoft.NuGet · Quelle: cdn.winget.microsoft.com

Überblick

Paketzusammenfassung

Package manager for Microsoft development platform including .NET

Verlauf

Projektgeschichte und Nutzung

NuGet is the canonical package manager for the Microsoft .NET ecosystem: a client toolchain, package format, public gallery, and set of repository conventions for creating, publishing, restoring, and consuming .NET libraries.

Projektgeschichte

The project began in 2010 as NuPack in the ASP.NET / Microsoft web tooling orbit. Phil Haack's October 6, 2010 announcement described it as an open source, developer-focused package manager for simplifying third-party library use in .NET applications, and said the Outercurve Foundation had accepted the project into the ASP.NET Open Source Gallery.

The NuPack name was quickly changed. Haack's October 21, 2010 post opened public voting on replacement names, and his October 29, 2010 follow-up announced NuGet as the winner. That rename is part of NuGet lore because it tied the package manager's identity to community input before the project settled into the .NET platform.

Adoptionsgeschichte

NuGet solved a very visible .NET pain point: finding libraries, adding assembly references, putting files in predictable project locations, applying config transforms, and updating dependencies. A November 2011 MSDN Magazine article presented NuGet as the rescue path from manual library download and reference management, and noted that ASP.NET MVC 3 already included it.

NuGet's adoption is structural rather than just CLI popularity. Microsoft Learn describes NuGet packages as .nupkg zip files carrying compiled code, related files, and manifest metadata; package authors publish them to public or private hosts, while consumers add them to projects and call the package functionality from application code. NuGet.org is the central public repository for that workflow.

Homebrew packages the standalone `nuget` command for macOS/Linux users outside Visual Studio. The Homebrew formula showed stable version 7.6.0 and 26,865 installs over the 365-day analytics window visible on July 1, 2026.

Wie es verwendet wird

Package nerds use NuGet in three overlapping ways: `nuget.exe` for pack/push/restore workflows, Visual Studio's package manager UI and console for project work, and modern SDK/MSBuild restore paths for repeatable CI. The important artifact is the `.nupkg`, whose ID, semantic version, dependencies, target framework assets, metadata, and source repository fields become part of the .NET dependency graph.

Practical usage is not only installing public packages. Organizations run private NuGet feeds for internal libraries, mirror/cache packages for build reproducibility, pin or float versions through project files and lock files, and publish prerelease packages from CI before promoting stable versions to nuget.org or an internal feed.

Warum Paket-Nerds sich dafür interessieren

NuGet is infrastructure for the .NET supply chain. It defines the default package unit, public distribution hub, and restore semantics for a large share of .NET application builds, which makes it comparable in ecosystem role to npm for JavaScript or PyPI/pip for Python.

Zeitleiste

  • 2010-10-06: NuPack/NuGet announced as an open source .NET package manager accepted by the Outercurve Foundation into the ASP.NET Open Source Gallery.
  • 2010-10-21: NuPack rename vote opened.
  • 2010-10-29: NuGet announced as the selected name.
  • 2011-11: MSDN Magazine documented NuGet's package-install, update, and PowerShell-console workflows for Visual Studio users.

Related projects

  • NuGet Gallery
  • NuGet.Client
  • NuGet/Home
  • .NET SDK restore
  • MSBuild

Sicherheitslage

Risikostufe: orange

infrastructure mutation or orchestration signal.

Risikoklassifikator

orange Risiko · mittel Konfidenz · infrastructure

Warum

  • infrastructure mutation or orchestration signal

Signale

  • text:package manager

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 1 Plattformziele verfügbar.
  • Installiert mit 1 Laufzeitabhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
~/.nuget/NuGet/NuGet.Config~/.config/NuGet/NuGet.Config

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix
~/.nuget/NuGet/NuGet.Config~/.config/NuGet/NuGet.Config

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
nugetcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-26
Manager-Version7.6.0
Manager aktualisiert2026-05-14
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://www.nuget.org/

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:nuget
Version7.6.0
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/nuget
Homepagehttps://www.nuget.org/
Repositoryhttps://github.com/NuGet/NuGet.Client
Upstream-Dokumentationhttps://learn.microsoft.com/en-us/nuget
LizenzMIT
Quellarchivhttps://dist.nuget.org/win-x86-commandline/v7.6.0/nuget.exe
Zuletzt aktualisiert2026-05-14T02:59:39Z
Pulseupdated
Abhängigkeitenmono
Bottleverfügbar (auf all)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namenuget
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

nuget

nix profile install nixpkgs#nuget
  • normalized package name match
  • Abgeglichen nach: Nuget
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/nu/nuget/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
dnf95%

nuget 2.8.7-24.fc44

Package manager for .Net/Mono development platform

http://nuget.org/

sudo dnf install nuget
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: i686
  • Source Package: nuget
  • 2 Abhängigkeiten
  • 2 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Nuget
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: nuget from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
dnf95%

nuget-devel 2.8.7-24.fc44

Development files for nuget

http://nuget.org/

sudo dnf install nuget-devel
  • License: Apache-2.0
  • Category: Unspecified
  • Architecture: i686
  • Source Package: nuget
  • 2 Abhängigkeiten
  • 2 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Nuget
Fedora Rawhide package metadata · dl.fedoraproject.org · Fedora Rawhide package metadata: nuget-devel from https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Everything/x86_64/os/repodata/e5ca8ce900cd68f5419e1c39ae517343100b306336cbaeb70a3c153121d95094-primary.xml.zst
pacman95%

nuget 6.11.1-1

Package manager for .NET.

https://www.nuget.org

sudo pacman -S nuget
  • License: APACHE
  • Architecture: any
  • 2 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Nuget
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: nuget from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
Scoop95%

main/nuget

scoop install main/nuget
  • normalized package name match
  • Abgeglichen nach: Nuget
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/nuget.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

Microsoft.NuGet

winget install --id Microsoft.NuGet -e
  • normalized package name match
  • Abgeglichen nach: Nuget
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Microsoft.NuGet from https://cdn.winget.microsoft.com/cache/source.msix

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment