認証情報アクセス
Reads NuGet API keys, package source credentials, and config files.
brew
nuget のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。
エージェント安全性
nuget manages .NET packages and registry publishing.
Reads NuGet API keys, package source credentials, and config files.
Can push packages and change package-source state.
Can publish .NET packages and symbols.
Gate push, delete, source credential, and API-key commands.
Allow restore/list; require approval for package publication and credential changes.
インストール
brew install nugetlocal Homebrew formula metadata
sudo dnf install nugetFedora Rawhide package metadata · nuget · ソース: dl.fedoraproject.org
nix profile install nixpkgs#nugetnixpkgs package indexes · pkgs/by-name/nu/nuget/package.nix · ソース: api.github.com
sudo pacman -S nugetArch Linux sync databases · nuget · ソース: geo.mirror.pkgbuild.com
scoop install main/nugetScoop official bucket manifest trees · bucket/nuget.json · ソース: api.github.com
winget install --id Microsoft.NuGet -eWindows Package Manager source index · Microsoft.NuGet · ソース: cdn.winget.microsoft.com
概要
Package manager for Microsoft development platform including .NET
履歴
NuGet is the canonical package manager for the Microsoft .NET ecosystem: a client toolchain, package format, public gallery, and set of repository conventions for creating, publishing, restoring, and consuming .NET libraries.
The project began in 2010 as NuPack in the ASP.NET / Microsoft web tooling orbit. Phil Haack's October 6, 2010 announcement described it as an open source, developer-focused package manager for simplifying third-party library use in .NET applications, and said the Outercurve Foundation had accepted the project into the ASP.NET Open Source Gallery.
The NuPack name was quickly changed. Haack's October 21, 2010 post opened public voting on replacement names, and his October 29, 2010 follow-up announced NuGet as the winner. That rename is part of NuGet lore because it tied the package manager's identity to community input before the project settled into the .NET platform.
NuGet solved a very visible .NET pain point: finding libraries, adding assembly references, putting files in predictable project locations, applying config transforms, and updating dependencies. A November 2011 MSDN Magazine article presented NuGet as the rescue path from manual library download and reference management, and noted that ASP.NET MVC 3 already included it.
NuGet's adoption is structural rather than just CLI popularity. Microsoft Learn describes NuGet packages as .nupkg zip files carrying compiled code, related files, and manifest metadata; package authors publish them to public or private hosts, while consumers add them to projects and call the package functionality from application code. NuGet.org is the central public repository for that workflow.
Homebrew packages the standalone `nuget` command for macOS/Linux users outside Visual Studio. The Homebrew formula showed stable version 7.6.0 and 26,865 installs over the 365-day analytics window visible on July 1, 2026.
Package nerds use NuGet in three overlapping ways: `nuget.exe` for pack/push/restore workflows, Visual Studio's package manager UI and console for project work, and modern SDK/MSBuild restore paths for repeatable CI. The important artifact is the `.nupkg`, whose ID, semantic version, dependencies, target framework assets, metadata, and source repository fields become part of the .NET dependency graph.
Practical usage is not only installing public packages. Organizations run private NuGet feeds for internal libraries, mirror/cache packages for build reproducibility, pin or float versions through project files and lock files, and publish prerelease packages from CI before promoting stable versions to nuget.org or an internal feed.
NuGet is infrastructure for the .NET supply chain. It defines the default package unit, public distribution hub, and restore semantics for a large share of .NET application builds, which makes it comparable in ecosystem role to npm for JavaScript or PyPI/pip for Python.
セキュリティ状態
infrastructure mutation or orchestration signal.
リスク orange · 信頼度 中 · infrastructure
エージェントに無人実行させる前に、このツールが平文の認証情報を読むか、リモート状態を書き込むか、成果物を公開するか、プラグインを起動するかを確認してください。
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
~/.nuget/NuGet/NuGet.Config~/.config/NuGet/NuGet.ConfigCredential-bearing paths to review before unattended agent runs.
~/.nuget/NuGet/NuGet.Config~/.config/NuGet/NuGet.Config実行可能ファイル
| コマンド | 種類 | 公開範囲 | メモ |
|---|---|---|---|
nuget | cli | グローバル実行可能ファイル |
鮮度
これらの信号は、ページ生成時期、パッケージマネージャの活動、上流リリース比較を分けて示します。バージョン遅れは、証拠 URL と比較可能なバージョンがある場合だけ警告されます。
インストールメタデータ
| パッケージキー | brew:nuget |
|---|---|
| バージョン | 7.6.0 |
| パッケージマネージャ | Homebrew |
| パッケージマネージャページ | https://formulae.brew.sh/formula/nuget |
| ホームページ | https://www.nuget.org/ |
| リポジトリ | https://github.com/NuGet/NuGet.Client |
| 上流ドキュメント | https://learn.microsoft.com/en-us/nuget |
| ライセンス | MIT |
| ソースアーカイブ | https://dist.nuget.org/win-x86-commandline/v7.6.0/nuget.exe |
| 最終更新 | 2026-05-14T02:59:39Z |
| Pulse | updated |
| 依存関係 | mono |
| Bottle | 利用可能 (対象 all) |
| Homebrew post-install | 未定義 |
| サービス | 宣言なし |
レジストリ情報
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | nuget |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
ソースデータベース一致
一致は外部パッケージマネージャインデックスから取得され、ローカルの Automic Vault パッケージリンクとは分けて表示されます。
nuget
nix profile install nixpkgs#nugetnuget 2.8.7-24.fc44
Package manager for .Net/Mono development platform
sudo dnf install nugetnuget-devel 2.8.7-24.fc44
Development files for nuget
sudo dnf install nuget-develnuget 6.11.1-1
Package manager for .NET.
sudo pacman -S nugetmain/nuget
scoop install main/nugetMicrosoft.NuGet
winget install --id Microsoft.NuGet -eソース経路
このページは scripts/generate-pkg-sqlite.py が生成した非公開のパッケージ SQLite アーティファクトから av-web によって提供されます。
View the package source record on GitHub.