Credential access
Reads NuGet API keys, package source credentials, and config files.
agent safety
Agent safety answer
nuget manages .NET packages and registry publishing.
Remote mutation
Can push packages and change package-source state.
Publish/artifact risk
Can publish .NET packages and symbols.
Recommended control
Gate push, delete, source credential, and API-key commands.
Agent-use guidance
Allow restore/list; require approval for package publication and credential changes.
安装
使用 Automic Vault 安装
Automic Vault
sudo av install brew:nugetmacOS
Homebrewverified · 100%
brew install nugetlocal Homebrew formula metadata
Linux
Fedora dnfverified · 92%
sudo dnf install nugetFedora Rawhide package metadata · nuget · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#nugetnixpkgs package indexes · pkgs/by-name/nu/nuget/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S nugetArch Linux sync databases · nuget · source: geo.mirror.pkgbuild.com
Windows
Scoopverified · 92%
scoop install main/nugetScoop official bucket manifest trees · bucket/nuget.json · source: api.github.com
Windows Package Managerverified · 92%
winget install --id Microsoft.NuGet -eWindows Package Manager source index · Microsoft.NuGet · source: cdn.winget.microsoft.com
软件包管理器来源
平台说明
- 没有特定于此软件包的平台说明。
概览
软件包摘要
Package manager for Microsoft development platform including .NET
主页
命令和别名
- nuget
受保护工具覆盖
Plain Text NuGet Config Secrets
NuGet stores package source credentials, API keys, proxy passwords, and client certificate passwords in user-level NuGet.Config files. Our isotope stores the user NuGet.Config files in the macOS keychain, exposes package source credentials through NuGet's native credential provider protocol, and keeps unsupported config secrets in temporary sanitized config files while `nuget` runs.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- infrastructure mutation or orchestration signal
Signals
- text:package manager
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 1 platform targets.
- Installs with 1 runtime dependencies.
本地 README 摘录
nuget
NuGet stores package source credentials, API keys, proxy passwords, and client certificate passwords in user-level NuGet.Config files.
This protected-tool coverage migrates the default Mono and .NET user-level NuGet config files to the keychain. Package source credentials are split out for av credential-helper nuget, while API keys, proxy passwords, and client certificate passwords remain in sanitized temporary config files because NuGet's credential provider protocol does not cover those secret types.
来源: local coverage notes
覆盖来源
来源摘录
Caveats
- Only the default Mono and .NET user-level NuGet.Config files are migrated.
- Additional files under the user NuGet config directory are not migrated.
- Runtime changes to migrated config files are not persisted back to keychain.
- Direct execution of the original binary will not receive the helper config.
可执行文件
已安装的可执行文件
| 命令 | 类型 | 暴露范围 | 备注 |
|---|---|---|---|
nuget | cli | global executable |
新鲜度
版本和新鲜度
这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。
页面生成时间2026-06-10
管理器版本7.6.0
管理器更新时间2026-05-14
本地数据ok
上游not checked
检测到的最新版本not detected
- infoRelease/tag comparison is only available for GitHub repositories.https://www.nuget.org/none confidence
安装元数据
软件包元数据
| Package key | brew:nuget |
|---|---|
| Version | 7.6.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/nuget |
| Homepage | https://www.nuget.org/ |
| Repository | https://github.com/NuGet/NuGet.Client |
| Upstream docs | https://learn.microsoft.com/en-us/nuget |
| License | MIT |
| Source archive | https://dist.nuget.org/win-x86-commandline/v7.6.0/nuget.exe |
| Last updated | 2026-05-14T02:59:39Z |
| Pulse | updated |
| Dependencies | mono |
| Bottle | available (all) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | nuget |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
nuget
nix profile install nixpkgs#nuget- normalized package name match
- Matched by: Nuget
dnf95%
nuget 2.8.7-24.fc44
Package manager for .Net/Mono development platform
sudo dnf install nuget- License: Apache-2.0
- Category: Unspecified
- Architecture: i686
- Source Package: nuget
- 2 dependencies
- 2 provides
- normalized package name match
- Matched by: Nuget
dnf95%
nuget-devel 2.8.7-24.fc44
Development files for nuget
sudo dnf install nuget-devel- License: Apache-2.0
- Category: Unspecified
- Architecture: i686
- Source Package: nuget
- 2 dependencies
- 2 provides
- normalized package name match
- Matched by: Nuget
pacman95%
nuget 6.11.1-1
Package manager for .NET.
sudo pacman -S nuget- License: APACHE
- Architecture: any
- 2 dependencies
- normalized package name match
- Matched by: Nuget
Scoop95%
main/nuget
scoop install main/nuget- normalized package name match
- Matched by: Nuget
winget95%
Microsoft.NuGet
winget install --id Microsoft.NuGet -e- normalized package name match
- Matched by: Nuget
来源线索
由仓库数据生成
此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。
使用的来源
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated agent safety answer
- external package-manager database matches
- local coverage README
- package relationship graph
- package version freshness
- package-page enrichment
- secret-handling manifest