Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add option to show only runtime dependencies (no analyzers, local tools, etc) #166

Open
OwnageIsMagic opened this issue Nov 14, 2022 · 1 comment

Comments

@OwnageIsMagic
Copy link

OwnageIsMagic commented Nov 14, 2022

It can possibly detected if <PrivateAssets> or <ExcludeAssets> within <PackageReference> contains all or combination of compile; runtime; contentFiles; native
or

    <packageTypes>
      <packageType name="DotnetTool" /> <!-- or Template-->
    </packageTypes>

in package manifest

https://learn.microsoft.com/en-us/nuget/consume-packages/package-references-in-project-files#controlling-dependency-assets
https://learn.microsoft.com/en-us/nuget/create-packages/set-package-type?tabs=dotnet


i.e. https://www.nuget.org/packages/SonarAnalyzer.CSharp/ is using LGPL and it sometimes hard to fight with legal department about LGPL/GPL.

@sensslen
Copy link
Collaborator

What is the output of dotnet list package --include-transitive? Does it include the analyzer? If not, please consider using Version 3.0.0-alpha which uses the same machanisms as dotnet.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants