Added a troubleshooting page for nuget vulnerability warnings#515
Added a troubleshooting page for nuget vulnerability warnings#515ferafiks wants to merge 1 commit into
Conversation
|
We partially have control over it but don't act fast enough. Many NuGet packages can be updated as soon as there is a new version and with the extensive tests we have now, we might be able to test packages updates. The major packages are resolving their vulnerabilities in a few days or weeks. Yes, there are also some packages which don't get updated anymore e.g. Also, there were 3 cases where we nicely nudge a maintainer and the update was released on the packages we depend on. At this time, I believe if the Avalonia packages are updated to |
Description
A lot of users have been asking for help relating to package vulnerability warnings in the latest release. This is a part of nuget which we don't have control over and that will continue creating confusion between releases in the future. This PR adds a page about it that we can link users to.