Aspose NuGet packages ID Prefix reservation

Aspose.Total Product Family
1

I noticed that Aspose is not a reserved ID prefix on NuGet.org. For example Aspose.Words. Reserving NuGet prefix is easy and it would improve security and help mitigate dependency confusion type attacks.

1 Like
2

@uvsb9n15f,

Thanks for your suggestion.

We will check if we could consider reserving the “Aspose.*” prefix on NuGet.org to improve security and mitigate dependency confusion attacks. We will get back to you soon.

1 Like
3

@amjad.sahi ,

Are there any results? This is really easy way to improve security for your customers and all it takes is just to request it from Microsoft.

4

@uvsb9n15f,

We truly appreciate your concerns and support.

We have this in our plans and will proceed according to our schedule after consulting all internal stakeholders and respective teams. Then, we will submit the request to NuGet.

We will keep you informed as soon as there are any new updates.