Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PackageReference and transitive dependencies #9052

Open
avivanoff opened this issue Jan 12, 2020 · 0 comments
Open

PackageReference and transitive dependencies #9052

avivanoff opened this issue Jan 12, 2020 · 0 comments

Comments

@avivanoff
Copy link

@avivanoff avivanoff commented Jan 12, 2020

A while back you changed the default behavior of build dependency asset to transitive. I was reading discussions, as well as spec, but cannot find anything about potential issue with transitive dependencies. I will sum it up here:

  • Project DAL: references the Json.NET NuGet package and defines the class ClassDB;
  • Project BLL: references the DAL project;
  • Project UI: references the BLL project.

In this case, UI is able to access both the Json.NET package and the ClassDB class, which is quite dangerous, because it could let the developers to skip the architectural layers set up during design phase.

Is there something I am missing?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
1 participant
You can’t perform that action at this time.