Today only .nuspec "manifests" are detected and reported as a "Package" in a scan.
This works for .nupkg only if they have been extracted before the scan and this is not practical to always do so. We should be able to report and introspect in a scanned archived package to report this as a package with all its metadata.
See also #797 and #222 and #761
Today only .nuspec "manifests" are detected and reported as a "Package" in a scan.
This works for .nupkg only if they have been extracted before the scan and this is not practical to always do so. We should be able to report and introspect in a scanned archived package to report this as a package with all its metadata.
See also #797 and #222 and #761