|
We're using them quite intensively.
We create and consume them for internal libraries (for C# and C++ projects) with Azure DevOps feeds and use public nugets available on nuget.org feed
No big issues so far.
For C++ packages, there seems to be a push to vcpkg.
But heck .. xkcd: Standards
I'd rather be phishing!
|
|
|
|
|
To avoid version conflicts, create your own local NuGet repository and only install from that. That will keep NuGet from automagically "upgrading" your packages, and allow you more control over your upgrading process (upgrade only when you want to).
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
Don't you think it's WAY easier just to delete nuget and use normal libs in fixed folders???
|
|
|
|
|
Sure it is, but you can't argue the convenience of having the nuget packages to provide the libs and dependencies so you don't have to worry about getting everything manually.
I was providing a solution that doesn't involve changing your processes with regards to NuGet packages.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-----
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-----
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
You mix all in one. Nuget is useful only in the way that every package has... info about dependencies! Period. I have no problem in getting all depended libs (esp. if reference contains info about homepage or binaries).
Any commercial dev is a serious process (opposite to linux clowns who is ready to spend DAYS on hell knows what). There is no place for "guess what library is breaking the build!". Moreover: developer can intentionally keep old verion to keep compatibility with environment of clients (say, somebody still works in Win XP). That's why archaic 'nuget' is unacceptable.
I agree only on one help: if I run util like getrefs somepackage and it downloads all dependencies. Everything else I can and must do manually.
|
|
|
|
|
Somewhere a few days ago I posted "NuGet is a virus". 
What particularly annoys me is:
<dependentAssembly>
<assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30ad4fe6b2a6aeed" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-10.0.0.0" newVersion="10.0.0.0" />
</dependentAssembly>
Crap like that.
|
|
|
|
|
I like Nuget. We use it for everything in our shop.
I can't convince you to like it. I can suggest you learn how to properly work with it, and I say this kindly, and not teasingly.
If you have a team of 10 developers and only 2 know how to properly work with Nuget and keep things updated properly, then you are destined for failure, because the other 8 devs will elephant things up for sure.
It does have its annoying problems, but they are manageable IMHO.
Edit: we have our own Nuget repo (See JSOP's response) and we use this for most of our packages and for the same reasons that John mentioned.
modified 3-Mar-21 19:00pm.
|
|
|
|
|
I admit, that what you're saying makes a what of sense. 
There is only one Vera Farmiga and Salma Hayek is her prophet!
Advertise here – minimum three posts per day are guaranteed.
|
|
|
|
|
I limit myself to the ones shipped by Microsoft. Ones like the UWP / WPF tool kits. No issues.
It was only in wine that he laid down no limit for himself, but he did not allow himself to be confused by it.
― Confucian Analects: Rules of Confucius about his food
|
|
|
|
|
+1 to avoid Nuget. It always was and is COMPROMISE to build process - you nerver be sure smth is not changed. And never sure what and when "it" will download. Definitely "school boys" who bring this sh****t to .NET (from Linux) didn't have enough qualification and enterprise development at all.
Say "no" to drugs, say "no-no-never!!" to nuget. 
|
|
|
|
|
It's the worst dependency management option, apart from all of the other options.
Jon Skeet wrote about some of the problems a while back:
Versioning limitations in .NET | Jon Skeet's coding blog[^]
"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer
|
|
|
|
|
We use them.
I hate them.
Nothing worse than that one person on staff who has to run off and try every bell and whistle.
Multiple layers of code across a dozen libraries just to put a form on a page.
I cannot wait to retire.
|
|
|
|
|
This generations spin on DLL hell. It's not so bad when you have one or 2 packages that stand on their own. But when the packages have dependencies on other packages which depend on other packages. And one package want v2.0 and another wants v2.2, it becomes a kluge. TFS seems to choke on pulling solutions and ACTUALLY recognize package dependency. Or do recognize and tell me packages are installed but throws errors of missing references no matter how often I refresh or clean/build, etc. Often have to delete the reference and readd.
Local nuget seems to have helped some.. Until a genius updates a package (or packages) and decides it should have all the latest and greatest dependent packages without thinking about downstream impact and ends up breaking stuff. Thats more of an internal problem but still an example of how wrong things can go in a nuget world.
Our team has lovingly referred to it as NO-GET.
|
|
|
|
|
I've got some code still running out in the wild circa 2005-ish, I used next to no external libraries, so there is not much fear of being able to fix an issue (as long as I can get the old IDE working  )
I have some newer stuff, code about 3 years old that broke badly when the vender disappeared, and the current framework broke the old vendors code.
I am weary of depending on too much of external libraries like NuGet because of past experiences.
Sure these libraries can speed development up like crazy if you don't care about the product 5 years down the road, or think it will all be re-written by then.
|
|
|
|
|
NuGet is a publishing platform. If a vendor up and disappears, your dependence on their library (maybe as an interface for their API or hardware) is still in danger whether they publish their library on NuGet, the web, or a thumb drive. At least with NuGet, you know the library is available in its present form, compared to a website the vendor stops paying for.
In general, a dependency should be easily replaceable if it is intrinsic to functionality. And while larger vendors have a smaller chance of disappearing, a dependency without abstraction can still impose a risk to efficient replacement. Just ask Parler.
|
|
|
|
|
So I see three issues mentioned that have nothing to do with NuGet:
1. Version conflicts for common dependencies between libraries
2. Auto-updates
3. Package configurations which say a new version is compatible with your project
NuGet doesn’t magically solve #1 for you, though it *can* update your references for the simple case, if you let it. Which highlights that #2 is not normally the default. Finally, #3 is the fault of the packager, not the deliverer. It’s easy to configure things wrong, and for the misconfiguration to go unnoticed if it’s new or exotic enough.
What NuGet does help you solve is keeping your source control download small, especially if the bulk of your code is libraries, unless someone unknowingly checks in the “packages” folder.
|
|
|
|
|
How are you people in Microsoft ecosystem, and not using NuGet pacakges? Is it some kind of April Fools joke? It's been probably one of the biggest productivity improvements in the last decade. We ended up migrating all our internal libraries to NuGet as well, and integrated the process into our CI pipeline. Learn how to use the tool, before complaining about it.
|
|
|
|
|
Indeed, I got the feeing we’re being trolled, or punked, at least.
|
|
|
|
|
Microsoft distributes its libraries via NuGet in Visual Studio. I could not work without it. And versioning problems? Have you ever tried to compile an open source project with loads of dependencies?
|
|
|
|
|
If this is a Leslie, so be it. But for those not initiated, here's a horror video for you, made even more horrifying by the god-awful laugh track. (And don't ask me where the term 'god-awful' comes from - I don't know - yet.)
|
|
|
|
|
|
Looks like they really love Power Point. I haven't used PP in years.
|
|
|
|
|
Didn't make it past the first minute, ugh!
- I would love to change the world, but they won’t give me the source code.
|
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
