How to get all NuGet related actions/rights? - nuget

As mentioned in some other posts, I'm having NuGet related problems, but my colleagues are not experiencing those problems. NuGet is a combination of local tools (C:\Program Files\NuGet\NuGet.exe) and a NuGet related username.
In order to determine where I'm having the issues, I'd like to verify if my NuGet rights (determined by the mentioned username) are the same as the ones of my colleagues.
Therefore I'd like to know if such a question can be asked:
Give me the complete list of things I can do with my NuGet username.
In case that exists, both me and my colleagues can launch it, and I can compare. In case of differences, I'll need to check my NuGet user rights. In case equal, my problems should be due to my local system.
Does anybody know if such a question/command exists and how it works?
Thanks in advance

Related

Which Nugets (globally) referencing a specific Nuget

We decided to have more control about which Nuget packages are allowed in our projects in the company. For that we have to analyze our already used packages first.
Is there a way to find out a specific packages is used by whom (globally)?
For example I remember that Castle.Core is used in Ninject.Extensions.Factory. But which other nugets are using this?
I would like the functionality (for not only specifically Castle.Core) https://www.nuget.org/packages/castle.core/#show-github-usage, but showing the 250+ projects (again not only specifically Castle.Core, but a choosen package).
There are related questions, which are specific for one package. For example>
Which NuGet package contains System.Web.Optimization?
My question, if is it possible to generalize this kind of questions. If there is a tool available for that.

Chocolatey: Simple Automatic Upgrades of Local Folder Packages

I have a folder like c:\chocopkg where I put a couple of packages which I can't find on the official repo.
Creating nupkg archives was really simple and fun. Instead, the Automatic Updater (AU) is too much for me: there is no simple cinst au; one should clone a git repo and also setup a new one even for a local run.
What I need is very simple. I added a script <package>\tools\chocolateyBeforeUpgrade.ps1, with trivial Invoke-WebRequest regexps. It checks for new versions on the vendor's site and can update chocolateyInstall.ps1.
My first question is: Is there some config option to have cup all running a script like this before checking for package status?
If this is not possible, it would be also simple to wrap cup in a, say, cup2 checking and running automatic upgrades, but what file should this wrapper edit before giving control to actual cup?
cup page just says it "upgrades a package or a list of packages", but I don't understand how. I can speculate it looks at the .nuspec version. However in a local share there is no such info without unzipping the .nupkg file and for remote packages this would require a possibly large download.
AU essentially does what you'll need, even if it is a little more setup and work. I know it may feel like too much to start, but you can just start with the files that run the updates.
What I need is very simple. I added a script <package>\tools\chocolateyBeforeUpgrade.ps1, with trivial Invoke-WebRequest regexps. It checks for new versions on the vendor's site and can update chocolateyInstall.ps1.
This isn't going to help with upgrades as it is a chicken and egg scenario. You need the updated package first to be able to upgrade a package. So putting something into beforemodify or the install script is only going to help you on installation. BeforeModify only runs from the already installed package on upgrade/uninstall, so unless there

How to get useful files from a github package?

Although I've been using github for a while, but every now and then this problem pops up. From a github project, how do I know which filed/folders are actually what I need?(Generally, I don't need those files that are only used by developers)
Take this project (https://github.com/mupchrch/split-diff) for example, I am trying to install this plugin into my Atom editor so I can compare two files, but I find very little is said about how and which files are to be installed/copied, and to where. This "lack" of information happens to many many github projects I stumbled with. Some indicates npm install xxx which I am OK with, some says nothing at all, like the above example. So I conclude I must have missed some very important information regarding how to use github package, something that goes without saying.
Can anyone help me or give me any hint?
I noticed that here is a package.json file, which must indicate this package can be installed by npm. But I need more specific instructions:
Do I need to download all the files and folders? To where? And where do I launch npm install? Or as far as I know, Atom editor has its own install command (apm is it?), where do I run this apm?

How can I update only Chocolatey packages that are verified by moderators?

I use Chocolatey to install/update applications on my PC. Is there any way to make sure that the packages I install have been approved by moderators?
If I simply do a choco install <package name> I might get a warning that the package is not trusted and to press N or Y to continue, but it's a tedious task to confirm each package. Is there a simpler way to do this? I'm looking for a parameter I can set like -AutoDenyUntrustedPackages?
A side note, I know you can also use ChocolateyUI, but it never prompts regarding untrusted packages. Is that due to a security flaw or will it only allow updates if the update itself has been verified by a moderator?
In order to install a package which is not yet verified by a moderator, you have to specify the version. These packages will not be installed or updated automatically, meaning the actual behavior you describe is implemented by default.
Trusted packages mean something else: they are packages which come from a trusted source (like the creator of the program which the package installs). These packages skip human moderation.

Why are some NuGet packages named with nuget-bot?

I went to add a NuGet package for Microsoft.TeamFoundationTracking.Client and in the list of available packages I have the options:
Microsoft.TeamFoundation.WorkItemTracking.Client
and
nuget-bot.Microsoft.TeamFoundation.WorkItemTracking.Client
The one with nuget-bot has a higher version number than the one without it. I don't ever recall seeing packages with the nuget-bot in the name. I assume there is some convention or format that this refers to.
Thanks for any explanation of what this means.
I'm not familiar with the nuget-bot packages, but if you are looking for official Microsoft binaries, you will want to look for those where the Owner is set to Microsoft (not just the author). The package you seek is most likely: Microsoft.TeamFoundationServer.ExtendedClient