NuGet

NuGet.org's "Per day average" download stat can be way off from reality

We're looking at replacing it with a trailing-window metric

Which download stats do you actually rely on, and which mislead you?

Weigh in 👇

github.com/NuGet/NuGetGal…

🍂 October's almost here, which means November 1 is close! 🔑 Any NuGet.org API keys created before Aug 17 will expire that day. Check your publishing workflows now, or better yet, switch to Trusted Publishing and skip the key rotation entirely 🚀 #dotnet #NuGet

⚠️ Action required: Microsoft's NuGet author-signing certificate changes starting Sept 23, 2026.

If you allow-list Microsoft in trustedSigners or use dotnet nuget verify with fingerprints, add the new cert now to avoid NU3034 install failures.

devblogs.microsoft.com/dotnet/microso…

We're improving NuGet ecosystem supply-chain security by reducing API key durations. They drop to 30d on August 17th. NuGet Trusted Publishing avoids the need to manage API keys. PTAL if you publish packages. devblogs.microsoft.com/dotnet/strengt…

We’re strengthening NuGet security with clearer standards for package ID characters, reducing name confusion and protecting developers from malicious packages. Learn more: github.com/NuGet/Announce…
#NuGet #Security #DotNet