How to setup Dependencies Analysis for C#/NuGet projects?

I’m trying to use the Dependency Analysis, I was able to use the sync to auto-detect the Javascript part of it (package.json), BUT I wasn’t able to setup anything for NuGet and I wasn’t able to find any material/documentation about it. Any help is appreciated.

Thanks,
Ricardo

Hi @rmomm,

For C#/NuGet projects, we currently support analyzing the packages.lock.json lock file. Auto-detection currently adds this file as a target.

Though having a lock file in your codebase would help us give you more accurate results, if you do not have it, you can manually add a .csproj file as a manifest and lock file while creating a target. Deepsource would try to generate a lock file (if possible) using it and do the analysis.

Nice, thanks for the info @anto-christo , I’ll give it a try and post the final result here

Hi @anto-christo , I generated the package.lock.json file for all my projects, DeepSource successfully detected them and I was able to trigger the analysis, but sadly it didn’t detect any package :frowning:

image

It seems that I spoke too early, a new analysis populated the data