NuGet
nuget.org
What it is
NuGet is a package manager for .NET projects, with tools to create and consume packages and the NuGet Gallery as a central repository. Packages use the .nupkg format and can include compiled code, related files and a descriptive manifest; .snupkg is also supported. NuGet resolves dependency graphs and records package identifiers and versions so projects can restore dependencies across machines and build servers. PackageReference and packages.config are supported, with PackageReference required for .NET SDK-style projects. Developers can manage packages in Visual Studio or use the dotnet CLI and nuget.exe. Packages may be hosted in private cloud locations, private networks or local file systems. Restore can check dependencies against configured vulnerability sources and report warnings. NuGet also supports lockfiles, offline installation, private registry authentication and package signatures. The service is free, and the Gallery code is open source under Apache 2.0. The dotnet CLI works on Windows, macOS and Linux; nuget.exe runs on Windows and can run on macOS and Linux with Mono, with limitations.
Spec sheet
- Purpose
- NuGet is the package manager for .NET, providing tools to create, share, and consume packages.Read 3 Oct 2026 · nuget.org
- Intended users
- NuGet provides tools and package hosting for .NET library creators and consumers.Read 3 Oct 2026 · learn.microsoft.com
- Support
- The NuGet Gallery directs users with questions to its contact page and provides a service-status page for NuGet.org and related services.Read 3 Oct 2026 · nuget.org
- Audit data source
- NuGet.org’s vulnerability database uses the GitHub Advisory Database, and NuGet.org provides a vulnerability-data-only service index.Read 2 Oct 2026 · learn.microsoft.com
- Build integrations
- Package restore can be run with NuGet, the dotnet CLI, MSBuild, Visual Studio, or Azure Pipelines and Azure DevOps Server.Read 3 Oct 2026 · learn.microsoft.com
- CLI tools
- The dotnet CLI and nuget.exe support package creation and consumption; the dotnet CLI is available for .NET Core, .NET Standard, and SDK-style projects targeting .NET Framework.Read 2 Oct 2026 · learn.microsoft.com
- Deletion policy
- NuGet.org generally does not support deleting published packages.Read 3 Oct 2026 · learn.microsoft.com
- Dependency management
- NuGet resolves package dependency graphs and records package identifiers and versions so dependencies can be restored across machines and build servers.Read 2 Oct 2026 · learn.microsoft.com
- Dependency resolution
- YesRead 22 Sep 2026 · learn.microsoft.com
- Development tools
- NuGet capabilities are available through the dotnet CLI, nuget.exe, Visual Studio, and Visual Studio Code extensions.Read 3 Oct 2026 · learn.microsoft.com
- Downloads
- The downloads page lists a Windows x86 nuget.exe command-line distribution and a Visual Studio 2015 VSIX; it says NuGet 4.x is included with Visual Studio 2017.Read 2 Oct 2026 · nuget.org
- Gallery license
- The NuGet Gallery is open-source software licensed under Apache 2.0, and the project welcomes community contributions.Read 2 Oct 2026 · nuget.org
- Lockfile support
- YesRead 22 Sep 2026 · learn.microsoft.com
- Offline installation
- YesRead 22 Sep 2026 · learn.microsoft.com
- Open source
- The NuGet Gallery code is licensed under Apache 2.0, and the project welcomes community contributions.Read 3 Oct 2026 · nuget.org
- Package contents
- A NuGet package is a .nupkg ZIP file that can contain compiled code, related files, and a descriptive manifest.Read 2 Oct 2026 · learn.microsoft.com
- Package formats
- .nupkg,.snupkgRead 22 Sep 2026 · learn.microsoft.com
- Package gallery
- The NuGet Gallery is the central package repository used by package authors and consumers.Read 3 Oct 2026 · nuget.org
- Package management formats
- NuGet supports PackageReference and packages.config, and PackageReference is required for .NET SDK-style projects.Read 2 Oct 2026 · learn.microsoft.com
- Package signatures
- NuGet packages can be digitally signed to help verify package integrity and origin, and nuget.org automatically repository-signs uploaded packages.Read 3 Oct 2026 · learn.microsoft.com
- Package size limit
- NuGet.org allows package uploads up to 250 MB and recommends keeping packages under 1 MB when possible.Read 3 Oct 2026 · learn.microsoft.com
- Package workflows
- NuGet supports package creation, publishing, installation, updating, and restoring dependencies.Read 3 Oct 2026 · learn.microsoft.com
- Private feeds
- NuGet packages can be hosted privately in the cloud, on a private network, or on a local file system, with access limited to people who can reach the host.Read 2 Oct 2026 · learn.microsoft.com
- Private registry auth
- YesRead 22 Sep 2026 · learn.microsoft.com
- Security auditing
- NuGet restore can check project dependencies against known vulnerabilities from configured audit sources and report warnings.Read 2 Oct 2026 · learn.microsoft.com
- Support and status
- NuGet.org links users to a contact page for questions and a service-status page for NuGet.org and related services.Read 2 Oct 2026 · nuget.org
- Supported platforms
- Windows,macOS,Linux,.NETRead 22 Sep 2026 · learn.microsoft.com
- Supported systems
- The dotnet CLI works on Windows, macOS, and Linux; nuget.exe runs on Windows and can run on macOS and Linux with Mono, with limitations.Read 3 Oct 2026 · learn.microsoft.com
- Terms and security
- NuGet.org is hosted by Microsoft Corporation, whose terms say it maintains technical and organizational measures intended to protect customer data.Read 2 Oct 2026 · nuget.org
- Transport security
- NuGet.org supports TLS 1.2 and lists four supported cipher suites in its FAQ.Read 3 Oct 2026 · learn.microsoft.com
- Visual Studio integration
- Visual Studio’s NuGet Package Manager UI can search, install, uninstall, and update packages in projects and solutions.Read 2 Oct 2026 · learn.microsoft.com
Strong points and limits
Strong points
- Free, with Gallery code licensed under Apache 2.0
- Resolves dependencies and records package identifiers and versions
- Supports private feeds and offline installation
- Restore can report known vulnerability warnings
- Available through Visual Studio and command-line tools
Limits
- nuget.exe has limitations on macOS and Linux with Mono
- Published packages generally cannot be deleted
- Uploads are limited to 250 MB
Who it suits
NuGet suits .NET library creators and consumers who need package creation, dependency management and restoration across machines or build servers. It also supports teams using private feeds or Visual Studio package management.
Verdict
NuGet covers package creation, hosting and consumption for .NET, with dependency restoration and private-feed options. Its free offering includes vulnerability checks during restore, but package deletion is generally not supported.
Where Specifiction places it
- Package Managers#31 of 938.1
- Package Registries#19 of 287.6
