NuGet (.NET)

Point dotnet at Dependably to restore private packages, proxy public ones, and publish your own.

You will need your base URL and a token; see Getting started. The examples use repo.example.com; substitute your own. Your NuGet v3 service index is:

https://repo.example.com/nuget/v3/index.json

Configure

Use dotnet's own commands. They manage your NuGet.config for you, so there are no files to edit by hand. NuGet authenticates with HTTP Basic: any username works (the token is the password), so use user.

dotnet nuget add source https://repo.example.com/nuget/v3/index.json \
  --name dependably \
  --username user \
  --password <your token> \
  --store-password-in-clear-text

To keep restores from falling through to public nuget.org, remove the default source:

dotnet nuget remove source nuget.org

Plain HTTP: if your instance is served over http://, append --allow-insecure-connections to the add source command.

Verify

dotnet nuget list source              # "dependably" should be enabled
dotnet new console -n smoke && cd smoke
dotnet add package Newtonsoft.Json

A successful restore confirms that the source, credentials and service index work. The first download of each package version is recorded as a First fetch event on the Activity tab of the Audit page, which admins, owners and auditors can open. See Audit log.

Publishing

dotnet reads the publish endpoint from the service index, so you push against the same index.json. The --api-key flag sends your token as the API key:

dotnet nuget push MyPackage.1.0.0.nupkg \
  --source https://repo.example.com/nuget/v3/index.json \
  --api-key <your token>

Symbol packages (.snupkg) push the same way. Publishing requires a token with a push scope (push only or push & pull). See Access tokens.

Unlisting a version

Deleting a version with dotnet nuget delete unlists it. The package stays stored, but Dependably leaves the version out of the version lists that restore reads:

dotnet nuget delete MyPackage 1.0.0 \
  --source https://repo.example.com/nuget/v3/index.json \
  --api-key <your token>

Unlisting needs a removal permission that the token scopes in the web UI do not include. If your organization sets Purge unlisted after (days), unlisted versions are deleted once that many days pass (see Settings).

An admin or owner can instead delete the version in the web UI: open the package, open the version's Actions menu, and select Delete. This removes the version and its files.

Revert

To stop using Dependably as a source:

dotnet nuget remove source dependably