NuGroom 0.1.0

NuGroom - Find, list and update packages

A command-line tool that connects to Azure DevOps, searches all repositories for C#, Visual Basic and F# project files, extracts PackageReference lines, and provides comprehensive package analysis including multi-feed NuGet package information resolution with PAT authentication.

Features

• Repository Scanning — connects to Azure DevOps and discovers all project files across repositories
• NuGet Resolution — resolves package metadata from multiple feeds with PAT authentication
• Central Package Management — automatic CPM detection, updates, and migration (--migrate-to-cpm)
• Automated Updates — creates feature branches and pull requests for outdated packages
• Package Sync — force a specific package to an exact version across all repositories
• Version Warnings — configurable warnings for version differences with actionable recommendations
• Health Indicators — flags deprecated, outdated, and potentially vulnerable packages
• Internal Package Detection — identifies internal packages and their likely source projects
• Export — JSON, CSV, and SPDX 3.0.0 SBOM export
• Renovate Compatibility — respects ignoreDeps, disabled packageRules, and reviewers
• Flexible Filtering — exclude packages, projects, and repositories by prefix, name, or regex
• Configuration File — store all settings in JSON with environment variable support for secrets

Quick Start

# Install as a global dotnet tool
dotnet tool install --global NuGroom

# Basic scan
nugroom --organization "https://dev.azure.com/yourorg" --token "your-pat-token"

# Using a config file (recommended)
nugroom --config settings.json

# Dry-run package updates
nugroom --config settings.json --dry-run --update-scope Minor

# Apply updates (creates branches and PRs)
nugroom --config settings.json --update-references --update-scope Patch

Prerequisites

• .NET 10.0 or later
• Azure DevOps Personal Access Token with Code (Read) permissions
• For automatic updates: PAT with Code (Read & Write) and Pull Request Threads (Read & Write) permissions

Documentation

Roadmap

• ✅ Version warning system with configurable levels
• ✅ Automated package update recommendations
• ✅ Automated package updates with branch creation and PR workflow
• ✅ Renovate compatibility (ignoreDeps, packageRules, reviewers)
• ✅ Central Package Management (CPM) detection, updates, and migration
• Integration with official vulnerability databases
• Graph visualization of internal dependencies
• Support for Azure Key Vault credential storage