We are starting to use NuGet and we are having some issues:
(Just to make sure that we have understood the premises for how NuG
As suggested in NuGet Enterprise - best practices for different maturity levels of packages, I think you are making things more complicated than necessary :)
grep
for allowedVersions as part of either CI build or pre-commit/pre-push Dev checks should catch this. It should not change often, and it's useful to keep an eye on it (if other teams and packages are using SemVer correctly, anyhow :) ).Prerelease
or -IncludePrerelease
flags on nuget install.-ExcludeVersion
). I would strongly recommend ditching the Visual Studio NuGet integration in favour using the command-line nuget.exe
and build scripts instead. This relates particularly to #5 but to interaction with NuGet in general. The Visual Studio integration is nice when working solely with 3rd-party public packages from the nuget.org feed, but is not flexible enough for my liking when dealing with internal NuGet feeds and packages.