Security alerts on MQTTnet.AspNetCore about mqttnet HOT 1 OPEN

We should maybe check these dependencies within the project itself.

With the following settings in the projects

<NoWarn>NU1803;NU1901;NU1902</NoWarn>
<TreatWarningsAsErrors>true</TreatWarningsAsErrors>
<NuGetAuditMode>all</NuGetAuditMode>
<NuGetAudit>true</NuGetAudit>

this can be checked automatically within Visual studio.

Explanation:

• <NoWarn>NU1803;NU1901;NU1902</NoWarn>:
  --> NU1803 suppresses errors if an internal NuGet feed is used without HTTPS (Guess, we don't need this here)
  --> NU1901 and NU1902 suppress package vulnerabilites with low impact (Might be useful if no patches are there yet?)

• <TreatWarningsAsErrors>true</TreatWarningsAsErrors>
  --> Treats all warnings as errors which means that if a package dependency has security issues, the build will fail

• <NuGetAuditMode>all</NuGetAuditMode>
  --> Checks direct and transitive packages

• <NuGetAudit>true</NuGetAudit>
  --> Turns the audit mode off or on

@chkr1011 Just as an idea to get notified when such issues occur in the future. Read https://learn.microsoft.com/en-us/nuget/concepts/auditing-packages for detailed information.

from mqttnet.