filescan-dotnet/Directory.Packages.props at main · vhbfcode/filescan-dotnet · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
<Project>

  <!--
    Central Package Management (CPM) — FileScan
    Os .csproj usam <PackageReference Include="X" /> sem Version.
  -->

  <PropertyGroup>
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
  </PropertyGroup>

  <ItemGroup>
    <!-- Cliente .NET do ClamAV (motor antivírus open-source) -->
    <PackageVersion Include="nClam" Version="9.0.0" />

    <!-- Detecção de tipo real por conteúdo (magic bytes). Definições Default = livres p/ uso comercial. -->
    <PackageVersion Include="Mime-Detective" Version="25.8.1" />

    <!-- Parser estrutural PDF Apache-2.0: xref/trailer, referências indiretas, object streams,
         filtros e arquivos embutidos. O FileScan o envolve com limites fail-closed próprios. -->
    <PackageVersion Include="PdfPig" Version="0.1.16" />

    <!-- Logging estruturado (mesmo baseline do portfólio) -->
    <PackageVersion Include="Serilog.AspNetCore" Version="9.0.0" />

    <!-- Swagger / OpenAPI UI -->
    <PackageVersion Include="Swashbuckle.AspNetCore" Version="10.1.7" />

    <!-- Referência direta só para levantar o transitivo vulnerável do Swashbuckle
         (GHSA-v5pm-xwqc-g5wc: High em <= 2.7.4; corrigido em 2.7.5). -->
    <PackageVersion Include="Microsoft.OpenApi" Version="2.7.5" />

    <!-- Testes -->
    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
    <PackageVersion Include="xunit" Version="2.9.3" />
    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.4" />
    <PackageVersion Include="coverlet.collector" Version="6.0.4" />
    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.5" />
  </ItemGroup>

</Project>