Aalexbit-codemod

dotnet-nuget-dependency-mining

Mine and classify NuGet dependencies for .NET migration assessment; read-only metrics

miningmetricsdotnetnugetdependenciesmigration-assessment
Public
0 executions
Use dashboardApply to Repository

Run locally

npx codemod dotnet-nuget-dependency-mining

dotnet-nuget-dependency-mining

Read-only mining codemod that inventories NuGet dependencies and classifies .NET 8 migration risk. Parses PackageReference, packages.config, GAC, and HintPath references. No files are written to the target repo.

Registry: private. Use the public dotnet-migration-assessment-bundle to run all miners in one workflow.

What it does

  1. Parses PackageReference, packages.config, GAC, and HintPath references in project files
  2. Classifies each package against a .NET 8 compatibility knowledge base
  3. Emits risk tier, target version, and migration notes per dependency

Metrics

MetricCardinalities
dotnet-nuget-dependencypackageId, version, source, projectPath, riskTier, targetVersion, risk

Risk tiers

  • supported — known-compatible on .NET 8
  • requires-upgrade — needs a newer package version
  • deprecated — consider replacing (e.g. log4net → Serilog)
  • unsupported — requires a different library or rewrite (e.g. EF6 → EF Core)
  • custom-binary / gac — HintPath or GAC references needing manual review

Run

Via bundle (recommended):

bash

Standalone (local monorepo):

bash

Testing

bash

Ready to contribute?

Build your own codemod and share it with the community.

Publish a codemodJoin the community