Add support for new csproj file format

[jacobd-of]

I have projects that use the new csproj file format, that does not use the old nuget packages.config anymore. In the root of source folder the used packages are specified in a 'Directory.Builder.targets' file.
Any chance of supporting this? I cannot get it working without creating a packages.config manually.

As a work around, it would be convenient if I just can scan the bin folder so that I am not relying on any format at all; this is what is used.

[allisterb]

Hi @jacobwvandijk-work DevAudit supports the new style .csproj format. The MSBuild .target files have the same syntax as the .csproj so using a .targets file as the parameter should work. What happens when you try devaudit nuget -f Directory.Build.targets ? Also are you using the latest builds...they can be downloaded here:
https://allisterb-devaudit.s3.us-east-2.amazonaws.com/DevAudit_Latest.zip
https://allisterb-devaudit.s3.us-east-2.amazonaws.com/DevAudit_Latest.tar.gz

[jacobd-of]

Hi Allister, it does not work but I almost. I had to change the code slightly: change csproj into build.targets and include into update. I can create a pull request if you like that supports both file types.

The package dependencies or only direct right? Any chance to include the indirect dependencies as well? That would be the icing on the cake.

[jacobd-of]

I did make the adjustments on the latest stable release; if I apply them to the master it does not work, That is because you have implemented the transitive dependencies already. Good work.

The thing is that our build.targets file does not contain the framework target, so it crashes on that code in NuGetApiHelper.GetFrameworks(XElement projectXml).
Target framework is not in the build targets because some assemblies are targeted to net472 and some to dotnetcore (or both).

I have created a pull request #130 so that it is working. But the transitive part is skipped it no target frameworks are found. I have put that message in a warning. That seems to me less worse than crashing.

[allisterb]

Looks good, thanks!

[jacobd-of]

I have implemented another small fix; in the deps.json file I use there are packages with version 0.0.0.0 that are just part of the .net framework and show up as a false positive.
See #132 .

[ken-duck]

Apologies for not updating this ticket sooner. This project has not had a full time maintainer in a little while; due to Covid there has been a bit of churn. I peek in occasionally to try and deal with critical issues, but we are working on getting the full time maintainer back again. Fingers crossed we will get there soon.

Meanwhile I am trying to clean up a bit of the chaos. I merged your change and will get a release out shortly with it included. Thanks for the help, and sorry again for the delays.