NuGet.config

Rama main · réplica de lectura del repositorio original.

<?xml version="1.0" encoding="utf-8"?>
<configuration>

  <!-- NuGet merges every configuration file on the path from the drive root to the current directory, so without a
       repository-owned file the source list is whatever the developer machine happens to define. A private feed
       configured user-wide would then be searched for every package here, and a restore could resolve a dependency from
       a source the license register in THIRD_PARTY_LICENSES.md never reviewed. The clear element drops that inherited list. -->
  <packageSources>
    <clear />
    <add key="nuget.org" value="https://api.nuget.org/v3/index.json" protocolVersion="3" />
  </packageSources>

  <!-- With mapping declared, every package identifier has to match a pattern before it can be restored, transitive ones
       included. The single wildcard costs nothing while nuget.org is the only source, and it is what makes a second
       source fail closed: adding one leaves it mapped to nothing until its packages are named explicitly, rather than
       silently joining the search for every package in the solution. -->
  <packageSourceMapping>
    <packageSource key="nuget.org">
      <package pattern="*" />
    </packageSource>
  </packageSourceMapping>

</configuration>