Skip to content

Conversation

@ryanpq
Copy link
Contributor

@ryanpq ryanpq commented May 1, 2025

Description

DO NOT MERGE
This is an initial test of utilizing AI tools to refactor the dotNET SDK to support dotNET Standard 2.0. This branch is intended as a test and reference only.

References

openfga/sdk-generator#536

Closes: #106

Review Checklist

  • I have clicked on "allow edits by maintainers".
  • I have added documentation for new/changed functionality in this PR or in a PR to openfga.dev [Provide a link to any relevant PRs in the references section above]
  • The correct base branch is being used, if not main
  • I have added tests to validate that the change in functionality is working as expected

@codecov-commenter
Copy link

codecov-commenter commented May 1, 2025

Codecov Report

Attention: Patch coverage is 13.60619% with 3124 lines in your changes missing coverage. Please review.

Project coverage is 24.49%. Comparing base (8199014) to head (7b55fa8).

Files with missing lines Patch % Lines
src/OpenFga.Sdk/Client/Client.cs 29.44% 112 Missing and 3 partials ⚠️
src/OpenFga.Sdk/Model/BatchCheckItem.cs 0.00% 93 Missing ⚠️
src/OpenFga.Sdk/Telemetry/Attributes.cs 41.21% 71 Missing and 16 partials ⚠️
src/OpenFga.Sdk/Model/BatchCheckRequest.cs 0.00% 82 Missing ⚠️
src/OpenFga.Sdk/Model/CheckError.cs 0.00% 78 Missing ⚠️
src/OpenFga.Sdk/Model/BatchCheckSingleResult.cs 0.00% 73 Missing ⚠️
src/OpenFga.Sdk/Model/ForbiddenResponse.cs 0.00% 73 Missing ⚠️
src/OpenFga.Sdk/Model/BatchCheckResponse.cs 0.00% 68 Missing ⚠️
...enFga.Sdk/Client/Model/ClientBatchCheckResponse.cs 1.81% 54 Missing ⚠️
src/OpenFga.Sdk/Model/Assertion.cs 9.80% 46 Missing ⚠️
... and 77 more

❌ Your project status has failed because the head coverage (24.49%) is below the target coverage (80.00%). You can increase the head coverage or adjust the target coverage.

❗ There is a different number of reports uploaded between BASE (8199014) and HEAD (7b55fa8). Click for more details.

HEAD has 2 uploads less than BASE
Flag BASE (8199014) HEAD (7b55fa8)
3 1
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #104      +/-   ##
==========================================
- Coverage   33.00%   24.49%   -8.51%     
==========================================
  Files         128      138      +10     
  Lines        6387     8649    +2262     
  Branches      840     1735     +895     
==========================================
+ Hits         2108     2119      +11     
- Misses       4099     6180    +2081     
- Partials      180      350     +170     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Fact]
public void TestHttpClientFunctionality() {
// Create an HTTP client (should work across all frameworks)
var client = new System.Net.Http.HttpClient();

Check warning

Code scanning / CodeQL

Missing Dispose call on local IDisposable Warning test

Disposable 'HttpClient' is created but not disposed.
Comment on lines +57 to +59
var request = new System.Net.Http.HttpRequestMessage(
System.Net.Http.HttpMethod.Get,
"https://example.com");

Check warning

Code scanning / CodeQL

Missing Dispose call on local IDisposable Warning test

Disposable 'HttpRequestMessage' is created but not disposed.
Comment on lines 245 to 253
catch (Exception e) {
foreach (var tupleKey in writes) {
writeResponses.Add(new ClientWriteSingleResponse {
TupleKey = tupleKey.ToTupleKey(),
Status = ClientWriteStatus.FAILURE,
Error = e,
});
}
});
}

Check notice

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.
Comment on lines 268 to 276
catch (Exception e) {
foreach (var tupleKey in deletes) {
deleteResponses.Add(new ClientWriteSingleResponse {
TupleKey = tupleKey.ToTupleKey(),
Status = ClientWriteStatus.FAILURE,
Error = e,
});
}
});
}

Check notice

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.
Comment on lines +337 to +339
catch (Exception e) {
responses.Add(new BatchCheckSingleResponse { Allowed = false, Request = request, Error = e });
}

Check notice

Code scanning / CodeQL

Generic catch clause Note

Generic catch clause.
@rhamzeh
Copy link
Member

rhamzeh commented May 2, 2025

@ryanpq - just b/c this PR has unrelated changes, would you mind approving and merging the sync PRs on the generator and here, rebasing your generator PR and then refreshing this one? That should clear up all the unrelated changes

@dyeam0 dyeam0 mentioned this pull request May 5, 2025
1 task
@rhamzeh
Copy link
Member

rhamzeh commented May 7, 2025

@Hawxy - We've gotten a few requests to support .NET Standard 2.0 which should be compatible with .NET Core 6 through 8.

I'd love to get your thoughts on this, especially with avoiding any breaking to https://github.com/Hawxy/Fga.Net. Will us moving from .NET Core 6 to .NET Standard 2.0 disrupt your work? Anything we need to watch out for from a breaking change perspective for other users? Do you see any issues in the way @ryanpq implemented it here?

@Hawxy
Copy link

Hawxy commented May 7, 2025

This won't be a breaking change, however it would be good to multi-target an LTS version (net8.0) as an additional target. netstandard2.0 requires a bunch of standalone dependencies that can be conditional'd out within the csproj, similar to what I do here.


<ItemGroup>
<PackageReference Include="Microsoft.Bcl.AsyncInterfaces" Version="7.0.0" />
<PackageReference Include="System.ComponentModel.Annotations" Version="5.0.0" />
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Where is this being used?

<ItemGroup>
<PackageReference Include="Microsoft.Bcl.AsyncInterfaces" Version="7.0.0" />
<PackageReference Include="System.ComponentModel.Annotations" Version="5.0.0" />
<PackageReference Include="System.Net.Http.Json" Version="7.0.1" />
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These other dependencies should be kept in line with .NET LTS versions as 7.x.x is end of life.

//


namespace OpenFga.Sdk.Telemetry {
Copy link

@Hawxy Hawxy May 7, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OTEL support is completely broken in this PR. System.Diagnostics.DiagnosticSource probably needs to be installed and this code deleted.

<GeneratePackageOnBuild>true</GeneratePackageOnBuild>
<!-- Disable implicit usings for .NET Standard 2.0 -->
<ImplicitUsings>disable</ImplicitUsings>
<DefineConstants>NETSTANDARD2_0</DefineConstants>
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This constant already exists in the framework

@aaguiarz aaguiarz requested a review from Copilot May 7, 2025 15:27
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR refactors the SDK to support .NET Standard 2.0 while adding compatibility tests for .NET Core 3.1 and .NET Framework 4.8. Key changes include new tests for .NET Standard support, updates to examples and documentation (e.g. BatchCheck, retry count adjustments), and minor solution file and Makefile updates.

Reviewed Changes

Copilot reviewed 155 out of 155 changed files in this pull request and generated no comments.

Show a summary per file
File Description
src/OpenFga.Sdk.Test.NetCore31/NetCore31CompatibilityTests.cs Added tests to verify .NET Core 3.1 support
src/OpenFga.Sdk.Test.Framework/FrameworkCompatibilityTests.cs Added tests for .NET Framework 4.8 compatibility
example/Example1/Example1.csproj Downgraded package reference version and added .NET Standard instructions
example/Example1/Example1.cs Updated example code to use new object IDs and remove unused booleans
docs/* Updated API documentation to include new endpoints and updated response codes
OpenFga.Sdk.sln, Makefile, CHANGELOG.md Various project configuration and changelog updates
Comments suppressed due to low confidence (2)

example/Example1/Example1.csproj:13

  • The package reference version was changed from 0.5.1 to 0.2.5. Please confirm that downgrading to 0.2.5 is intentional and consistent with the intended .NET Standard 2.0 support.
<PackageReference Include="OpenFga.Sdk" Version="0.2.5"><PrivateAssets>all</PrivateAssets></PackageReference>

README.md:100

  • Ensure that the retry count documented here (3 retries) matches the current client implementation, as it was reduced from 15 retries.
> The `OpenFga.SdkClient` will by default retry API requests up to 3 times on 429 and 5xx errors.

@socket-security
Copy link

socket-security bot commented May 8, 2025

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert (click for details)
Warn High
microsoft.bcl.asyncinterfaces@7.0.0 has a License Policy Violation.

License: CC-BY-4.0 (THIRD-PARTY-NOTICES.TXT)

License: HP-1989 (THIRD-PARTY-NOTICES.TXT)

License: Unicode-3.0 (THIRD-PARTY-NOTICES.TXT)

License: W3C-20150513 (THIRD-PARTY-NOTICES.TXT)

From: ?nuget/microsoft.bcl.asyncinterfaces@7.0.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.bcl.asyncinterfaces@7.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
microsoft.codecoverage@17.5.0 has a License Policy Violation.

License: ms-net-library-2019-06 (LICENSE_NET.txt)

From: ?nuget/microsoft.net.test.sdk@17.5.0nuget/microsoft.codecoverage@17.5.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.codecoverage@17.5.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
microsoft.netcore.platforms@1.1.0 has a License Policy Violation.

License: ms-net-library (dotnet_library_license.txt)

License: ms-net-library (Microsoft.NETCore.Platforms.nuspec)

From: ?nuget/xunit@2.4.2nuget/netstandard.library@2.0.3nuget/microsoft.netcore.platforms@1.1.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.netcore.platforms@1.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
microsoft.netcore.targets@1.1.0 has a License Policy Violation.

License: ms-net-library (dotnet_library_license.txt)

License: ms-net-library (Microsoft.NETCore.Targets.nuspec)

From: ?nuget/xunit@2.4.2nuget/microsoft.netcore.targets@1.1.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.netcore.targets@1.1.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
microsoft.testplatform.objectmodel@17.5.0 has a License Policy Violation.

License: ms-net-library-2019-06 (LICENSE_NET.txt)

From: ?nuget/microsoft.net.test.sdk@17.5.0nuget/microsoft.testplatform.objectmodel@17.5.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.testplatform.objectmodel@17.5.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
microsoft.testplatform.testhost@17.5.0 has a License Policy Violation.

License: ms-net-library-2019-06 (LICENSE_NET.txt)

From: ?nuget/microsoft.net.test.sdk@17.5.0nuget/microsoft.testplatform.testhost@17.5.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.testplatform.testhost@17.5.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
microsoft.win32.primitives@4.3.0 has a License Policy Violation.

License: ms-net-library (Microsoft.Win32.Primitives.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/microsoft.win32.primitives@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/microsoft.win32.primitives@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
netstandard.library@1.6.1 has a License Policy Violation.

License: ms-net-library (dotnet_library_license.txt)

License: ms-net-library (NETStandard.Library.nuspec)

From: ?nuget/xunit@2.4.2nuget/netstandard.library@1.6.1

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/netstandard.library@1.6.1. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.debian.8-x64.runtime.native.system.security.cryptography.openssl@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.debian.8-x64.runtime.native.System.Security.Cryptography.OpenSsl.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.debian.8-x64.runtime.native.system.security.cryptography.openssl@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.debian.8-x64.runtime.native.system.security.cryptography.openssl@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.fedora.23-x64.runtime.native.system.security.cryptography.openssl@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.fedora.23-x64.runtime.native.System.Security.Cryptography.OpenSsl.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.fedora.23-x64.runtime.native.system.security.cryptography.openssl@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.fedora.23-x64.runtime.native.system.security.cryptography.openssl@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.fedora.24-x64.runtime.native.system.security.cryptography.openssl@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.fedora.24-x64.runtime.native.System.Security.Cryptography.OpenSsl.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.fedora.24-x64.runtime.native.system.security.cryptography.openssl@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.fedora.24-x64.runtime.native.system.security.cryptography.openssl@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.native.system.io.compression@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.native.System.IO.Compression.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.native.system.io.compression@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.native.system.io.compression@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.native.system.net.http@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.native.System.Net.Http.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.native.system.net.http@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.native.system.net.http@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.native.system.security.cryptography.apple@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.native.System.Security.Cryptography.Apple.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.native.system.security.cryptography.apple@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.native.system.security.cryptography.apple@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.native.system.security.cryptography.openssl@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.native.System.Security.Cryptography.OpenSsl.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.native.system.security.cryptography.openssl@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.native.system.security.cryptography.openssl@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.native.system@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.native.System.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.native.system@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.native.system@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.opensuse.13.2-x64.runtime.native.system.security.cryptography.openssl@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.opensuse.13.2-x64.runtime.native.System.Security.Cryptography.OpenSsl.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.opensuse.13.2-x64.runtime.native.system.security.cryptography.openssl@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.opensuse.13.2-x64.runtime.native.system.security.cryptography.openssl@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.opensuse.42.1-x64.runtime.native.system.security.cryptography.openssl@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.opensuse.42.1-x64.runtime.native.System.Security.Cryptography.OpenSsl.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.opensuse.42.1-x64.runtime.native.system.security.cryptography.openssl@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.opensuse.42.1-x64.runtime.native.system.security.cryptography.openssl@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.osx.10.10-x64.runtime.native.system.security.cryptography.apple@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.osx.10.10-x64.runtime.native.System.Security.Cryptography.Apple.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.osx.10.10-x64.runtime.native.system.security.cryptography.apple@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.osx.10.10-x64.runtime.native.system.security.cryptography.apple@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.osx.10.10-x64.runtime.native.system.security.cryptography.openssl@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.osx.10.10-x64.runtime.native.System.Security.Cryptography.OpenSsl.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.osx.10.10-x64.runtime.native.system.security.cryptography.openssl@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.osx.10.10-x64.runtime.native.system.security.cryptography.openssl@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
runtime.rhel.7-x64.runtime.native.system.security.cryptography.openssl@4.3.0 has a License Policy Violation.

License: ms-net-library (runtime.rhel.7-x64.runtime.native.System.Security.Cryptography.OpenSsl.nuspec)

License: ms-net-library (dotnet_library_license.txt)

From: ?nuget/xunit@2.4.2nuget/runtime.rhel.7-x64.runtime.native.system.security.cryptography.openssl@4.3.0

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore nuget/runtime.rhel.7-x64.runtime.native.system.security.cryptography.openssl@4.3.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

See 65 more rows in the dashboard

View full report

Comment on lines +73 to +76
return Allowed == other.Allowed &&
(Request?.Equals(other.Request) ?? other.Request == null) &&
((Error == null && other.Error == null) ||
(Error != null && other.Error != null && Error.Message == other.Error.Message));

Check notice

Code scanning / CodeQL

Complex condition Note

Complex condition: too many logical operations in this expression.
@ryanpq ryanpq closed this Jun 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Support for .NET Standard 2.0

4 participants