dotnet-project-file-analyzers

Proj1100: Avoid using Moq

Since Moq v4.20 a dependency to (SponsorLink)[https://www.nuget.org/packages/Devlooped.SponsorLink/1.0.0] has been added. This is a project that tries to retrieve data (email addresses) from your system and sends them to an external system. This violates GDPR and the good practices of open source.

Therefore, usage is strongly discouraged.

Further reading: Reddit

Non-compliant

<Project Sdk="Microsoft.NET.Sdk">

  <ItemGroup>
    <PackageReference Include="Moq" Version="4.20" />
  </ItemGroup>

</Project>

Compliant

The last safe version.

<Project Sdk="Microsoft.NET.Sdk">

  <ItemGroup>
    <PackageReference Include="Moq" Version="4.18.4" />
  </ItemGroup>

</Project>

This site is open source. Improve this page.