Nupkg files expose codes/workflows

Help Forum
,
1

Hello, is there a way we can hide or to make our code secure when we publish it as package .nupkg? We can open that nupkg file to see the code just convert it to zip file and there it is. One of our clients has a issue with that nupkg because it exposes the code itself. TIA!

2

Hi,

If we create WIndows (.net5/6) or crossplatform project, we can choose include sources or not in the package when publishing, as the following. (In these compatibility, process is compiled as dll) It might mitigate risk of expose source code.

image

Regards,

3

Hello yoichi,

Im not able to see that option when I publishing package is there a way i can have that option?

image
image818×496 19 KB

image
image810×488 15.9 KB

image
image809×481 17.1 KB

4

Hi,

I guess your project is Windows-legacy compatible project. Unfortunately, it doesn’t support that option.
Can you check bottom-right corner of Studio?

image

Regards,

5

hello this is the bottom right corner of my studio

image
image757×176 9.32 KB

Follow up question: how can we do this WIndows (.net5/6) or crossplatform project? It is on the creation of project?

6

Hi,

Which version do you use? Windows and CrossPlatform is supported in 21.10 or above.
And we can choose it when create project as the following.

image

Regards,

7

Hey @joscares

You can also try Package signing

Thanks
#nK

8

Ohh okay Im using 2020.10.7

9

Even we do this package signing we can still extract the code from nupkg right?

10

Hey @joscares

Only by authorised users with signing certificate!

Thanks
#nK

11

Hi,

I don’t think signing package function prevents exposure source code because user can see extracted each xaml files.

Regards,

12

yep that’s what I understand too on that signing package