Skip to content

The .NET ecosystem (C#, F#, VB.NET) uses NuGet for package management via .csproj project files. The NuGet Gallery hosts 350,000+ packages. ReleaseRun provides free tools for auditing .NET project dependencies, checking CVEs in NuGet packages, and tracking .NET runtime release status.

.NET Dependency Health Checkers

.csproj Health Checker

The .csproj Health Checker scans your .csproj project file for NuGet packages with known CVEs (via GitHub Advisory Database), outdated major versions, and deprecated packages. Paste your .csproj content for an instant report.

NuGet Package Health Checker

The NuGet Package Health Checker checks an individual package's version history, maintenance status, and known security advisories. Useful when evaluating NuGet packages before adding them to a project.

.NET Runtime Release History and LTS Policy

.NET releases one version per year (November). Even-numbered versions (.NET 6, 8, 10) are LTS with 3 years of support. Odd-numbered versions (.NET 7, 9) are STS (Standard Term Support) with only 18 months of support. The .NET Release History page covers the full version timeline.

Current .NET status:

  • .NET 9 (November 2024) — STS, EOL May 2026
  • .NET 8 LTS (November 2023) — Supported until November 2026
  • .NET 7 — EOL May 2024 (no patches)
  • .NET 6 LTS — EOL November 2024

If you are running .NET 6 or earlier in production, you are operating an unsupported runtime.

ASP.NET Core and Framework Versions

ASP.NET Core version numbers align with .NET runtime versions. ASP.NET Core 8 requires .NET 8, ASP.NET Core 9 requires .NET 9. There is no separate support lifecycle — ASP.NET Core support follows the .NET runtime it targets.

.NET Security Tools

  • dotnet list package --vulnerable — built-in NuGet command to list packages with known advisories; added in .NET 5
  • Security Code Scan — Roslyn-based SAST scanner for C# projects; integrates with Visual Studio and CI/CD
  • Semgrep for C# — open-source SAST with C# support; community and commercial rules available

All .NET Tools on ReleaseRun