Avoid upgrading Moq | Replace by another lib
Closed this issue · 2 comments
Tr00d commented
Due to recent privacy issues, the following is required:
- Avoid upgrading Moq. The malware version (4.20.0) have been removed from the nuget repository, the latest version (4.20.2) looks safe.
- Replace Moq by another library. This is definitely a trust concern. The good news is Moq is not used in latest implementations (WireMock is), so this move forward over time.
SimonPriceUL commented
@Tr00d 4.20.2 I think is also unsafe, stay on 4.18.4 if youre keeping Moq
Tr00d commented
@SimonPriceUL Thanks for letting me know. I'll definitely keep an eye on this. My main goal is to remove Moq entirely as I don't really need it. This is for the 'legacy' side of things