Open
Description
NuGet Product(s) Involved
Visual Studio Package Management UI, Visual Studio Package Manager Console
The Elevator Pitch
PackageReference allows packages to have per-RID dependencies. However, these packages are not shown in the dependencies graph in Visual Studio's Solution Explorer.
Consider a customer who gets a restore message saying a package has a known vulnerability, but when they search for the package, it's not displayed. It gives customers a false impression that NugetAudit may be wrong.
Additional Context and Details
This issue was created while investigating a VS feedback ticket