Analyzer for redundant NuGet packages

[KirillOsenkov]

SDK has been moving some NuGet references in the box, such as Microsoft.NetFramework.ReferenceAssemblies or Microsoft.SourceLink.AzureRepos.Git (etc)

If a codebase has an explicit package reference to, say, Microsoft.SourceLink.AzureRepos.Git 1.0.0, it will inherit an older version, that has this bug: #37027

Would be nice to have an analyzer that detects this and suggests to remove an explicit reference, so that the built-in version takes precedence (that no longer has this bug)

[AR-May]

Team triage: This is a good idea, ideally this would be a custom analyzer in sdk.

[baronfel]

Agree with @AR-May - we should transfer to dotnet/SDK and apply the 'msbuild-analyzer-candidate' label.

[dotnet-policy-service]

Thanks for creating this issue! We believe this issue is related to NuGet tooling, which is maintained by the NuGet team. Thus, we closed this one and encourage you to raise this issue in the NuGet repository instead. Don’t forget to check out NuGet’s contributing guide before submitting an issue!

If you believe this issue was closed out of error, please comment to let us know.

Happy Coding!

[JanKrivanek]

Reopening - this is relevant to the sdk