Sophia Favro

Intern working on NuGet Team @Microsoft
​​​​​​

[Sophia Favro @FavroSophia]

@vmpaulino @dotnet What would you want to know about the vulnerability level or any other security information?

[Sophia Favro @FavroSophia]

Hey .NET community! I am an intern on the NuGet team and I am improving how information about package ownership is shown. When looking at the picture:
- Who do you think the package was created by?
- Would you trust that the package was safe to use? #nuget #dotnet

[Sophia Favro @FavroSophia]

Hey NuGet users! I am looking for some feedback on how users of https://t.co/tuTlVyZotN install packages.
- When looking to install a package, how do you know how to install it?
- How do you know that you are installing it correctly?
#nuget #dotnet

[Sophia Favro @FavroSophia]

@pacodelacruz @dotnet If there was a link, what would you want to be able to see on the author's profile?

[Sophia Favro @FavroSophia]

@augustoproiete @joelverhagen This something that we have seen and a big part of why we want to clear up owner and author (as it is not always malicious). What made you think to label it unofficial?

[Sophia Favro @FavroSophia]

@_rainweaver_ That is a really great analogy! A big part of this tweet came from wanting to see how people read/interpreted owner and author, so this is very helpful