Nugget adds Packages folder to the solution. Should it be part of Source control?

Topics: General
May 5, 2014 at 7:19 PM

I am using NuGet to add packages to my solution. NuGet added a Packages folder to my visual studio’s solution root folder. The concerning part is that the “packages” folder is not part of source control. That means the source code comes from TFS, but the project references come from a folder that is fed by external source. People can put malicious code in the packages folder and build the application.

I like to understand how my other colleagues that get the source code from the TFS source control can build the project with packages folder not being part of the source control?
Thank you,
May 7, 2014 at 8:53 AM
As of version 2.7, NuGet will use package restore to pull down the packages in your packages.config file by default. That means that you don't have to check in the packages folder. NuGet will get the packages when your colleagues tries to build the solution. See the NuGet 2.7 release notes.