| name | credfeto-dotnet-owned-packages |
| description | Identify org-owned Credfeto.* and FunFair.* NuGet packages and read their source from GitHub instead of decompiling. Use whenever a Credfeto.* or FunFair.* package is encountered in a .NET repository — while debugging, researching behaviour, or adding a new dependency. |
Owned .NET Packages
Rule (MANDATORY)
Never decompile or reverse-engineer source code for packages listed here. These packages are owned by the same organisation. Read the source directly from the linked GitHub repository instead.
This applies regardless of how the package is referenced — as an analyzer (PrivateAssets="All"), a runtime dependency, or a dotnet tool.
Package Registry
When a Package Is Not Listed
If a Credfeto.* or FunFair.* package is encountered that is not in the table above:
- Add it to the table before proceeding — do not decompile it.
- Ask the user for the correct GitHub repository URL if it is not already known.
Using the Registry
When source is needed to understand behaviour (e.g. to fix a bug, write a test, or check an API surface), clone or browse the linked repository directly rather than using a decompiler.