Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Missing Digital Signature in "MahApps.Metro.resources.dll" #4540

Open
RubavathyImmanuvel opened this issue Jan 28, 2025 · 0 comments
Open

Missing Digital Signature in "MahApps.Metro.resources.dll" #4540

RubavathyImmanuvel opened this issue Jan 28, 2025 · 0 comments
Labels

Comments

@RubavathyImmanuvel
Copy link

Bug Description

The "MahApps.Metro.resources.dll" file provided in the MahApps.Metro NuGet package is missing a digital signature. This issue exists in all versions starting from 2.4.0 up to the latest. Furthermore, this is the case for all folders inside the lib directory of the package. The absence of a digital signature can raise concerns in environments where signed assemblies are required for security and compliance.

Steps to reproduce

  1. Install any version of the MahApps.Metro NuGet package starting from 2.4.0 (e.g., via Visual Studio or the .NET CLI).
  2. Navigate to the lib directory of the installed package.
  3. Open the folder for the respective target framework (e.g., netcoreapp3.1 or net5.0) and then "de" folder.
  4. Locate the MahApps.Metro.resources.dll file.
  5. Right-click on the DLL and open Properties.
  6. Check for the Digital Signatures tab in the Properties window----> missing(problem)

Expected behavior

All assemblies distributed in the NuGet package should be digitally signed.

Actual behavior

  1. The MahApps.Metro.resources.dll file is not digitally signed.
  2. This behavior is observed across all target framework folders inside the lib directory.
  3. The issue is present in all versions starting from 2.4.0 to the latest.

Environment

MahApps.Metro version: This issue seems to have started with version 2.4.0, as the MahApps.Metro.resources.dll file was introduced in this version.
Target Framework: All

Screenshots

Image

Image

Proposed solution

Please sign the MahApps.Metro.resources.dll file in future releases to ensure that it complies with security standards. If possible, provide a timeline or guidance for addressing this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

No branches or pull requests

1 participant