All 15 .NET CLI, SDK & Project Structure (csproj) questions
More in .NET CLI, SDK & Project Structure (csproj)
What is a .sln (solution) file, and how does it relate to .csproj project files? How does target framework moniker (TFM) selection, like net8.0 or net8.0-windows, affect what a project can do? How do global.json files pin a specific .NET SDK version for a project or repository? What is the difference between framework-dependent deployment (FDD) and self-contained deployment (SCD)? What is the difference between dotnet build, dotnet publish, and dotnet run? What are MSBuild properties and items, and how do they control the build process? What is Directory.Build.props, and how does it help manage shared MSBuild settings across multiple projects in a repository? What is Native AOT (Ahead-of-Time) compilation, and what are its benefits and constraints? How do project references (<ProjectReference>) differ from package references, and how do they affect build order?
Advertisement
.NET › .NET CLI, SDK & Project Structure (csproj)

How do you add, remove, and list NuGet package references using the dotnet CLI?

Intermediate

Answer

`dotnet add package <PackageId>` adds a PackageReference to the .csproj (optionally with --version), `dotnet remove package <PackageId>` removes it, and `dotnet list package` shows all references, including outdated or vulnerable packages with the --outdated or --vulnerable flags.
dotnet add package Serilog.AspNetCore --version 8.0.0
dotnet list package --outdated
dotnet remove package Newtonsoft.Json
Real-world example A security audit runs `dotnet list package --vulnerable` across every project in a solution as part of a scheduled CI job to catch known CVEs in third-party dependencies before they reach production.

Common follow-ups: How does --outdated differ from --vulnerable in its data source?;How do you restore packages from a private NuGet feed?

Assemblies & NuGet;.NET CLI SDK & Project Structure (csproj)
All 15 .NET CLI, SDK & Project Structure (csproj) questions