NuGet
Developerapi.nuget.org
.NET package metadata from nuget.org: the registration index for a package and full-text search.
Capabilities (15)
GET /v1/data/nuget/autocomplete1 creditReturns a short array of package ids that begin with the typed prefix, plus the total number of matches - the data behind nuget.org's search box suggestions.
GET /v1/data/nuget/catalog-entry1 creditReturns the permalinked catalog leaf for one published version: the complete nuspec as JSON plus packageEntries (every file inside the .nupkg with its compressed and uncompressed size), packageHash and hash algorithm (SHA512), packageSize, licenseExpression, minClientVersion, dependency groups and created/lastEdited/published timestamps and verbatimVersion.
GET /v1/data/nuget/catalog-index1 creditReturns the root of nuget.org's append-only change log: the total commit count and one entry per catalog page, each with the page URL and the commit timestamp it ends at, newest last.
GET /v1/data/nuget/catalog-page1 creditReturns one page of the change log: up to ~2,750 items, each a package id, version, commit timestamp and type (PackageDetails for a publish or edit, PackageDelete for a removal) with a permalink to that version's catalog entry.
GET /v1/data/nuget/gallery-search1 creditThe search index behind the nuget.org website: returns totalHits plus documents carrying owners, verified flag, created/published/lastEdited timestamps, listed flag, package hash and file size, flattened dependencies, target frameworks and a Vulnerabilities array - and, unlike the standard search, it can be sorted and run with no query at all.
GET /v1/data/nuget/package1 creditReturns the registration document for a package: every published version grouped into pages, each normally inlined with its catalog entry (description, authors, license, tags, dependency groups per target framework), listed flag and publish date.
GET /v1/data/nuget/package-page1 creditReturns one page of a paged registration: the full catalog entry for each of up to 128 versions in the lower..upper range, with dependency groups, license, tags and publish dates.
GET /v1/data/nuget/package-version1 creditReturns the registration leaf for one exact version: whether it is listed, when it was published, the .nupkg download URL, and the catalog entry URL holding that version's full metadata.
GET /v1/data/nuget/repository-signatures1 creditReturns whether every package on the feed is repository-signed and the certificates used to do it: subject, issuer, SHA-256 fingerprint and validity window.
GET /v1/data/nuget/search1 creditSearches nuget.org and returns ranked packages with id, latest version, description, authors, tags, total download count, verified-owner flag, project and icon URLs, and a per-version download breakdown.
GET /v1/data/nuget/search-diagnostics1 creditReturns the search service's own health report: indexed document count (2.18 M registrations), the index's last commit timestamp, warm query duration, the deployment label and the age of its auxiliary download-count files.
GET /v1/data/nuget/service-index1 creditReturns nuget.org's resource directory: every V3 resource with its @type, version and base URL - search, autocomplete, registration, flat container, catalog, vulnerabilities, signatures and the HTML link templates.
GET /v1/data/nuget/versions1 creditReturns a plain ascending array of every version string published for a package, including prereleases and unlisted ones.
GET /v1/data/nuget/vulnerabilities1 creditReturns the two-entry pointer document for nuget.org's vulnerability dataset: the timestamped URL of the current base snapshot and of the incremental update file, each with the time it was generated.
GET /v1/data/nuget/vulnerability-base1 creditReturns the full advisory dataset as an object keyed by lowercase package id, each value an array of advisories with a GitHub Advisory URL, a severity number (0 low to 3 critical) and the affected version range in NuGet interval notation such as "(, 13.0.1)".
Licence
nuget.org serves this metadata through the documented V3 API. We pass it through and do not licence callers to rebuild the registry.
https://www.nuget.org/policies/TermsAttribution
Display this wherever you show the data. It arrives on every response as provenance.attribution_text.
Source: NuGet Gallery
Cache: up to 3600s
