Software Alternatives & Reviews

NuGet VS JFrog Xray

Compare NuGet VS JFrog Xray and see what are their differences

NuGet logo NuGet

The NuGet Gallery is the central package repository for NuGet, the package manager for .NET.

JFrog Xray logo JFrog Xray

JFrog Xray is a universal software composition analysis (SCA) solution that natively integrates with Artifactory
  • NuGet Landing page
    Landing page //
    2023-03-27
  • JFrog Xray Landing page
    Landing page //
    2023-10-18

Xray is supported on the Cloud (SaaS) platform with an Enterprise X or Enterprise+ license, and on the Self-Hosted platform with a Pro X, Enterprise X , or Enterprise+ license.

NuGet videos

Review jujur Belfoods nuget

More videos:

  • Review - NuGet Training Part 1 - The basics of Packages

JFrog Xray videos

JFrog Xray - Universal Artifact Analysis

More videos:

  • Review - [Hands-on Lab]  - Manage Security and Compliance with JFrog Xray
  • Review - Introduction to JFrog Xray

Category Popularity

0-100% (relative to NuGet and JFrog Xray)
Package Manager
100 100%
0% 0
Code Analysis
0 0%
100% 100
Front End Package Manager
Code Coverage
0 0%
100% 100

User comments

Share your experience with using NuGet and JFrog Xray. For example, how are they different and which one is better?
Log in or Post with

Reviews

These are some of the external sources and on-site user reviews we've used to compare NuGet and JFrog Xray

NuGet Reviews

Repository Management Tools
NuGet is the official package manager for .NET managed by the Outercurve Foundation. The original purpose to have a repository manager is to organize on your binary components that the development team relies upon and to maintain it properly. The whole idea of committing these along with your source code beats the purpose of using any Repository Managers and hence NuGet...
Source: mindmajix.com

JFrog Xray Reviews

We have no reviews of JFrog Xray yet.
Be the first one to post

Social recommendations and mentions

Based on our record, NuGet seems to be a lot more popular than JFrog Xray. While we know about 38 links to NuGet, we've tracked only 2 mentions of JFrog Xray. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.

NuGet mentions (38)

  • Add nuget.org as a package feed (nuget.exe CLI)
    How do I add nuget.org as a package feed when using nuget.exe CLI. (I need this for some CICD stuff I'm working on). Source: 6 months ago
  • NU1100 error.
    NU1100 Unable to resolve 'Azure.Identity (>= 1.7.0)' for 'net6.0-windows7.0'. PackageSourceMapping is enabled, the following source(s) were not considered: Microsoft Visual Studio Offline Packages, nuget.org. Source: 6 months ago
  • Building a RESTful Minimal API with .NET Core 7
    The .NET cli new command provides many templates to create your project. You can also add the search command to find community-developed templates from NuGet or use dotnet new list to see available templates provided by Microsoft. - Source: dev.to / 7 months ago
  • NuGet.Packaging in PowerShell - a Dependency for Importing PM Packages Automatically
    Right now, I have a (mostly) complete bootstrap script (gist) that downloads and imports NuGet.Packaging and all of its dependencies from nuget.org under the .NETStandard 2.0 TFM. Because I am using .NETStandard 2.0 dlls, in theory, this script should work on every version of PowerShell ever released. Source: 7 months ago
  • Adding Reference to Local csproj File
    I make many of my libraries (C#) publicly available on github, and also publish nuget packages of them on nuget.org. Source: 8 months ago
View more

JFrog Xray mentions (2)

  • LOG4J HAS OFFICIALLY RUINED MY WEEKEND
    I was very thankful for JFrog Xray these past few days. It spotted some embedded cases that wouldn't have shown in a simple dependency graph. Source: over 2 years ago
  • So how's the Log4J vulnerability treating everyone's Friday evening?
    Services that were vulnerable were pretty easily identified with xray. We're really noisy about keeping 3rd party deps up-to-date, so we were able to take full advantage of log4j2.formatMsgNoLookups for like 90% of our services. All of the services involved had config management in place, so it took less than an hour once we had all the service owners in-the-loop to get the quick-fix rolled out everywhere. Bunch... Source: over 2 years ago

What are some alternatives?

When comparing NuGet and JFrog Xray, you can also consider the following products

Chocolatey - The sane way to manage software on Windows.

Snyk - Snyk helps you use open source and stay secure. Continuously find and fix vulnerabilities for npm, Maven, NuGet, RubyGems, PyPI and much more.

Scoop - A command-line installer for Windows

SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.

npm - npm is a package manager for Node.

FlexNet Code Insight - FlexNet Code Insight is a single integrated solution for open source license compliance and security. Take control of your open source software management