light up the NuGet packages on GitHub

[shiftkey]

You might have noticed this announcement about adding support for NuGet packages to GitHub's security vulnerability alerts.

I tested out Octokit.net today and noticed this, and got a bit sad:

Nevermind, it's easy to fix - if the PackageProjectUrl or RepositoryUrl attributes point to a GitHub repository URL (we're not following redirects, ain't nobody got time for that), these will light up differently:

This sadly won't be backported to the old nuspecs unless they get updated, but anyone using System.Reactive currently will get the benefit after a package update.

I'm not sure how attached to fwlinks you are these days, so RepositoryUrl might be the necessary workaroudn here if you want to keep them Just In Case™.

[clairernovotny]

I wonder how many Microsoft packages have fwlinks? It may be worth finding out and supporting a redirect if it's going to cut-out a lot of packages.

[shiftkey]

@onovotny I'll check in with the team after Universe is done and see if they can help