Hello.

We are new to using ProGet, and so far it is great. But, our security team would like a weekly report showing all the packages with vulnerabilities, how many times they were downloaded, and who downloaded those packages. There doesn't seem to be a native report that shows that, so I created one using the API. I can get all the data except who downloaded the vulnerable package. I know the data is in the database, because I can see it on the Usage & Statistics page.

It would be great if you developed a report or created a new API, or enhanced an exiting one, to let me get the usage & statistic data for a package.

Hello,

We are using GitHub packages to provide private internal feeds for Nuget and NPM. As we move to using ProGet, is it recommended to create a connection to those and proxy them like the public feeds, or should we be looking to move to hosted feeds inside ProGet?