Frank Shearar

What Steve said: all I want is to not have my stats skewed because "my code is not covered" when actually it's "code the compiler generated is not covered". I...

For example: project Sub contains something that transitively references a naughty package version. Sub is part of Super, some top level project (exe, Azure Cloud Service worker role, whatever). Super...

Checking the compiled DLL would definitely be more accurate. Binding redirects mean that you might have compiled against the vulnerable package version but not actually be using it. At least...

OK, I can take a hint :) Maybe I should see what I can take from Gitocello, which does just this - walk the history from the initial package and...

Ah, I think you're talking about walking the ConfigurationsOf? That's pretty coarse-grained. To a first approximation of correctness you could - walk the ConfigurationOf versions and - find out the...

I came up with a ridiculously complicated scheme to reconstruct the history, but there's a much easier way: treat the thing like a merge operation: walk the package histories in...

https://github.com/frankshearar/Control

Let me first tweak the conversion to preserve the original timestamps. I'll do that tonight or over the weekend; it's just pulling the date info out the `MCVersionInfo`s and using...

OK, so if I did branching support, Metacello wouldn't be a great test case :)

It's clearly not a [fully polished project,](http://www.lshift.net/blog/2012/08/20/monticello-git) and requires some things that haven't been released yet (I've sent Tim Felgentreff some extensions to Gitocello, and I wrote a SequenceableCollection >>...