Getting redundant packages added into the Nuget Feed

Question

I will describe my steps to see where I hit the problem.

1. I Created new class library (.NET Standard), wrote required solution, packed it.
2. Pushed this package to Azure DevOps.
3. Created new asp.net Core Web Application project.
4. Selected my custom Package Source as the only enabled source.
5. Installed package from this solution.
6. After some period of time other packages were added to this Nuget Feed. For example, bootrstrap, Microsoft.AspNet.Mvc etc.

If there is anyone who could give a hint, solution or guide in which direction should I keep on looking for a source of the problem, that would be very helpful.

Answer 1

I expect the package source for all of those packages is "NuGet".

You have upstream sources enabled. This is expected behavior; your feed is synchronizing all of the application's required packages from NuGet.org, so that you only need to restore from a single feed, your Artifacts feed.