[Akshay Sonawane (apsonawane)]

This pull request restricts the C# plugin execution provider sample to an explicit two-source NuGet allowlist.

• Clears inherited and machine-level package sources.
• Maps Contoso.ML.OnnxRuntime.EP.Basic exactly to the generated local_feed, so a missing local package cannot fall back to a public package with the same ID.
• Uses the explicit NuGet.org v3 source for Microsoft.ML.OnnxRuntime and its public dependencies.

This keeps the locally built execution-provider package local while preserving clean restores of the sample's approved public dependencies.

[Copilot]

Pull request overview

This PR updates the NuGet package source configuration for the basic C# plugin execution provider sample to ensure restores use only the intended local package feed.

Changes:

• Clears any inherited/default NuGet package sources in nuget.config.
• Ensures the only configured source is the explicitly defined local_feed path.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

🟡 Changes recommended

Clearing inherited NuGet sources leaves the local feed unable to resolve ONNX Runtime and its dependencies, breaking the sample build on machines without cached packages.

1 open issue

• Local feed omits ONNX Runtime dependencies required by the sample build · New

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

Clearing inherited NuGet sources leaves no source for required ONNX Runtime dependencies, causing the documented sample build to fail on machines without cached packages.

1 open issue

• Local feed omits ONNX Runtime dependencies required by the sample build

_{Review effort: Max}

[Copilot]

🟡 Changes recommended

The added nuget.org feed lacks source mapping, allowing a missing local execution-provider package to resolve to a matching public package whose native library the sample then loads.

2 open issues

• Map the custom package to local_feed to prevent public fallback · New
• nuget.org contradicts the local-feed-only restriction · New

1 resolved since last review

• Local feed omits ONNX Runtime dependencies required by the sample build

_{Review effort: Max}