🔧 MSBuild File Quality Report — 2026-09-30

Files reviewed: 96
New findings: 🔴 2 errors · 🟡 2 warnings · 🔵 0 suggestions

🔴 Errors

src/FSharp.Build/Microsoft.FSharp.NetSdk.props

• Rule B-1: ValueTupleImplicitPackageVersion is consumed before its default is assigned, and the later unconditional assignment overwrites consumer/repository choices.
  • Lines: 87–97
  • Current:

    <ItemGroup Condition="...">
      <PackageReference Include="System.ValueTuple" Version="$(ValueTupleImplicitPackageVersion)" />
    </ItemGroup>
    
    <PropertyGroup>
      <ValueTupleImplicitPackageVersion>4.6.2</ValueTupleImplicitPackageVersion>
    </PropertyGroup>

  • Impact: For consumer projects targeting .NET Standard/.NET Core below 2.0, the package item is evaluated before the default exists and can receive an empty version. A value supplied by the project is also replaced before the later .NET Framework package item is evaluated.
  • Suggested:

    <PropertyGroup>
      <ValueTupleImplicitPackageVersion Condition="'$(ValueTupleImplicitPackageVersion)' == ''">4.6.2</ValueTupleImplicitPackageVersion>
    </PropertyGroup>
    
    <ItemGroup Condition="...">
      <PackageReference Include="System.ValueTuple" Version="$(ValueTupleImplicitPackageVersion)" />
    </ItemGroup>

eng/Packages.props

• Rule B-1: The three computed central package-version floors are never consumed.
  • Lines: 12–17, 111, 116, 118
  • Current:

    <SystemCollectionsImmutableCentralVersion>...</SystemCollectionsImmutableCentralVersion>
    <SystemReflectionMetadataCentralVersion>...</SystemReflectionMetadataCentralVersion>
    <SystemSecurityCryptographyXmlCentralVersion>...</SystemSecurityCryptographyXmlCentralVersion>
    
    <PackageVersion Include="System.Collections.Immutable" Version="$(SystemCollectionsImmutableVersion)" />
    <PackageVersion Include="System.Reflection.Metadata" Version="$(SystemReflectionMetadataVersion)" />
    <PackageVersion Include="System.Security.Cryptography.Xml" Version="$(SystemSecurityCryptographyXmlVersion)" />

  • Impact: The documented 10.0.9 floor is ineffective, retaining the CPM downgrade/prebuilt-package risk that the surrounding comment says these aliases are intended to prevent.
  • Suggested:

    <PackageVersion Include="System.Collections.Immutable" Version="$(SystemCollectionsImmutableCentralVersion)" />
    <PackageVersion Include="System.Reflection.Metadata" Version="$(SystemReflectionMetadataCentralVersion)" />
    <PackageVersion Include="System.Security.Cryptography.Xml" Version="$(SystemSecurityCryptographyXmlCentralVersion)" />

🟡 Warnings

FSharpBuild.Directory.Build.targets

• Rule A-3: The incremental resource comparison hashes an undefined item instead of the files collected immediately above it.
  • Lines: 131–155
  • Current:

    <IntermediateResourcesFiles Include="$(IntermediateOutputPath)resources\*.resx" />
    ...
    <GetFileHash Files="@(IntermediateResourceFilesForHash)">

  • Impact: @(IntermediateResourceFilesForHash) is never populated, so IntermediateResourceFilesHash is based on an empty item list and the target cannot correctly determine whether transformed resources changed.
  • Suggested:

    <GetFileHash Files="@(IntermediateResourcesFiles)">

vsintegration/tests/MockTypeProviders/Directory.Build.props

• Rule B-3: The test-specific NoWarn assignment discards inherited suppressions.
  • Line: 13
  • Current: <NoWarn>0067;0169;1591</NoWarn>
  • Suggested: <NoWarn>$(NoWarn);0067;0169;1591</NoWarn>

🔵 Suggestions

None.

Existing issue #20357 already tracks the CreateManifestResourceNamesDependsOn overwrite, missing FileWrites registration for ILLink substitutions, and stale shim fallback. Those unchanged findings are intentionally not duplicated here.

Review Rules Reference

This review checks against MSBuild canonical patterns for:

• Target authoring: DependsOn chains, Returns vs Outputs, incremental build, FileWrites
• Property patterns: Conditional defaults, quoted conditions, semicolon composition, path normalization
• Item management: Include/Remove/Update, batching, generated file placement
• Extension points: Import guards, CustomBefore/After hooks, cross-platform paths

Generated by MSBuild Quality Review

Generated by F# MSBuild File Quality Review Agent · gpt56 1.8M · ◷