Recommendation on nuget package attribution.