Looks like this sort of happened inside the files where the targets exist that are brought in by Hydra... I still think making it clear that the NuGet has been patched is important, but you do have this in the other targets.... your call!