TurianHammer

For the record I don't believe in the supernatural but I love hearing others people's stories and believe that most people aren't lying.

I've personally had a few experiences that I cannot explain and that, in the moment, were quite scary.

What's your paranormal experience?

I feel like I'm missing something with ML.NET.

As a POC before investing serious computer time. I tried creating a CSV file, 2 columns with 1000s of rows:

Greeting,Reply
My name is Jimmy,Hi Jimmy! How are you today?
My name is Sally,Hi Sally! How are you today?
My name is Mike,Hi Mike! How are you today?

The Model Builder has classification models (I don't believe this is a classification model because I want the thing to be able to predict something new so when it received "My name is Poutine" it will say "Hi Poutine! How are you today?"

I tried anyway and kept getting 0% success on the model.

I came up with another idea, to convert the words to numeric values and then return an array of numeric values.

Doesn't seem like ML.NET can return arrays very easily. I kept getting errors about invalid schema expecting single Key returns rather than arrays.

When I followed up with Bing AI on this it suggested:

Unfortunately, ML.NET does not currently have built-in support for text generation or sequence-to-sequence models. You may want to consider using a different machine learning framework that supports these capabilities, such as TensorFlow or PyTorch.

Am I getting accurate info from the AI? Should I be looking outside of the MicrosoftSphere for this stuff?

Anything you'd recommend?

How do you all go about validating that there's nothing malicious in your nuget packages?

Is there a best practice for this?

It's easy if the package is from a known source like Microsoft but I'm curious what you do for lesser know people?

I will usually see how many others are using it, probably scan the code in the GITHUB repo. Sometimes if it's a lesser known dev I'll just pull from GITHub rather than using NuGet.

Today however, I was looking at a package and the nuget package itself looks fine but it contains some C++ code that is compiled elsewhere...fine I'll go get that and see. But that code requires CMake and some other 3rd party add-ons which I also have to review.

I'm not aware of any audits on NuGet that would prevent bad people from uploading code. What do you all do to protect the integrity of your software?