Is Spruce Safe?

Spruce — Nerq Trust Score 50.2/100 (C- grade). Score based on 2 independent trust signals. Last analyzed: 2026-03-20

Spruce is a NuGet package with a Nerq Trust Score of 50.2/100 (C-), based on 3 independent data dimensions. Last analyzed: 2026-03-20 Security: 90/100. Popularity: 0/100. Data sourced from nuget.org, GitHub, and NVD. Last updated: 2026-03-20. Machine-readable data (JSON).

Spruce Across Platforms

Same developer/company in other registries:

Safety Guide: Spruce

What is Spruce?

Spruce is a NuGet package — Set of extension methods representing a lightweight orm and a migration framework, for use with Dapper..

How to Verify Safety

Run dotnet list package --vulnerable. Check publisher on nuget.org.

You can also check the trust score via API: GET /v1/preflight?target=Spruce

Key Safety Concerns for NuGet package

When evaluating any NuGet package, watch for: dependency vulnerabilities, publisher verification.

Measured Signals

Spruce has a Nerq Trust Score of 50/100 (C-). This score is a composite of automated measurements of security, maintenance, community, and quality signals.

Key Takeaways

• Spruce has a Trust Score of 50/100 (C-).
• The score is a measured composite — it is not a suitability judgment. Evaluate the individual signals against your own requirements.
• Query the current measured values via the Nerq API.

Disclaimer: Nerq trust scores are automated measurements based on publicly available signals. They are not endorsements, verdicts, or guarantees of suitability. Always evaluate the signals against your own requirements.