Proposal for an Alternative to Moq Library

[KrystianLesniak]

Dear Avalonia Team,

I hope this message finds you well. I am writing to discuss a concern regarding the recent behavior of the Moq library, specifically starting from version 4.20. It has come to our attention that this library has exhibited behavior resembling that of malware, sending unauthorized emails from Git to cloud services. As Avalonia project currently utilizes version 4.18.4, which is considered safe, I recommend refraining from updating to the problematic versions.

In light of this situation, I would like to propose the exploration of alternative mocking libraries for Avalonia project. Given the critical role of mocking in testing and development processes, it is imperative to maintain a high level of security and reliability.

More information:
https://github.com/moq/moq/issues/1370
https://www.reddit.com/r/dotnet/comments/15ljdcc/does_moq_in_its_latest_version_extract_and_send/

[hahyes]

It is worth to mention discussion here: https://github.com/moq/moq/issues/1372
It seems like DLL has the ability to "hide" for x days, which is making this even more suspiscious.

[wieslawsoltes]

Maybe they will revert that https://github.com/moq/moq/pull/1373, but comments are not much optimistic https://github.com/moq/moq/pull/1373#issuecomment-1670914563