The **Microsoft.Extensions.Http.Polly** package (even the latest https://www.nuget.org/packages/Microsoft.Extensions.Http.Polly/10.0.0-preview.5.25277.114) depends on **Polly.Extensions.Http** (https://www.nuget.org/packages/Polly.Extensions.Http/) which is deprecated in favor of the new **Microsoft.Extensions.Http.Resilience** package. Consuming "Microsoft.Extensions.Http.Polly" will cause transitive dependency on deprecated package which can be reported in NuGet Audit. Related: - https://github.com/dotnet/docs/issues/45522 - https://github.com/dotnet/aspnetcore/issues/57209