title: How to find out which assembly caused a specific assembly to be in the bin folder?
body: <p>I have a Microsoft.AspNetCore.Authentication.JwtBearer.dll version 3.0 which is old and has a vulnerability. I am trying to find which assembly is dependent on it. First I manually expanded every referenced package to the bottom children in every project and I couldn't find it. I probably missed it plus this is not a good reliable way.</p>
  <p>I ran 'dotnet list package --include-transitive'. It showed Microsoft.AspNetCore.Authentication.JwtBearer in a couple projects but it doesn't show which assembly is dependent on it.</p>
  <p>This is a new .NET 6 project I created with the latest of the packages so I am surprised to see this old assembly in there.</p>
  <p>What's a good way to find out the dependent assembly?</p>