Unverified Publisher
Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.
Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.
Flags items that are not maintained on the marketplace, suggesting concerns about the item's reputation and the publisher's reliability.
Flags publishers lacking installs on the marketplace, suggesting concerns about the publisher's reliability.
AI-powered analysis of the extension's source code for security insights and risk assessment.
The provided code is part of a Visual Studio Code (VSCode) extension named "Fragment by Morning Cloud." Its primary purpose is to demonstrate how to implement an inline completion provider, which assists developers by suggesting code completions as they type.
demo-ext.command1 that displays an information message with the arguments passed to it.
vscode.commands.registerCommand("demo-ext.command1", async (...args) => {
vscode.window.showInformationMessage("command1: " + JSON.stringify(args));
});
AutoCompletionProvider.
const statusBarItem = new StatusItem_1.StatusItem();
statusBarItem.register(_context.subscriptions);
provideInlineCompletionItems function to fetch completion items.
const provider = {
async provideInlineCompletionItems(document, position, _context, _token) {
console.log("provideInlineCompletionItems triggered");
return serviceProvider
.provideCompletionItems(document, position, _context, _token)
.catch((err) => {
console.log("provideInlineCompletionItems error:", err);
return undefined;
});
},
};
vscode.languages.registerInlineCompletionItemProvider({ pattern: "**" }, provider);
vscode.commands.registerCommand, vscode.window.showInformationMessage, and vscode.languages.registerInlineCompletionItemProvider.The code appears to be a benign VSCode extension focused on providing inline code completions and does not exhibit any malicious behavior.
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
Known vulnerabilities and security issues detected in the extension's dependencies and code.
Any identifiers we detected that may indicate external communication from the item's code
Dependencies and third-party libraries used by the extension, including version information and license details.