GitHub Pull Requests

This extension provides telemetry reporting for a VSCode extension, supporting both Application Insights and 1DS (One Data System) telemetry backends. Its main components and intentions are:

• Telemetry Client Factory: Depending on the key format, it chooses between Application Insights and 1DS telemetry. It supports sending events and exceptions, and can flush data on demand.
• Telemetry Sender/Reporter: Buffers events/exceptions until the telemetry client is instantiated, then sends them. It supports opt-in/out logic based on user settings.
• Telemetry Utility: Provides helper functions for property redaction, key format detection, and common property gathering.
• Network Activity: Telemetry is sent to Microsoft endpoints (Application Insights or 1DS URLs) using HTTPS POST requests. No arbitrary endpoints or dynamic URLs are used.
• Filesystem/Process: No direct filesystem or process execution is performed by the extension code.
• Obfuscation: The code is minified but not obfuscated. Variable names are short, but logic and API usage are clear and not intentionally hidden.
• Backdoors/Exfiltration: No evidence of backdoors, arbitrary code execution, or data exfiltration beyond standard telemetry events to Microsoft endpoints.

Example: Telemetry Event Sending

this._telemetryClient.logEvent(eventName, data);

Example: 1DS Client Factory

const y = async (key, vscodeAPI) => { ... return { logEvent: ..., flush: ... } };

Network endpoints are hardcoded to Microsoft telemetry domains, and only standard event/exception data is sent. There is no evidence of sending file contents, environment variables, or user code.

User opt-in is respected via VSCode telemetry settings.

Summary: The extension implements standard telemetry reporting for VSCode extensions, with no suspicious or malicious behaviors detected. All network activity is limited to Microsoft telemetry endpoints, and the code is not obfuscated beyond minification.