Repo Does not Exist
Flags items that have claimed to be open-source but the repository does not exist.
Flags items that have claimed to be open-source but the repository does not exist.
Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.
Flags Snippet type extensions that run code on the user's machine. Snippet should be static JSON files and not execute any code.
AI-powered analysis of the extension's source code for security insights and risk assessment.
This Javascript code defines a simple VS Code extension called "helper-plugin" which does the following:
Functionality:
How it works:
vscode module to interact with the VS Code editor.vscode.commands.registerCommand to register a command with the ID helper-plugin.helloWorld. This ID needs to match the one defined in the package.json file.vscode.window.showInformationMessage to display the "Hello World" message box to the user.activate function: This function is called when the extension is activated (when VS Code starts or the extension is loaded). It contains the core logic for setting up the command.deactivate function: This function is called when the extension is deactivated (when VS Code is closed or the extension is unloaded). This example has an empty deactivate function as there's no cleanup required.activate and deactivate functions are exported as a module, allowing VS Code to properly load and manage the extension.API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
Known vulnerabilities and security issues detected in the extension's dependencies and code.
Any identifiers we detected that may indicate external communication from the item's code
Dependencies and third-party libraries used by the extension, including version information and license details.