Manifest
    by Manifold
    Back to Results
    2.2.6

    Qodo: AI Code Review

    Qodo is the AI code review platform that catches bugs early, reduces review noise, and helps maintain code quality across fast-moving, AI-driven development. Qodo’s VSCode plugin enables developers to run self reviews on local code changes and resolve issues before code is committed.

    Programming LanguagesSnippetsMachine LearningTestingAIChatEducationOther
    Rank#310
    Publisher CodiumRegistry openvsx311,315Last scanned Sep 14, 2026, 08:30 AMRegistryHomepageGitHub
    Created
    4 years ago
    Last commit
    11 months ago
    Latest release
    v0.6.223 years ago

    Security Findings

    9

    No license file

    SuspiciousLineage

    No license file at the repo root and GitHub's licenseInfo is empty — code's legal status is unclear

    Dynamic exec of remote content (VSX)

    SuspiciousScanner

    Download-and-execute in package.json: chmod +x

    package.json

    OWASP-AST06

    Hardcoded secrets/API keys5×

    SuspiciousScanner

    Secret Keyword: wrong...****

    Secret Keyword: PASSW...****

    Secret Keyword: AIzaS...****

    Secret Keyword: auth/...****

    Secret Keyword: use s...****

    dist/extension.js

    OWASP-AST04

    Hardcoded secrets/API keys

    SuspiciousScanner

    Private Key: BEGIN...****

    webview/dist/main.js

    OWASP-AST04

    Sensitive file access

    SuspiciousScanner

    Access to sensitive file: homedir(),e.slice(1));return p.fileSystemLogger.debug(`Expanded home path: '${e}' -> '${t}'`),t}return e}static pathExis...

    OWASP-AST03