Manifest
    by Manifold
    Back to Results
    1.6.3

    Expo Tools

    Expo for VS Code keeps you productive with debugging, IntelliSense and prebuild previews

    DebuggersOther
    Rank#711
    Publisher expoRegistry openvsx337,027Last scanned Sep 5, 2026, 08:04 AMRegistryHomepageGitHub
    Created
    6 years ago
    Last commit
    4 months ago
    Latest release
    1.6.34 months ago

    Security Findings

    3

    Hardcoded secrets/API keys

    SuspiciousScanner

    Secret Keyword: use s...****

    out/src/extension.js

    OWASP-AST04

    Transitive delivery to an unrelated extension

    SuspiciousScanner

    Pulls unrelated extension(s) via extensionPack/Dependencies (payload lives in the target): redhat.vscode-yaml

    OWASP-AST02

    Install-lifecycle script shipped

    SuspiciousScanner

    package.json postinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): patch-package

    OWASP-AST02OWASP-AST06