Rank#908
- Created
- 7 years ago
- Last commit
- 2 years ago
Security Findings
3No tagged releases
SuspiciousLineageRepo ships no git tags and no GitHub releases — consumers cannot pin to stable, reviewable versions
Package registry name mismatch
SuspiciousLineagenpm name 'svg' != repo 'vscode-svg2'
Install-lifecycle script shipped
SuspiciousScannerpackage.json postinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): cd client && npm install && cd ../server && npm install && cd ..