Rank#-82
Publisher salesforceRegistry openvsx531,867Last scanned Sep 30, 2026, 05:33 PMRegistryHomepageGitHub
- Created
- 9 years ago
- Last commit
- 5 days ago
- Latest release
- v67.20.02 weeks ago
Security Findings
4pull_request_target with secrets
MaliciousLineage[.github/workflows/docOnlyAutoMerge.yml] pull_request_target with secrets
Hardcoded secrets/API keys2×
SuspiciousScannerSecret Keyword: strin...****
Secret Keyword: numbe...****
dist/index.js
Install-lifecycle script shipped
SuspiciousScannerpackage.json preinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): node ../../scripts/require-root-install.js