- Created
- 9 years ago
- Last commit
- 6 days ago
- Latest release
- eslint-plugin-vscode-extensions-v65.14.0last week
Security Findings
11Unpinned dependencies
SuspiciousLineage1 unpinned: @salesforce/effect-octokit
Suspicious outbound hosts7×
SuspiciousScannerOutbound URLs to non-allowlisted host(s): sfdc.co, w3c.github.io
Outbound URLs to non-allowlisted host(s): blog.imperva.com, docs.oracle.com, encoding.spec.whatwg.org, heycam.github.io, html5doctor.com, sfdc.co, w3c.github.io, www.ecma-international.org
Outbound URLs to non-allowlisted host(s): adrianheine.de, dzone.com, marijnhaverbeke.nl, rreverser.com, www.ecma-international.org
Outbound URLs to non-allowlisted host(s): beautifier.io, drafts.csswg.org, googlechrome.github.io, help.yahoo.com, html.spec.whatwg.org, r12a.github.io, stackoverflow.com, tools.ietf.org
Outbound URLs to non-allowlisted host(s): daringfireball.net, microsoft.github.io, stackoverflow.com, tools.ietf.org, www.fileformat.info
Outbound URLs to non-allowlisted host(s): beautifier.io, drafts.csswg.org, googlechrome.github.io, help.yahoo.com, html.spec.whatwg.org, json-schema.org, r12a.github.io, registry.yarnpkg.com
Outbound URLs to non-allowlisted host(s): 794testsite.my.site.com, aura-oss-dev.herokuapp.com, html5doctor.com, www.ecma-international.org, www.iana.org
Install-lifecycle script shipped
SuspiciousScannerpackage.json preinstall script is shipped (inert on VSIX install but a build-hygiene / dev-tooling tell): node ../../scripts/require-root-install.js
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/categoryApprove.yml] curl https://cursor.com/install