Policy result for this exact artifact
Exact artifact intelligence
Continue - open-source AI code agent
Continue.continue@2.1.0Security outcomeReview needed
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
100% analysis coverage · exact version onlyContinuevs-marketplaceArtifact
28e1c4691f090080Review decision-relevant behavior before installation.
Review the grouped evidence, affected locations, and whether each behavior matches the extension’s purpose.
61/100Review needed
Diagnostic risk index for this exact artifact — not a probability of malice.
100
Required analyzers completed
0
Diagnostic index, not probability
12 contextual groups kept separate
Power describes access, not intent
9 behavior groups need context before approval.
Call target resolved via computed member access: i.attributes[...](...) (line 4)
28e1c4691f090080f9872ddbbd450e32a822759fefea6e6c12f96a45929351b9Build 8c83a1c11c79 · ruleset 2026.07.19
Evidence that drives review
Call target resolved via computed member access: i.attributes[...](...) (line 4)
40 observed locations · review evidence
Native binary bin/napi-v3/linux/x64/onnxruntime_binding.node has no companion checksum or signature file and no documented provenance.
14 observed locations · review evidence
axios@1.13.1 has 24 OSV finding(s). Version match: range-derived.
10 observed locations · review evidence