Policy result for this exact artifact
Exact artifact intelligence
ESLint
dbaeumer.vscode-eslint@3.0.33Security outcomeReview needed
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
100% analysis coverage · exact version onlydbaeumervs-marketplaceArtifact
a2ed5477988332d5Review decision-relevant behavior before installation.
Review the grouped evidence, affected locations, and whether each behavior matches the extension’s purpose.
51/100Review needed
Diagnostic risk index for this exact artifact — not a probability of malice.
100
Required analyzers completed
0
Diagnostic index, not probability
8 contextual groups kept separate
Power describes access, not intent
4 behavior groups need context before approval.
Call target resolved via computed member access: e[...](...) (line 1)
a2ed5477988332d5137af55bbed24d5e319d2f3eca32ab33a2b07bfeccb58a18Build fedc47d31ef5 · ruleset 2026.07.19
Evidence that drives review
Call target resolved via computed member access: e[...](...) (line 1)
1 observed location · review evidence
Workspace-controlled input flows to process execution.
1 observed location · review evidence
Package defines a lifecycle script: postinstall.
1 observed location · review evidence