Policy result for this exact artifact
Exact artifact intelligence
Code Runner
formulahendry.code-runner@0.12.2Security outcomeReview needed
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
100% analysis coverage · exact version onlyformulahendryvs-marketplaceArtifact
4c8e4aea7dd07c9cReview decision-relevant behavior before installation.
Review the grouped evidence, affected locations, and whether each behavior matches the extension’s purpose.
72/100Review needed
Diagnostic risk index for this exact artifact — not a probability of malice.
100
Required analyzers completed
0
Diagnostic index, not probability
6 contextual groups kept separate
Power describes access, not intent
2 behavior groups need context before approval.
micromatch@4.0.2 has 1 OSV finding(s). Version match: exact.
4c8e4aea7dd07c9c20173e71869759fb2ce2f55b9819c4b374172467af03b144Build fedc47d31ef5 · ruleset 2026.07.19
Evidence that drives review
micromatch@4.0.2 has 1 OSV finding(s). Version match: exact.
1 observed location · review evidence
Code uses shell-style process execution.
1 observed location · review evidence