Policy result for this exact artifact
Exact artifact intelligence
REST Client
humao.rest-client@0.25.1Security outcomeReview needed
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
100% analysis coverage · exact version onlyhumaovs-marketplaceArtifact
0d2cd9f70181d085Review decision-relevant behavior before installation.
Review the grouped evidence, affected locations, and whether each behavior matches the extension’s purpose.
61/100Review needed
Diagnostic risk index for this exact artifact — not a probability of malice.
100
Required analyzers completed
0
Diagnostic index, not probability
10 contextual groups kept separate
Power describes access, not intent
5 behavior groups need context before approval.
yargs-parser@11.1.1 has 1 OSV finding(s). Version match: range-derived.
0d2cd9f70181d0854af2060eccb2db4f4dd65f7c52991fc85156640f371ccca7Build fedc47d31ef5 · ruleset 2026.07.19
Evidence that drives review
yargs-parser@11.1.1 has 1 OSV finding(s). Version match: range-derived.
6 observed locations · review evidence
Runtime dependency tough-cookie-file-store-bugfix is loaded from a mutable or non-registry source: Huachao/tough-cookie-file-store-bugfix.
1 observed location · review evidence
Extension webview in dist/extension.js declares a Content-Security-Policy with an unsafe directive (unsafe-inline, unsafe-eval, or a wildcard script-src).
1 observed location · review evidence