Policy result for this exact artifact
Exact artifact intelligence
Git Graph
mhutchie.git-graph@1.30.0Security outcomeReview needed
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
100% analysis coverage · exact version onlymhutchievs-marketplaceArtifact
b0779a30caf98664Review decision-relevant behavior before installation.
Review the grouped evidence, affected locations, and whether each behavior matches the extension’s purpose.
57/100Review needed
Diagnostic risk index for this exact artifact — not a probability of malice.
100
Required analyzers completed
0
Diagnostic index, not probability
8 contextual groups kept separate
Power describes access, not intent
5 behavior groups need context before approval.
Code uses shell-style process execution.
b0779a30caf9866434900159c71322464e9fd267e3920d9732703819ff831f00Build fedc47d31ef5 · ruleset 2026.07.19
Evidence that drives review
Code uses shell-style process execution.
1 observed location · review evidence
Package defines a lifecycle script: vscode:uninstall.
1 observed location · review evidence
InputBox prompt or options appear to request credential-related data.
1 observed location · review evidence