Policy result for this exact artifact
Exact artifact intelligence
Dev Containers
ms-vscode-remote.remote-containers@0.467.0Security outcomeReview needed
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
100% analysis coverage · exact version onlyms-vscode-remotevs-marketplaceArtifact
b3bd40702da5dd7dReview decision-relevant behavior before installation.
Review the grouped evidence, affected locations, and whether each behavior matches the extension’s purpose.
56/100Review needed
Diagnostic risk index for this exact artifact — not a probability of malice.
100
Required analyzers completed
0
Diagnostic index, not probability
11 contextual groups kept separate
Power describes access, not intent
9 behavior groups need context before approval.
Call target resolved via computed member access: ThisExpression[...][...](...) (line 34)
b3bd40702da5dd7d1a99aac697da5c437f28deeec899d0bb6e78dd76a5c1b012Build fedc47d31ef5 · ruleset 2026.07.19
Evidence that drives review
Call target resolved via computed member access: ThisExpression[...][...](...) (line 34)
16 observed locations · review evidence
adm-zip@0.5.16 has 1 OSV finding(s). Version match: range-derived.
1 observed location · review evidence
Code uses shell-style process execution.
1 observed location · review evidence