Registry overview · Tier 1

Scan the registry.
Open the Deep Scan.

This is the at-a-glance layer: outcome, severity, and a risk read for every exact Marketplace version. Open any extension for the full Deep Scan — files, evidence, capabilities, and release changes.

34extensions scanned

45exact releases recorded

45completed reports

6high or critical severity

Browse the registry

Extensions

Registry outcomes at a glance

No known concern 5Review 40

Jupyterms-toolsai.jupyter@2026.6.2026071001

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Jupyterms-toolsai.jupyter@2026.6.2026071501

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Python Debuggerms-python.debugpy@2026.7.11831007

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Python Debuggerms-python.debugpy@2026.7.11831009

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Python Debuggerms-python.debugpy@2026.7.11831010

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Python Debuggerms-python.debugpy@2026.7.11831011

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Pylancems-python.vscode-pylance@2026.2.106

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Pylancems-python.vscode-pylance@2026.2.107

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Pylancems-python.vscode-pylance@2026.2.108

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Pylancems-python.vscode-pylance@2026.2.109

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Pythonms-python.python@2026.5.2026052901

Expected: activation, ide contributions, process execution

Deep Scan MEDIUM

Pythonms-python.python@2026.5.2026060901

Expected: activation, ide contributions, process execution

Deep Scan MEDIUM

Pythonms-python.python@2026.5.2026061001

Expected: activation, ide contributions, process execution

Deep Scan MEDIUM

Pythonms-python.python@2026.5.2026070801

Expected: activation, ide contributions, process execution

Deep Scan MEDIUM

ESLintdbaeumer.vscode-eslint@3.0.34

Expected: activation, dynamic code, filesystem, ide contributions, lifecycle scripts, process execution

Deep Scan MEDIUM

semgrepsemgrep.semgrep@1.17.0

Expected: activation, native code, process execution

Deep Scan HIGH

trivy-vulnerability-scanneraquasecurityofficial.trivy-vulnerability-scanner@1.8.11

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan Informational

Error Lensusernamehw.errorlens@3.28.0

Analysis completed without actionable evidence or unapproved baseline changes.

Deep Scan MEDIUM

aws-toolkit-vscodeamazonwebservices.aws-toolkit-vscode@4.10.0

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

SonarQube for IDESonarSource.sonarlint-vscode@5.5.0

Expected: activation, packed artifacts, process execution

Deep Scan MEDIUM

Continue - open-source AI code agentContinue.continue@2.1.0

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

C/C++ms-vscode.cpptools@1.33.4

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Language Support for Java(TM) by Red Hatredhat.java@1.56.2026071508

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan HIGH

roo-clineRooVeterinaryInc.roo-cline@3.54.0

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan HIGH

snyk-vulnerability-scannersnyk-security.snyk-vulnerability-scanner@2.31.0

Expected: activation, credential configuration, lifecycle scripts

Deep Scan MEDIUM

Clinesaoudrizwan.claude-dev@4.0.8

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

rust-analyzerrust-lang.rust-analyzer@0.4.2976

Expected: activation, ide contributions, process execution

Deep Scan MEDIUM

Live Serverritwickdey.LiveServer@5.7.10

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Remote - SSHms-vscode-remote.remote-ssh@0.125.2026062315

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan Informational

Material Icon ThemePKief.material-icon-theme@5.36.1

Analysis completed without actionable evidence or unapproved baseline changes.

Deep Scan HIGH

Azure Accountms-vscode.azure-account@0.13.0

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Dev Containersms-vscode-remote.remote-containers@0.467.0

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Kubernetesms-kubernetes-tools.vscode-kubernetes-tools@1.4.0

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan HIGH

GitHub Copilot ChatGitHub.copilot-chat@0.48.1

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

Git Graphmhutchie.git-graph@1.30.0

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

REST Clienthumao.rest-client@0.25.1

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

gogolang.go@0.56.0

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan Informational

Dockerms-azuretools.vscode-docker@2.0.0

Analysis completed without actionable evidence or unapproved baseline changes.

Deep Scan MEDIUM

GitHub CopilotGitHub.copilot@1.388.0

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

GitHub Pull RequestsGitHub.vscode-pull-request-github@0.159.2026071604

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

GitLens — Git superchargedeamodio.gitlens@2026.7.160544

Expected: activation

Deep Scan Informational

Prettier - Code formatteresbenp.prettier-vscode@12.4.0

Analysis completed without actionable evidence or unapproved baseline changes.

Deep Scan HIGH

Code Runnerformulahendry.code-runner@0.12.2

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Deep Scan MEDIUM

ESLintdbaeumer.vscode-eslint@3.0.33

Expected: activation, dynamic code, filesystem, ide contributions, lifecycle scripts, process execution

Deep Scan Informational

Jupyter Slide Showms-toolsai.vscode-jupyter-slideshow@0.1.3

Analysis completed without actionable evidence or unapproved baseline changes.

The overview shows outcome and risk. Deep Scan opens the exact artifact — every file, finding, capability, and release change.