VS Code is pretty cool, and when I use it -- I have it open right now --, I mostly enjoy it.
But I'm very concerned about the security of the extensions. They are so great, they are what makes VS Code the great tool that it is, but I fear that it will soon have the same problems npm has.
Are there any kind of protections in place which prevent an extension developer to sell his extension or he/she itself go rouge and siphon out the code being edited, or the entire project being worked on, or even install malware on the machine?
Comments
VS Code is pretty cool, and when I use it -- I have it open right now --, I mostly enjoy it.
But I'm very concerned about the security of the extensions. They are so great, they are what makes VS Code the great tool that it is, but I fear that it will soon have the same problems npm has.
Are there any kind of protections in place which prevent an extension developer to sell his extension or he/she itself go rouge and siphon out the code being edited, or the entire project being worked on, or even install malware on the machine?