Security Standards Extension

This extension loads a central security policy and validates the active workspace against that policy.

Included behavior

• Reads a central standards file from a configured path or the bundled fallback policy
• Displays the policy in a panel or editor
• Validates dependencies defined in package.json
• Flags blocked packages and version mismatches
• Shows diagnostics in the Problems panel
• Provides quick commands to view, refresh, and check the policy

Commands

• Security Standards: View Standards
• Security Standards: Check Project
• Security Standards: Refresh Policy
• Security Standards: Open Policy File

Settings

• securityExtension.standardsPath: Optional path to a central standards file
• securityExtension.policyFormat: json or markdown
• securityExtension.scanOnOpen: Automatically validate the project when VS Code opens a workspace
• securityExtension.blockCriticalIssues: Mark critical policy violations as errors

Run locally

1. Open this folder in VS Code.
2. Run the extension with F5 or use the Launch Extension configuration.
3. Open a workspace containing a package.json file.
4. Use the command palette to run the security checks.

Default bundled policy

The extension includes a bundled fallback policy in:

• resources/default-security-policy.json
• resources/default-security-standards.md