Skip to content
| Marketplace
Sign in
Visual Studio Code>Visualization>PatchWRK ScannerNew to Visual Studio Code? Get it now.
PatchWRK Scanner

PatchWRK Scanner

Preview

PatchWRK

| (0) | Free
Free, read-only Scanner for supported third-party API integrations and evidence-backed compatibility findings.
Installation
Launch VS Code Quick Open (Ctrl+P), paste the following command, and press enter.
Copied to clipboard
More Info

PatchWRK Scanner

Free, read-only Scanner for supported third-party API integrations and evidence-backed compatibility findings.

Experimental beta. Inspect supported integration evidence, review historical compatibility findings and keep manual scan results locally. No PatchWRK account, API credentials, separate Scanner installation or source compilation needed.

This is an unpublished release-preparation candidate bound to publisher PatchWRK (extension ID PatchWRK.patchwrk-scanner-local). Publisher creation and Owner role were founder-observed; live publishing authority remains to be verified. Install only the supplied, reviewed VSIX in a separate profile; no public listing is claimed.

What you can do

  • Start a genuine manual scan with Run Scan in the PatchWRK sidebar.
  • Discover supported Stripe, OpenAI, Anthropic, Shopify and Twilio SDK evidence.
  • Review evidence-backed assessments from a small offline catalog: four historical Stripe/OpenAI records, not comprehensive or continuously updated API coverage.
  • Open Visual HTML Reports with source references, uncertainty and expandable evidence.
  • Explicitly enable Local Scan History, then save and reopen privacy-filtered snapshots.
  • Compare Scans to review recorded differences without rescanning or editing snapshots.

There is no overall health score. Unknown or absent findings do not establish compatibility; an affected finding is not production runtime verification.

Install and run

Verified configuration: VS Code 1.137.0 on macOS arm64, with its embedded Node.js 24 extension host. The manifest minimum is 1.137.0; a compatible Node 24 host is also required. Other editor versions, operating systems and Cursor have not been certified. Remote, virtual and web workspaces are unsupported.

  1. In a separate VS Code profile, choose Extensions → … → Install from VSIX and select the supplied candidate. No clone, npm/pnpm installation or build step.
  2. Open a stable, authorized local JavaScript/TypeScript project. Trust only a project you are authorized to inspect. Click the official PatchWRK P in the Activity Bar.
  3. Click Run Scan. Choose Reports Only for the simplest first scan, or explicitly enable local history. Find an unanswered choice in VS Code's notification bell.
  4. Review the real report and its limitations. Latest Report reopens it without rescanning.

Scans run only when explicitly requested. No source/configuration code is executed, target dependencies installed, source uploaded, provider requests made, or telemetry collected by PatchWRK. Editor/Marketplace services have their own network behavior.

History and comparison

Enabling history requires selecting an existing parent outside all open projects and confirming the exact new private directory. Only then is a project UUID created. Both directory and project UUID are supplied to the existing Scanner. A reports-only scan is not saved retroactively. No implicit home storage or Cloud synchronization.

Run two explicitly saved scans, then open Scan History or a recent record to reopen saved evidence. Compare Scans asks for two records, orders them by validated original UTC timestamps, and passes older → newer to Scanner. Equal timestamps use ascending UUID order, disclosed in title/status; invalid metadata refuses comparison. Time order does not prove source lineage, an improvement or a repair. Records are immutable.

Delete Snapshot previews the selected record and requires explicit modal confirmation. No automatic deletion, retention scheduler or secure-erasure claim.

Privacy and safety

Target scanning is offline and read-only. HTML omits absolute target/output paths, raw arguments and source snippets. Filenames, identifiers, timestamps and approved metadata can still be sensitive: review reports and snapshots privately before sharing. See Privacy and safety, Support and the Scanner security policy.

Reports open in script-disabled panels with restrictive CSP and an extension-only contrast correction for readable dark text on branded light surfaces. Saved HTML and findings stay unchanged. The sidebar uses only a small local, nonce-authorized script with restricted messages; no external fonts/assets or network bridge.

Cancel operation safely abandons pending choices or terminates the active worker. An old editor notification may remain visible: dismiss it; late answers cannot start work. Cancellation may leave a completed/incomplete report, snapshot or lock. Inspect storage before manually retrying. No automatic retry, overwrite or lock cleanup.

Portable filesystem checks require stable checkouts and do not sandbox hostile concurrent mutation. Parser budgets are not hard CPU isolation. Local snapshots are validated, not authenticated. Full independent screen-reader and runtime network observation are not certified. Support is best effort with no SLA.

Scanner and Pro boundaries

These are free local Scanner capabilities. PatchWRK Pro is a planned paid API maintenance agent and is unavailable. Its intended workflow is Monitor → Detect → Analyze → Repair → Test → Approve; none of those planned maintenance services is activated by this extension. This extension does not add automatic API monitoring, proactive alerts, advanced Impact Intelligence, AI repairs, automatic migrations, automated verification, GitHub repair pull requests, hosted history, authentication or billing.

Bundled Scanner source · Scanner v0.1.0 prerelease · Issues · Questions

The source link identifies the bundled Scanner engine; the extension adapter source has not been exported to that repository. A public extension-source location remains a release-readiness decision. Do not mistake the private development workspace for public source availability.

Support

Report sanitized bugs through GitHub Issues, ask questions in Discussions, and report vulnerabilities through the private security process or security@patchwrk.dev. Never post credentials, private source or raw sensitive reports. Best effort, no SLA.

MIT © 2026 Jovan Simon. See the MIT license, included third-party notices and bundled library licenses. Scanner v0.1.0 code/catalog remain unchanged from public commit 77d009f07067c3c82a8b45b5cf30f97e0d41d171; bundled Scanner README publication wording is corrected locally for this extension candidate. See the included CHANGELOG.md.

  • Contact us
  • Jobs
  • Privacy
  • Manage cookies
  • Terms of use
  • Trademarks
  • Your Privacy Choices
  • Consumer Health Privacy
© 2026 Microsoft