extcheck: extension risk checkCheck your installed extensions and your workspace's recommended extensions against Microsoft's block list, the VS Code Marketplace and Open VSX (names anyone could claim in Cursor, Windsurf or VSCodium). Installation Launch VS Code Quick Open ( Ctrl+P), paste the following command, and press enter.Copied to clipboard |
extcheck for VS CodeTwo commands (Command Palette → "extcheck"):
Each opens a Markdown report: anything on Microsoft's malicious or deprecated lists, IDs that don't exist on the Marketplace, IDs whose namespace doesn't exist on Open VSX (Cursor, Windsurf and VSCodium install from there, so anyone could publish under that name), and extensions with no release in 3+ years. It runs only when you call a command, and sends extension IDs only to the VS Code Marketplace, Open VSX and Microsoft's CDN. Nothing is stored or sent anywhere else. Same checks on the web: extcheck.pages.dev. Source and the GitHub Action: github.com/hieu10x/extcheck. Built by Hieu Tran with AI agents. MIT licensed. |