OSPulse for VS Code

VS Code extension that surfaces the OSPulse dependency-drift verdict at write-time: an evidence-linked risk badge on each declared dependency in a supported manifest, with a hover carrying all five signals — health + confidence, vulnerability exposure, licence verdict, PQC readiness (010), and CRA reporting class (011).

Thin client — the extension parses the manifest and calls one server endpoint (POST /api/v1/ide/verdicts:batch, see specs/012-ide-plugins/contracts/rest-api.md in the OSPulse monorepo) via the @ospulse/sdk TypeScript SDK. No scoring or correlation logic runs client-side.

Layout

• src/core/ — pure TypeScript: manifest parse → dependency list → batch call → badge/hover/summary view-models → cache. Unit-testable without an editor host.
• src/editor/ — VS Code glue: decorations, hover provider, commands, status bar, auth (SecretStorage), deep-link.
• test/ — @vscode/test-electron E2E tests + core unit tests.

Develop

npm install
npm run compile   # or: npm run watch

Press F5 in VS Code (with this folder open) to launch an Extension Development Host.

Test

npm test

Package

npm run package   # vsce package → .vsix

See specs/012-ide-plugins/ in the OSPulse monorepo for the full plan, data model, and contracts.