0dq for VS Code

Credentials and quantum-vulnerable cryptography, underlined as you type.

Nothing leaves your machine: no network call, no token, no account. The extension starts zerodq-lsp and hands it the documents you have open — everything that decides what counts as a finding lives there, so the same detection reaches JetBrains and Eclipse without a second implementation.

What you will see

• Errors on credentials: AWS, GitHub, GitLab, Slack, Stripe, OpenAI, Anthropic, Google, private keys, JSON Web Tokens.
• Warnings on cryptography a quantum computer will break: RSA and elliptic curve key generation, Curve25519 key agreement, Diffie-Hellman.

Comments are ignored, so "we should replace RSA here one day" is left alone.

What it will not do

It will not scan your repository, your dependencies or your infrastructure. That is zerodq scan, in CI, where minutes are free — or the MCP server, if you want an agent to ask before it adds a dependency.

Where it comes from

Source, issues and the rest of the toolchain: github.com/TechEntangle/0dq.