← back to ideas

Extension Supply Chain Watchdog

7.0
devtools speculative added: Monday June 2026 12:17

A VS Code extension that monitors the security and provenance of other extensions, alerting developers to potentially compromised or problematic releases based on recent changes and vendor reputation. Provides a two-hour delay warning and status.

100h
mvp estimate
7.0
viability grade
19
views

technology stack

C# Medium NodeJS

inspired by

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks