@codingame/monaco-vscode-github-authentication-default-extension@38.0.4
⚠ Under reviewDefault VSCode extension designed to be used with @codingame/monaco-vscode-api
AI Security Review
scanned 13d ago · by lpm-firewall-aiThe inspected package code implements a GitHub authentication extension and showed no confirmed attack behavior. The selected runtime dependency could not be reviewed, so the available source does not support a clean verdict.
Decision evidence
public snapshot- `package.json` declares `@codingame/monaco-vscode-api` as a runtime dependency.
- `index.js` imports that dependency to register the bundled GitHub authentication extension.
- The inspected extension registers GitHub authentication and stores sessions through a keychain API.
- The selected runtime dependency source was unresolved in the supplied review evidence, leaving its behavior unverified.
- The inspected package manifest contains no lifecycle scripts.
- The inspected authentication code uses GitHub OAuth endpoints and stores sessions through a keychain API.
Source & flagged code
4 flagged`package.json` declares `@codingame/monaco-vscode-api` as a runtime dependency.
package.jsonView on unpkg · L20`index.js` imports that dependency to register the bundled GitHub authentication extension.
index.jsView on unpkg · L1Findings
Affected versions and remediation
This report applies to @codingame/monaco-vscode-github-authentication-default-extension@38.0.4.
See all versions of @codingame/monaco-vscode-github-authentication-default-extension for other recorded verdicts.
- Review the evidence and your use of @codingame/monaco-vscode-github-authentication-default-extension@38.0.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.