JustinGrote / JustinGrote/powershell-extension-pack
Bundled github-actions-enhanced triggers a scary "disable the official extension" modal on pack update
- Dominant language
- No language data
- Stars
- 23
- Forks
- 2
- PR merge metrics
- No merged PRs in 30d
Description
First off, thanks for maintaining this pack — I've been using it for PowerShell work for a while and it's been useful.
I wanted to flag something that gave me a bit of a scare this morning, in case others run into the same thing.
The pack auto-updated (0.0.7 → 0.0.9 in my case) overnight, which pulled in justin-grote.github-actions-enhanced as a newly-installed member. On next load, that extension threw a full modal demanding I disable/uninstall the official GitHub Actions extension, with language like "extension host restart is not sufficient!"
Out of context — an extension I didn't knowingly install, appearing after an unattended update, insisting I remove a trusted Microsoft/GitHub extension — that pattern reads a lot like something malicious. I spent a good while tracing folder birth times, sync logs, and the pack manifest before I convinced myself it was benign and working as designed. I suspect anyone less stubborn about digging might just panic, or worse, blindly click through.
To be clear, I'm not saying anything's wrong with the pack or the fork — once I found the line in the description noting the pack intentionally includes GitHub tooling, it all made sense. This is really a UX/expectations thing. A few ideas, take or leave:
A note in the README/description that the pack includes github-actions-enhanced, which is a fork that conflicts with the official GitHub Actions extension, so users know what to expect.
Possibly softening the conflict modal itself in the enhanced extension, or making it dismissible/less DEFCON-1 in tone.
Maybe consider whether the Actions fork belongs in a PowerShell-focused pack by default, vs. being opt-in — though I understand that's your call and the pack is intentionally opinionated.
Happy to provide any of the diagnostic details (timestamps, sync data, etc.) if useful. Thanks again.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.