Unclear if setup is complete or broken

Thanks guys, this will be a really useful extension if I can get it to work.

It feels like there are some details missing from the extension docs or the socket.dev page:

• Detailed install steps
• What settings are required (if any)
• Is the extension functionally dependent on payed tiers (I assume not as it states it works without the api)
• What should users expect so see in the ui for different package scores

Steps to repro:

• Create free tier account on socket.dev
• Create an api key as per docs
• Install the VS Code extension
• Restart VS Code
• Connect to the socket.dev api with the key
• confirm [info] Socket Security extension started
• Open my project package.json

Expected

A warning and overlay of dependencies that pose risk as per docs at https://docs.socket.dev/docs/socket-for-vs-code

Actual

No warning on obviously out of date dependencies. Only a score shown on hover of dependency, e.g.

Env

• MacOS 15.7
• VS Code 1.104.2
• socketsecurity.vscode-socket-security 2.0.3

Start by following the setup steps in the issue and the linked Socket for VS Code documentation on macOS with VS Code 1.104.2 and extension 2.0.3. Compare the observed hover score with the documented warning and dependency overlay behavior; the work is done when the expected behavior or the setup requirements are clearly established.