yoavbls / yoavbls/pretty-ts-errors
Unverified VS Code Publisher
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 14.1k
- Forks
- 111
- Avg merge
- 3d 12h
- Merged PRs (30d)
- 5
Description
Describe the bug
A third-party-extension security rater (similar to Snyk) has given this repo's VS Code Extension a "medium" threat level due to:
Publisher didn't verify their listed domain ownership. Publisher verification is a good practice to ensure the publisher is who they say they are. Yet, VS Code publisher verification process is not rigorous enough.
Expected behavior
Please consider if it would be simple and convenient to become "verified" as a publisher. If so, perhaps it may be something you would be willing to do. Or not!
Original error
[Not applicable]
Screenshots
[Not applicable]
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the linked ExtensionTotal report and the VS Code publisher verification process. Confirm whether this repository's publisher and domain can be verified, then document the result and any required blocker; done means verification is completed or the reason it cannot be completed is reported.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript, vscode
- Domain
- security
- Issue type
- Feature
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100