We're excited to announce ExtensionTotal, a free community tool we've built in the past month, designed to assess and mitigate the risks of VSCode extensions. Inspired by AppTotal, VirusTotal, and others, ExtensionTotal dives deep into extensions to assess risk, identify vulnerabilities, check publisher backgrounds, find vulnerable secrets, and provide AI-driven code insights.
ExtensionTotal:
-- Continuously analyses VSCode marketplace extensions
-- Provides comprehensive risk reports with detailed findings
-- An API to allow you to assess all extensions in your organization
-- A VSCode extension for continuous risk monitoring in your local machine
Check out ExtensionTotal and help make the developer ecosystem safer!
https://extensiontotal.com