Post #1718914
2026-04-26 13:04 UTC
Installing from the #vscode plugin ... marketplace(?). It pops a dialog:
=
This is the first extension you're installing from this developer,
- Install, Trust always, and forever
- Take me to a random document about trusting plugins
- Fuck it, I give up
=
The document tells me I can trust 'em if they have a blue checkmark ... the checkmark just proves they own a domain and that they have 6 months worth of "good standing" on the market place.
The doc also says I should check if they have their source and issues open and if they have ratings/reviews/installs ...
Replies (1)
-
@EndlessMason@hachyderm.io 2026-04-26 13:08
in vscode itself, there's no link to a "profile" for the author - clicking the name searches for other plugins by the author. The sidebar shows "Resources", which again doesn't link to an about this author page. It does link to a bunch of github pages for repo/issues/license ... (in this case they're all 404s - maybe the vscode marketplace should subscribe to repos via webhooks or something, so it notices when the repo or user are deleted?)