Open VSX Registry is implementing pre-publish security checks to proactively protect the extension supply chain. The new verification framework will detect namespace impersonation, accidentally published secrets, and malicious patterns before extensions go live. Monitoring begins in February 2026 with enforcement planned for
Table of contents
Why pre-publish security checks matterHow we’re approaching this workWhat we’re buildingA measured rolloutWhat publishers and users should expectSecurity is ongoing workLooking aheadGrowing with the ecosystemSort: