This extension provides automatic reporting of security concerns from Socket 安全. The features of this extension aim to provide guidance through all stages of development.
Install from the Visual Studio 市场, or from the command line:
code --install-extension Socket安全.vscode-socket-securityThe extension works ahead of package installation:
- Package imports in JavaScript and Python are detected and given summary scores to show concerns with configurable overlays. These overlays will persist even after package installation.
- Socket detects multiple alternate forms of package imports, including dynamic
import()orrequirein JavaScript orimportlib.import_modulein Python. - The extension automatically registers the Socket MCP server at https://mcp.socket.dev to allow usage of the public MCP server.
If you are in charge of a team you may wish to set this up as a recommended extension or configure other organization-level settings. Please refer to our docs.
pnpm install
pnpm watchPress F5 in VS Code to launch an Extension Development Host against the watch build. pnpm build produces the production bundle, and pnpm run package-for-vscode packs the installable .vsix.
MIT