openvsx icon indicating copy to clipboard operation
openvsx copied to clipboard

An open-source registry for VS Code extensions

Results 183 openvsx issues
Sort by recently updated
recently updated
newest added

Bumps [ip](https://github.com/indutny/node-ip) from 2.0.0 to 2.0.1. Commits 3b0994a 2.0.1 32f468f lib: fixed CVE-2023-42282 and added unit test See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ip&package-manager=npm_and_yarn&previous-version=2.0.0&new-version=2.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any...

dependencies

Introduce a tracer to Open-VSX. This tracer so far instruments the `Query`, `QueryV2` and `Search` endpoints. It is used to see what kind of load is being placed on open...

openvsx-server uses parsson-1.0.0 that has [CVE-2023-4043](https://nvd.nist.gov/vuln/detail/CVE-2023-4043). In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in...

I just accidentally clicked the `Delete All` button in my access tokens. There is no confirmation step, it just will happily delete all your tokens.

enhancement
webui

As discussed with @kkistm, this PR adds a docker-compose.yml and extends the existing documentation to make running a test environment as easy as possible. **Changes:** * Update @anibalsolon's PR #625...

Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.8 to 1.15.4. Commits 6585820 Release version 1.15.4 of the npm package. 7a6567e Disallow bracketed hostnames. 05629af Prefer native URL instead of deprecated url.parse. 1cba8e8 Prefer native...

dependencies

I'm the owner of the `lexical-lsp` namespace on https://open-vsx.org. I need to add another user to the namespace but they're not coming up in the user search modal. The user...

bug
server

My team is currently working on a feature that allows us to only display `verified` extensions during a search. At the moment, we are using the `/api/-/search` to get the...

server
accessibility
reliability

``` Invalid character found in field 'description': 🏃‍♂️ Jump/Select to the Start/End of a word in VSCode (index 2) ``` When publishing an extension, open-vsx throws: ![image](https://github.com/EclipseFdn/open-vsx.org/assets/28700378/3fc422f2-dae6-4fc4-be05-7fadf39df8e8) Which is allowed...

bug
server

It would be great if S3 object storage will be supported

enhancement