visual-studio-code-bin 1.145.3-1
Visual Studio Code (vscode): Editor for building and debugging modern web and cloud applications (official binary version)
config.json file.
/v1/packages/visual-studio-code-bin/versions SHAs are authoritative.
Metadata
Relations
Depends
Optional dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| bf9022bedf2ehead | verified | 2026-11-10 22:42 | 5 |
| bbb8f6e16675 | verified | 2026-11-06 17:56 | 5 |
| cca2efd7d584 | verified | 2026-11-06 06:50 | 5 |
| 1d9b5acdb958 | verified | 2026-11-05 16:11 | 5 |
| ef334141f0ac | verified | 2026-11-05 16:11 | 5 |
| 0a4d25dffa9f | verified | 2026-11-05 16:10 | 5 |
| 92863d0b01f9 | verified | 2026-11-05 16:10 | 5 |
| 7cff23257b3f | verified | 2026-11-05 16:08 | 5 |
Head findings
command-substitution
in
visual-studio-code-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
all_off="$(tput sgr0)"
command-substitution
in
visual-studio-code-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
bold="${all_off}$(tput bold)"command-substitution
in
visual-studio-code-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
blue="${bold}$(tput setaf 4)"command-substitution
in
visual-studio-code-bin.installDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
yellow="${bold}$(tput setaf 3)"command-substitution
in
visual-studio-code-bin.shDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
CODE_USER_FLAGS="$(sed 's/#.*//' $XDG_CONFIG_HOME/code-flags.conf | tr '\n' ' ')"
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.