Footer

Your go-to destination for discovering trending open-source projects and uncovering the insights that matter

Legal

  • Terms and conditions
  • Privacy policy

More

  • Pricing
  • Advertise
  • onedump
  • gosnakego
  • Contact us

Social

  • X (Twitter)
  • GitHub
Trendshift owl
What they build speaks louder than words
© 2026 Trendshift, created by Julian Li with ❤️
SignalAdvertise
Trendshift
SignalAdvertise
Sign in
Trendshift owl

Discover trends that matter

SignalAdvertise
DailyWeeklyMonthlyYearly
Live mentionsTopics
RepositoriesDevelopers
InsightsStats

Bifrost
Bifrost

trailofbits/vsix-audit

Security scanner for VS Code extensions

Visit GitHub
TypeScript
61
10
5 contributors
GNU Affero General Public License v3.0
website
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast trailofbits/vsix-audit is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

Oct 5 – Nov 3, 2026

Stars +7 in 30 days

01
1

Forks +1 in 30 days

01
1

Merged PRs 28 in 30 days

0102030
24

Trendshift Trendingwhere the repository ranked each day it made the top 25

Not in the Trendshift top 25 in this period

Oct 5Oct 9Oct 13Oct 17Oct 21Oct 25Oct 29Nov 2
The left and right arrow keys step from day to day; Home and End go to the first and the last

Stars, forks, merged pull requests and Trendshift Trending rank, by day
DayStars gainedForks gainedMerged PRs
Mon, Oct 5, 2026+0+00
Tue, Oct 6, 2026+1+00
Wed, Oct 7, 2026+1+00
Thu, Oct 8, 2026+0+00
Fri, Oct 9, 2026+0+00
Sat, Oct 10, 2026+0+00
Sun, Oct 11, 2026+0+00
Mon, Oct 12, 2026+0+10
Tue, Oct 13, 2026+0+00
Wed, Oct 14, 2026+1+00
Thu, Oct 15, 2026+0+00
Fri, Oct 16, 2026+0+00
Sat, Oct 17, 2026+0+00
Sun, Oct 18, 2026+0+00
Mon, Oct 19, 2026+0+00
Tue, Oct 20, 2026+0+00
Wed, Oct 21, 2026+1+00
Thu, Oct 22, 2026+0+00
Fri, Oct 23, 2026+0+00
Sat, Oct 24, 2026+0+00
Sun, Oct 25, 2026+0+00
Mon, Oct 26, 2026+0+00
Tue, Oct 27, 2026+0+00
Wed, Oct 28, 2026+1+00
Thu, Oct 29, 2026+1+00
Fri, Oct 30, 2026+0+00
Sat, Oct 31, 2026+0+024
Sun, Nov 1, 2026+0+04
Mon, Nov 2, 2026+1+00
Tue, Nov 3, 2026+0+00
Total+7+128
  • 1#1 on the list
  • 7Rank that day
  • Not trending

Social mentions

Recent discussions about this repository across the web
  1. Oct 301 post
    • pls kind folks let's make vsix-audit great (although it may not have necessarily helped stop an automatic upgrade of an already installed plugin).

      Read full on X, posted by @0xmichalis

      @0xmichalis · x.com

  2. 5 months earlier
  3. May 222 posts
    • Re: Github Compromise, I vibed a VS Code extension security scanner. It correctly flags the TeamPCP-backdoored NX Console extension without prior knowledge.

      Read full on X, posted by @dguido

      @dguido · x.com

    • first scan off the bat and vsix-audit found some design issues with the Prettier extension. That everyone uses now. I also found Prettier hasn't merged a version bumped a vuln minimatch package ughh.

      Read full on X, posted by @DissentingS

      @DissentingS · x.com

You might also like

Repositories close to trailofbits/vsix-audit
FeaturedAdvertise to 180K+ monthly visitors
Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

securient/ideviewer-oss

Python

Security scanner for developer workstations — detects IDE extension risks, AI tool permissions, plaintext secrets, and vulnerable dependencies across VS Code, Cursor, JetBrains, and more.

214

snyk/vscode-extension

TypeScript

Snyk extension for Visual Studio Code

11233

DataDog/IDE-SHEPHERD-extension

TypeScript

A VS Code/Cursor extension capable of performing realtime security monitoring from inside the IDE

1227

semgrep/semgrep-vscode

TypeScript

Semgrep extension for Visual Studio Code

7732

fabric8-analytics/fabric8-analytics-vscode-extension

TypeScript

Red Hat Dependency Analytics extension

258194

jfrog/jfrog-vscode-extension

TypeScript

JFrog VS-Code Extension

19539

EclipseFdn/publish-extensions

JavaScript

Scripts for publishing VS Code extensions to open-vsx.org

347437

DataDog/guarddog

Python

🐍 🔎 GuardDog is a CLI tool to Identify malicious PyPI and npm packages

1.2k131

xingguangqwq/traceguard-vscode

JavaScript

TraceGuard - a VS Code helper for manual security code review

816