VS Code Extension¶

VS Code extensions add commands, UI, webviews, and language features to the editor.

Upstream references¶

• Extension API
• Publishing Extensions
• Extension Runtime Security

What upstream owns¶

• extension APIs
• marketplace publishing rules
• workspace trust concepts

What VCQA owns¶

• activation scope.
• webview/security policy.
• marketplace metadata checks.

Detection signals¶

• package.json with engines.vscode
• VS Code activation events
• extension entrypoint

Composed standards¶

• VS Code Extension Package

Combination-born guidelines¶

• VS Code extension plus webview requires CSP and a narrow message bridge.
• VS Code extension plus workspace files requires workspace trust behavior.
• VS Code extension plus TypeScript requires extension host tests for activation and commands.