Spectra Assure

warningRisk: Tampering

Scanned:

Language Support for Java(TM) by Red Hat

Artifact:

Java Linting, Intellisense, formatting, refactoring, Maven/Gradle support and more...

License: Copyleft (EPL-2.0)

Published:

Publisher: redhat

See on Visual Studio Code

SAFE Assessment

Compliance

Licenses

1 weak copyleft linked components

Secrets

43 debugging symbols found

Security

Vulnerabilities

2 medium severity vulnerabilities

Hardening

10 baseline mitigations missing

Threats

Tampering

1 components with malware history

Malware

No evidence of malware inclusion

IMPORTANT: This package had 1 malicious incident in the last 2 years

Latest malware incident detected:

Version: 1.13.2022111803

INCIDENTS FOR THIS VERSION:

Spectra Assure analysis detects 495 more components

Learn more about Spectra Assure

Below is the list of direct dependencies declared by the software package through its manifest.

Name

Version

@redhat-developer/vscode-extension-proposals

0.0.23

@redhat-developer/vscode-redhat-telemetry

0.10.2

@vscode/codicons

^0.0.32

@vscode/webview-ui-toolkit

1.2.2

^3.5.3

expand-home-dir

^0.0.3

^1.1.2

^8.1.0

^11.1.0

6.0.1

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.