This extension provides automatic reporting of security concerns from Socket Security. The features of this extension aim to provide guidance through all stages of development.
Install from the Visual Studio Marketplace, or from the command line:
code --install-extension SocketSecurity.vscode-socket-securityThe extension works ahead of package installation:
- Package imports in JavaScript and Python are detected and given summary scores to show concerns with configurable overlays. These overlays will persist even after package installation.
- Socket detects multiple alternate forms of package imports, including dynamic
import()orrequirein JavaScript orimportlib.import_modulein Python. - The extension automatically registers the Socket MCP server at https://mcp.socket.dev to allow usage of the public MCP server.
If you are in charge of a team you may wish to set this up as a recommended extension or configure other organization-level settings. Please refer to our docs.
pnpm installPress F5 in VS Code to build the extension and launch an Extension Development Host. Development builds include source maps for breakpoints in src/.
pnpm run build defaults to build:dev. Use pnpm run build:prod for a minified production build.
Run the Socket: watch task or pnpm run watch to rebuild on edits. Reload the Extension Development Host to load each rebuild.
Run the Socket: test task or pnpm test --all for the full test suite. Use pnpm test test/auth.test.mts to run one test file.
Run pnpm run package-for-vscode to build and package the production .vsix.
MIT