Automic VaultAutomic Vault

brew

vsce mit Homebrew, Nix installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für vsce in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install vsce

local Homebrew formula metadata

Linux

Nixverifiziert · 92%
nix profile install nixpkgs#vsce

nixpkgs package indexes · pkgs/by-name/vs/vsce/package.nix · Quelle: api.github.com

Überblick

Paketzusammenfassung

Tool for packaging, publishing and managing VS Code extensions

Verlauf

Projektgeschichte und Nutzung

@vscode/vsce is Microsoft's command-line tool for packaging, publishing, and managing Visual Studio Code extensions. It produces VSIX packages, publishes extensions to the Visual Studio Marketplace, and handles publisher-oriented operations such as metadata lookup and unpublishing.

Projektgeschichte

The VSCE repository was created in September 2015, the same year Visual Studio Code's extension ecosystem emerged publicly. The original npm package name was `vsce`, created in October 2015, and the CLI command remained `vsce` even after the package name later changed.

In the November 2022 VS Code 1.74 release notes, Microsoft announced that the VS Code extension manager had been renamed from `vsce` to `@vscode/vsce`. The note called the rename a breaking change for library consumers, while preserving the command-line executable name and documenting installation with `npm install -g @vscode/vsce`.

The official publishing documentation continues to put `vsce` at the center of extension release workflows: authors package a local extension into a `.vsix`, publish it to the Marketplace, and can also retrieve metadata, search, or unpublish through the CLI. The same documentation now also reflects Marketplace security constraints and the move toward Microsoft Entra ID based automated publishing as long-lived Azure DevOps PATs are retired.

Adoptionsgeschichte

VSCE's adoption is effectively tied to VS Code's extension marketplace. Because the Marketplace is the standard distribution channel for VS Code extensions, extension authors commonly use VSCE locally or in CI whenever they need to turn a `package.json`-based extension project into a publishable artifact.

The npm registry records both the older `vsce` package and the newer scoped `@vscode/vsce` package. The older package is marked deprecated with guidance to install `@vscode/vsce`, while the scoped package continues to receive releases.

Wie es verwendet wird

A typical extension author works from an extension directory containing `package.json`, runs `vsce package` to create a VSIX, and runs `vsce publish` to publish to the Visual Studio Marketplace. The CLI also enforces Marketplace constraints, such as restrictions on untrusted SVG content and image URLs in README and CHANGELOG files.

For package users, VSCE is the canonical bridge between a VS Code extension source tree and the Marketplace. It is not a language tool; it is release tooling for the VS Code extension ecosystem.

Warum Paket-Nerds sich dafür interessieren

VSCE is package-nerd-significant because it is the release valve for one of the largest editor-extension ecosystems. It encodes Marketplace rules into a CLI that can run on a maintainer laptop or in CI, making extension publication scriptable and repeatable.

Zeitleiste

  • 2015: Microsoft creates the VSCE repository and publishes the original `vsce` npm package.
  • 2022: VS Code 1.74 announces the rename from `vsce` to `@vscode/vsce`; the CLI command remains `vsce`.
  • 2026: The official docs warn that global Azure DevOps PATs are retired on December 1, 2026, and recommend Entra ID based automated publishing.

Related projects

  • VSCE is related to Visual Studio Code, the VS Code Extension Marketplace, VSIX packaging, Azure DevOps Marketplace services, extension signing, and VS Code extension CI workflows.

Quellen

  • GitHub repository API metadata: https://api.github.com/repos/microsoft/vscode-vsce
  • Microsoft VSCE GitHub repository: https://github.com/microsoft/vscode-vsce
  • VS Code 1.74 release notes: https://code.visualstudio.com/updates/v1_74
  • VS Code publishing documentation: https://code.visualstudio.com/api/working-with-extensions/publishing-extension
  • npm registry metadata for @vscode/vsce: https://registry.npmjs.org/@vscode/vsce
  • npm registry metadata for legacy vsce: https://registry.npmjs.org/vsce

Sicherheitslage

Risikostufe: grün

narrow executable package without higher-risk signals.

Risikoklassifikator

grün Risiko · niedrig Konfidenz · appliance

Warum

  • narrow executable package without higher-risk signals

Signale

  • metadata:no-higher-risk-signals

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Installiert mit 1 Laufzeitabhängigkeiten.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
package.json
Windows
package.json

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
vscecliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-26
Manager-Version3.9.2
Manager aktualisiert2026-06-03
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://code.visualstudio.com/api/working-with-extensions/publishing-extension#vsce

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:vsce
Version3.9.2
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/vsce
Homepagehttps://code.visualstudio.com/api/working-with-extensions/publishing-extension#vsce
Repositoryhttps://github.com/microsoft/vscode-vsce
Upstream-Dokumentationhttps://code.visualstudio.com/api/working-with-extensions/publishing-extension
LizenzMIT
Quellarchivhttps://registry.npmjs.org/@vscode/vsce/-/vsce-3.9.2.tgz
Zuletzt aktualisiert2026-06-03T23:08:04Z
Pulseupdated
Abhängigkeitennode
Build-Abhängigkeitenpkgconf
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namevsce
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

vsce

nix profile install nixpkgs#vsce
  • normalized package name match
  • Abgeglichen nach: Vsce
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/vs/vsce/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment