@codingame/monaco-editor-wrapper
Configured monaco-vscode-api with tools and extensions
5
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
nonofrsamuel.oliviernantoniazzimaximecgcodingame_team
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): CodinGame org migrated to GitHub Actions CI publishing; SLSA attestation confirms supply chain integrity. | ai | |
| source-diff | obfuscated-file:dist/extensions/redhat.java-1.55.2026061309.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/scalameta.metals-1.67.1.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/svelte.svelte-vscode-110.2.0.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/Vue.volar-3.3.5.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/Angular.ng-template-22.0.1.vsix.js | AI (source-diff): VSCode extension manifest bundled as single-line JSON in registerExtension wrapper; established pattern for this package. | ai | |
| source-diff | obfuscated-file:dist/extensions/broadcomMFD.cobol-language-support-2.5.0.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/Dart-Code.dart-code-3.137.20260611.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/golang.Go-0.55.0.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/haskell.haskell-2.8.1.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/JakeBecker.elixir-ls-0.31.1.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/ms-dotnettools.csharp-2.143.56.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/ms-python.python-2026.5.2026061001.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| source-diff | obfuscated-file:dist/extensions/ms-vscode.cpptools-1.32.2.vsix.js | AI (source-diff): Same registerExtension pattern; not obfuscation. | ai | |
| dependencies | unvetted-dep:vscode | AI (dependencies): npm alias for @codingame/monaco-vscode-extension-api; standard pattern for this package family. | ai | |
| dependencies | unvetted-dep:typescript-worker-node-types | AI (dependencies): npm alias for @types/node; benign type-only dependency aliasing pattern. | ai | |
| bogus-package | bogus-package | AI (bogus-package): CodinGame wrapper package; README link-dump and no-keywords are consistent across their releases, not spam indicators. | ai | |
| phantom-deps | phantom-dep:typescript-worker-node-types | AI (phantom-deps): npm alias for @types/node used as a type-only dep; not directly imported by design. | ai |