Skip to content

Add OpenVSX namespace verification check to publisher trust dialog#249

Closed
azmkercso wants to merge 1 commit into
mainfrom
fix/add-openvsx-verification-check
Closed

Add OpenVSX namespace verification check to publisher trust dialog#249
azmkercso wants to merge 1 commit into
mainfrom
fix/add-openvsx-verification-check

Conversation

@azmkercso

Copy link
Copy Markdown
Contributor

Summary

Query OpenVSX native API for real namespace verification status and display it in the extension trust dialog and gallery UI.

Changes

  • ExtensionGalleryService: Added enrichOpenVsxVerificationStatus() that queries GET https://open-vsx.org/api/{namespace} for each publisher. Called from getExtensions() and query() so all consumers receive correct publisherDomain.verified data.

  • Trust dialog (extensionManagementService):

    • Verified OpenVSX publishers now show the verified badge
    • Unverified publishers show an additional note: "Unverified namespaces on Open VSX can be claimed by anyone. Extensions from unverified publishers may not be from who you expect."
    • "Learn More" points to https://github.com/eclipse-openvsx/openvsx/wiki/Namespace-Access
  • Gallery UI now correctly displays publisher verification status from OpenVSX.

Testing

  • Dev-built and deployed to SageMaker Studio
  • Verified trust dialog shows correct status for verified and unverified publishers
  • Patch applies cleanly to all active branches (main, 1.0, 1.1, 1.2)

@azmkercso azmkercso requested review from a team as code owners June 17, 2026 10:50
@azmkercso azmkercso closed this Jun 17, 2026
@azmkercso azmkercso deleted the fix/add-openvsx-verification-check branch June 17, 2026 10:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant