
Product
Introducing Socket Scanning for OpenVSX Extensions
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@eclipse-che/che-theia-devworkspace-handler
Advanced tools
Handle management of che-theia-plugins and devWorkspace templates
The library is used by Dashboard component to analyze .che-theia/che-theia-plugins.yaml and .vscode/extensions.json files and then enhance the DevWorkspace components and DevWorkspace templates.
The library is mainly used by dashboard component but there is a way to try it as a standalone library.
Example:
$ node lib/entrypoint.js --devfile-url:https://github.com/che-samples/java-spring-petclinic/tree/devfilev2 --output-file:/tmp/all-in-one.yaml
The file /tmp/all-in-one.yaml contains a DevWorkspace based on the repository devfile and a Che-Theia DevWorkspaceTemplate.
If DevWorkspace engine is available on the cluster, the following command will create a DevWorkspace:
$ kubectl apply -f /tmp/all-in-one.yaml
FAQs
Handle management of che-theia-plugins and devWorkspace templates
We found that @eclipse-che/che-theia-devworkspace-handler demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Product
Bringing supply chain security to the next generation of JavaScript package managers

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies