
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@grconrad/vscode-extension-feedback
Advanced tools
Timing based feedback gathering for VS Code extensions
Gather feedback from users of your VS Code extension, using an external form hosted on the web.
Make a single API call from your extension's activate
entry point.
Control the timing and text of the feedback prompts.
Create a publicly accessible survey form (Google form, Surveymonkey, etc.)
From your activate
entry point, invoke scheduleFeedbackChecks
. The result is a Disposable you
can add to your extension context subscriptions to ensure the scheduled checks get cancelled when
your extension deactivates.
Example where the feedback survey is specified in an extension's package.json feedbackFormUrl
field:
import { window, Disposable, ExtensionContext, OutputChannel } from "vscode";
import { scheduleFeedbackChecks } from "@grconrad/vscode-extension-feedback";
const { feedbackFormUrl } = require("../package.json");
export async function activate(context: ExtensionContext): Promise<void> {
// ...
const channel = window.createOutputChannel("My Extension");
// ...
scheduleFeedbackChecks(
{
memento: context.globalState,
logFn: (text: string) => {
outputChannel.appendLine(text);
}
},
{
feedbackFormUrl,
// Use default timings
// Use default text
}
).then((disposable: Disposable) => {
context.subscriptions.push(disposable);
}).catch((reason: any) => {
channel.appendLine(`Failed to schedule feedback checks: reason=${reason}`);
});
// ...
Timings to control the feedback checking are also customizable. By default:
The time of the last prompt, and information about whether the user has provided feedback or said "Don't ask again", are persisted to disk using context.globalState so that they can survive reboots of VS Code.
Text in the prompts is also customizable. By default:
The second parameter to scheduleFeedbackChecks
is an object where you can specify timings, if
you're unhappy with the defaults.
Example of overriding the defaults:
scheduleFeedbackChecks(
{
memento: context.globalState,
logFn: (text: string) => {
outputChannel.appendLine(text);
}
},
{
feedbackFormUrl,
// All times are in milliseconds
timings: {
checkInterval: 15 * 1000, // 15 seconds
firstAskInterval: 60 * 1000, // 1 minute
reminderInterval: 30 * 1000, // 30 seconds
},
localizedText: {
promptText: "Liking this extension?",
giveFeedbackText: "Tell us",
notNowText: "Later",
dontAskAgainText: "Stop asking"
}
}
).then((disposable: Disposable) => {
context.subscriptions.push(disposable);
}).catch((reason: any) => {
channel.appendLine(`Failed to schedule feedback checks: reason=${reason}`);
});
// ...
FAQs
Timing based feedback gathering for VS Code extensions
The npm package @grconrad/vscode-extension-feedback receives a total of 1 weekly downloads. As such, @grconrad/vscode-extension-feedback popularity was classified as not popular.
We found that @grconrad/vscode-extension-feedback demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.