
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
astro-vscode
Advanced tools
🧑🚀 Not sure what Astro is? See our website at astro.build!
Provides language support for .astro files. This extension is powered by the Astro language server.
A TypeScript plugin adding support for importing and exporting Astro components inside JavaScript and TypeScript files is also included.
HTML, CSS and TypeScript settings can be configured through the html, css and typescript namespaces respectively. For example, HTML documentation on hover can be disabled using 'html.hover.documentation': false. Formatting can be configured through Prettier's different configuration methods.
Currently, only inlay hints provided by TypeScript are supported. TypeScript inlay hints are disabled by default and needs to be enabled using the settings under the typescript.inlayHints namespace, for example, to enable inlay hints for parameter names, you would do the following:
{
"typescript.inlayHints.parameterNames.enabled": "all"
}
Alternatively, in the GUI this would be in TypeScript > Inlay Hints > Parameter Names. Make sure to update the TypeScript settings and not the JavaScript ones, as Astro is TypeScript-only
See this page for more information on the different settings available for inlay hints
FAQs
Language support for Astro
The npm package astro-vscode receives a total of 396 weekly downloads. As such, astro-vscode popularity was classified as not popular.
We found that astro-vscode demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.