build1 distinct publisher
Blocklisting by extension ID has a shelf life: Open VSX cleared three names in five days
Open VSX's malicious list is an array of bare identifiers, so freeing an impersonated publisher also erases the record that the same name once shipped malware.
Publishers:socket.dev
Reality
- Evidence74
- Adoption58
- Hype gap−6
- Incentives66
- Confidence64