• JackbyDev@programming.dev
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    Nobody views GitHub as open source. Folks do believe that VS Code is open source but because the extension store can’t be accessed by anything else (like an actual open source build of VS Code’s codebase) it’s an extremely dirty lie.

    • HiddenLayer5@lemmy.ml
      link
      fedilink
      English
      arrow-up
      3
      ·
      edit-2
      1 year ago

      Also, VSIX extensions are full-on software packages. They contain binary executables that have access to both the inside of the editor and the rest of your system. If they didn’t have access to your system there would be no way that they can hook into non-editor applications like your compiler or runtime debugger, or have the ability to pull files from outside the working directory. But they obviously can do all that, either usefully or maliciously.

      This is specifically in response to the argument of “so what if VSIX extensions aren’t open source? They’re just extensions right?” No. They are applications. And they can individually contain just as much spyware and all the trappings of proprietary code as if you had used a fully proprietary editor.