What a VS Code verified publisher badge means, compared with Open VSX →
X-ray vision for tokens and secrets: locally inspect JWTs, SAML assertions, certificates, OAuth tokens, and detect credentials in any file. No data leaves your machine.
Daily readings on both stores, taken by us. As of 24 Sept 2026.
Each bar is one day’s change in the store’s own counter.
Positions observed daily on both stores. Neither store publishes this, and the two run separate search engines over separate catalogues.
| Search | Marketplace | Open VSX |
|---|---|---|
| secrets | #219of 401↑12 7d | — |
| security | #978of 1,401↓36 7d | — |
One more search, day-by-day history, and the extensions ranked above it. See plans | ||
VS Code Marketplace search ranking: measuring jitter and real movement →
3 releases · first published May 2026
Token X-Ray’s own readme, changelog and license, as published to the VS Code Marketplace.