What a VS Code verified publisher badge means, compared with Open VSX →
Runs the 43 mandatory and profile conformance tests of CSAF 2.0 section 6.1 on the advisory you are writing: product ID graph, revision history, CVSS recomputation, CWE names. Offline.
Daily readings on both stores, taken by us. As of 25 Sept 2026.
Each bar is one day’s change in the store’s own counter. Open VSX counts a download on every update, so a day includes updates by people who already had it.
Positions observed daily on both stores. Neither store publishes this, and the two run separate search engines over separate catalogues.
| Search | Marketplace | Open VSX |
|---|---|---|
| lint | #178of 1,747 | #288of 693 |
| history | #782of 816↓18 7d | #210of 241↓9 7d |
13 more searches, day-by-day history, and the extensions ranked above it. See plans | ||
VS Code Marketplace search ranking: measuring jitter and real movement →
15 releases · first published Sept 2026
Why the Open VSX download count looks inflated →
Downloads count every update, not unique installs.
CSAF Advisory Lint - security advisory JSON (CRA, VEX)’s own readme, changelog and license, as published to the VS Code Marketplace.