What a VS Code verified publisher badge means, compared with Open VSX →
Finds real personal data and live credentials committed inside Jest .snap snapshot files — emails, national IDs, IBANs, cards, tokens — with the GDPR article for each hit.
Daily readings on both stores, taken by us. As of 25 Sept 2026.
Each bar is one day’s change in the store’s own counter. Open VSX counts a download on every update, so a day includes updates by people who already had it.
Positions observed daily on both stores. Neither store publishes this, and the two run separate search engines over separate catalogues.
| Search | Marketplace | Open VSX |
|---|---|---|
| testing | #469of 1,479 | #267of 382 |
| secrets | #38of 403 | #109of 152 |
3 more searches, day-by-day history, and the extensions ranked above it. See plans | ||
VS Code Marketplace search ranking: measuring jitter and real movement →
10 releases · first published Sept 2026
Why the Open VSX download count looks inflated →
Downloads count every update, not unique installs.
Jest Snapshot Lint - PII and secrets in __snapshots__’s own readme, changelog and license, as published to the VS Code Marketplace.