What a VS Code verified publisher badge means, compared with Open VSX →
Finds cardholder and sensitive authentication data in your .sql migrations: CVV, track, PIN block, plaintext PAN columns and test card numbers, each mapped to a PCI DSS Requirement 3 rule.
Daily readings on both stores, taken by us. As of 25 Sept 2026.
Each bar is one day’s change in the store’s own counter. Open VSX counts a download on every update, so a day includes updates by people who already had it.
Positions observed daily on both stores. Neither store publishes this, and the two run separate search engines over separate catalogues.
| Search | Marketplace | Open VSX |
|---|---|---|
| database | #656of 902↓26 7d | #212of 249↓7 7d |
| security | #984of 1,406 | #361of 431↓18 7d |
7 more searches, day-by-day history, and the extensions ranked above it. See plans | ||
VS Code Marketplace search ranking: measuring jitter and real movement →
13 releases · first published Sept 2026
Why the Open VSX download count looks inflated →
Downloads count every update, not unique installs.
SQL Card Data Lint (PCI DSS Req 3)’s own readme, changelog and license, as published to the VS Code Marketplace.