I have been working on this tool for a while now as there is a clear gap in Developer workstation security. You must have seen how Github got hacked due to a malicious IDE Extension. This tool in it's current state can help collect IDEs and it's Extensions installed on end user machines, detect the permissions acquired by these extensions and whether there is a post install script. It also fetches the dependencies used by the extensions and any known vulnerabilities.

I'm continuously working on the tool to improve it. My objective is to add a lot of the features that usually an enterprise grade tools have.