node-ovsx-sign v0.6.3

node-ovsx-sign

This package is an open-source alternative to Microsoft's proprietary node-vsce-sign, which enables a feature in VS Code called Repository signing.

Installing

npm i -g node-ovsx-sign

Example usage of signing CLI

Note: this requires access to the server-side private key for signing.

node-ovsx-sign sign extension.vsix keys/private.pem

Example usage of verifying Node module

import { verify, ExtensionSignatureVerificationError } from "node-ovsx-sign";

(async () => {
  try {
    await verify("ext.vsix", "ext.sigzip");
    console.log("Verified successfully");
  } catch (e) {
    if (e instanceof ExtensionSignatureVerificationError) {
      console.error("Could not verify extension signature");
    } else {
      throw e;
    }
  }
})();