What the service brings together
ExtDepot combines the assessment and delivery of Visual Studio Code extensions within a company-scoped repository. The service is configured for the organisation’s development environment and approval requirements.
- Security validation
- Package identity, included code, dependencies, declared capabilities, and relevant runtime behaviour are evaluated within an agreed review scope.
- Repository management
- Approved package versions are made available through the client’s dedicated environment. Availability is kept separate from the public website.
- Release governance
- Material changes are considered before an updated package is made available under the client’s release process.
- Developer onboarding
- Individual developers receive guidance for the company environment, including the applicable access and installation process.
Commercial terms follow the deployment.
The repository is provided as a paid enterprise subscription. Service scope and commercial terms are agreed for each client, including the supported developer population, package coverage, validation requirements, and operational responsibilities.
There is no public package shop or self-service checkout. Access is provisioned as part of an organisation’s onboarding.
Repository scope, validation coverage, release arrangements, support responsibilities, and the organisation’s access model.
Your organisation retains approval authority.
Security validation supports software decisions. Your organisation remains responsible for its approval policy, permitted use, endpoint controls, and licensing requirements.
Package validation is tied to a specific release and defined assessment scope. It is not a guarantee that software is free from every possible vulnerability.
Read about the validation process →