I have been working on this tool for a while now as there is a clear gap in Developer workstation security. You must have seen how Github got hacked due to a malicious IDE Extension. This tool in it s current state can help collect IDEs and it s Extensions installed on end user machines, detect the permissions acquired by these extensions and whether there is a post install script. It also fetches the dependencies used by the extensions and any known vulnerabilities.I m continuously working on the tool to improve it. My objective is to add a lot of the features that usually an enterprise grade tools have.