The VSIX Packaging Trap: How I Eliminated Embedded Client Secrets from a VS Code Extension

TL;DR: Distributing a client-server VS Code extension means accepting a hard truth: a .vsix file is just a ZIP archive containing JavaScript that can be extracted and inspected. This article breaks do