The VSIX Packaging Trap: How I Eliminated Embedded Client Secrets from a VS Code Extension
TL;DR: Distributing a client-server VS Code extension means accepting a hard truth: a .vsix file is just a ZIP archive containing JavaScript that can be extracted and inspected. This article breaks do
freerave.hashnode.dev9 min read