microsoft/vscode
github.com
observed at bc678cad — 2 of 4 criteria failed; LLM audit unavailable
No
.oss-verified/attestation.bundle in this repo. We ran the oss-verify CLI against it ourselves on 2026-05-28.This is our observation, not a signed credential. To publish your own attestation, add the GitHub Action / GitLab include from better-internet-org/oss-verify to this repo.
Criteria (observed)
- ✓ reuse
- 13267 of 13271 source files lack per-file SPDX headers, but a repo-level license declaration (LICENSE file or package.json) is present. Accepted as a blanket declaration.
- ✓ osi_license
- Declared 'MIT' resolves to OSI-approved leaves: MIT
- ✗ dependency_licenses
- 63 dependencies (javascript) had no resolvable license — registry lookup failed (retry-eligible; these may be OSI-licensed but we can't confirm): - - - - - - - - - - +53 more
- ✗ no_proprietary_blobs
- Found 21 suspect file(s): - build/lib/watch/watcher.exe (proprietary binary extension) - build/win32/inno_updater.exe (proprietary binary extension) - build/win32/vcruntime140.dll (proprietary binary extension) - extensions/copilot/docs/media/tool-log.png (binary, 107471 bytes, entropy 7.73 bits/byte) - extensions/copilot/src/extension/chatSessions/claude/node/test/fixtures/30530d66-37fb-4f3b-aa5f-d92b6a8afae2.jsonl (avg line length 1254 chars — minified-without-source?) - extensions/copilot/src/extension/mcp/test/vscode-node/fixtures/nuget/basetestpackage.mcpserver.0.1.0-beta.nupkg (binary, 1677013 bytes, entropy 7.99 bits/byte) - extensions/copilot/src/extension/mcp/test/vscode-node/fixtures/nuget/knapcode.samplemcpserver.0.6.0-beta.nupkg (binary, 1155172 bytes, entropy 7.99 bits/byte) - extensions/copilot/src/extension/tools/test/node/applyPatch/corpus/12.patch (avg line length 10922 chars — minified-without-source?) - extensions/copilot/src/platform/testing/node/setupTestDetector.png (binary, 136268 bytes, entropy 7.90 bits/byte) - extensions/references-view/media/demo.png (binary, 412116 bytes, entropy 7.94 bits/byte) - extensions/terminal-suggest/src/shell/fishBuiltinsCache.ts (avg line length 628 chars — minified-without-source?) - resources/darwin/code.icns (binary, 189124 bytes, entropy 7.86 bits/byte) - resources/linux/rpm/code.xpm (avg line length 682 chars — minified-without-source?) - src/vs/base/test/common/filters.perf.data.js (avg line length 5461 chars — minified-without-source?) - src/vs/workbench/api/test/browser/extHostDocumentData.test.perf-data.ts (avg line length 5461 chars — minified-without-source?) - src/vs/workbench/contrib/terminal/common/scripts/psreadline/Microsoft.PowerShell.PSReadLine.dll (proprietary binary extension) - src/vs/workbench/contrib/terminal/common/scripts/psreadline/Microsoft.PowerShell.Pager.dll (proprietary binary extension) - src/vs/workbench/contrib/terminal/common/scripts/psreadline/net6plus/Microsoft.PowerShell.PSReadLine.Polyfiller.dll (proprietary binary extension) - src/vs/workbench/contrib/terminal/common/scripts/psreadline/netstd/Microsoft.PowerShell.PSReadLine.Polyfiller.dll (proprietary binary extension) - src/vs/workbench/contrib/welcomeGettingStarted/common/media/terminal.svg (avg line length 2520 chars — minified-without-source?) Maintainers may exempt files via .oss-verified.toml (not yet wired in this MVP).
Run
- Repository
- https://github.com/microsoft/vscode
- Last checked
- 2026-05-28T10:26:07.874Z
- Commit
- bc678cad02f18de3e2b6bf72a8259e9fb322cdfc
- Overall result
- failing
- Deterministic checks
- failed
- LLM audit
- unavailable — API error; will retry on the next watchlist cycle
show raw error
2/3 passes blocked: Anthropic API call failed (429) after 4 attempts: {"type":"error","error":{"type":"rate_limit_error","message":"This request would exceed your organization's rate limit of 30,000 input tokens per minute (org: 62638852-fd7d-4b3c-abb7-9d300e93c6ea, mod | Anthropic API call failed (429) after 4 attempts: {"type":"error","error":{"type":"rate_limit_error","message":"This request would exceed your organization's rate limit of 30,000 input tokens per minute (org: 62638852-fd7d-4b3c-abb7-9d300e93c6ea, mod - Recheck interval
- 30 days