LEMON BLOG

If you use Visual Studio Code daily (or you manage developer machines in an organisation), this isn't the kind of advisory to brush off as "just another extension issue." Security researchers have flagged multiple vulnerabilities across widely used VS Code extensions, and the combined install base is enormous. When flaws show up in tools that sit inside your editor, the risk isn't just theoretical, because extensions often have access to your workspace files, local environment, tokens, and internal resources.

Microsoft is trying to make Windows app development feel less like assembling IKEA furniture without the manual, and more like… well, actually building your app. A new tool called winapp has been introduced to simplify the annoying setup work that usually happens before you even write the fun parts of a Windows application. If you've ever felt like Windows development involves juggling too many moving parts, this tool is basically Microsoft saying, "Yeah… we know."