Ruby LSP
From the RiskyPlugins AI security review of the observed evidence.
No individual score drivers were recorded for this analysis.
Analysis record
- Analysed
- 2 weeks ago
- Version
- v0.10.6
- Artifact
- SHA256 E72…FF2
- Source
- Findings (non-IoC)
Evidence ledger
Ranked by severity · findings with a source location link to the code viewer
Publisher Evidence
LowShopify
Publisher identity, store signals, distribution reach, and warning signals used for context. Treat this as supporting evidence, not a clean bill of health.
11 evidence rows available.
Finding Categories
AI Security Report
AI Security Review
Evidence context: threat category none; evidence quality strong.
The Ruby LSP extension for VS Code, developed by Shopify, has been analyzed for potential security risks. The extension's purpose is to connect with the Ruby Language Server, and its dependencies include vscode-languageclient and vscode-jsonrpc. The findings indicate that the extension has a dependency on these two libraries, which is justified by its stated purpose. There are no findings related to credential-access or malware signatures. The strongest counterargument to the verdict could be that the extension has a large user base and is developed by a reputable company, which may suggest a lower risk. However, this does not change the conclusion that the extension's dependencies and access are justified by its purpose. The DEP-vscode-languageclient-^9.0.1 and DEP-vscode-jsonrpc-^8.2.1 findings in the package.json file at /tmp/extract-3f32b77106202e64b26b860f68e4c16b73f5b4e6f888ef8e7f826c75b645c319-1741394318/extension/ support this conclusion.
Key Reasons
- Justified dependencies
- No credential-access or malware findings
- Reputable developer
Reviewed 2026-05-23; recommended action: no action; model confidence 90%.
VS Code version history
Risk trend by version
7 analyzed versions. Each point is the latest successful scan for that version; failed zero-score scans are hidden. Dates are based on first seen by risky plugins.
Pick any point on the chart to explore that version's code below.
Source Code Not Available
Source code is not available for this version of the extension.
About This Extension
Frequently Asked Questions
Similar Extensions
Related extensions from the same publisher or marketplace