Open VSX

It is an open-source registry for Visual Studio Code extensions, providing a platform for developers to publish, discover, and install extensions that enhance the VS Code editor. It serves as an alternative to Microsoft's Visual Studio Marketplace, hosting extensions that are free and open-source, and it supports a global community of extension authors and users. The registry indexes extensions via a REST API and provides metadata such as version, dependencies, and license information. It allows users to search and install extensions directly from within VS Code or via command-line tools. The service is designed to be neutral, vendor‑independent, and community‑governed.

While specific usage figures are not disclosed in the provided sources, the marketplace is known to host a substantial number of extensions and to serve developers worldwide who rely on VS Code for software development. It is used by individual developers, teams, and organizations seeking open‑source extensions to extend the functionality of their editors. The platform operates as a public service with no mandatory fees for publishing or consuming extensions.

Distinguishing attributes of Open VSX include its open‑source codebase, which allows anyone to inspect, audit, and contribute to the registry’s development. Its governance model relies on community contributions rather than a single corporate entity, emphasizing transparency and collaborative decision‑making. The platform focuses exclusively on VS Code extensions, differentiating it from broader marketplace offerings that support multiple IDEs. Security measures such as publisher verification and extension signing are in place, although the January 2026 incident demonstrated that a compromised publisher account could lead to the distribution of malicious updates containing a GlassWorm loader. This event underscored the need for robust account protection and prompted ongoing discussions about strengthening verification processes within the registry.

Structural details about ownership or parent‑company relationships are not explicitly stated in the available information. The registry is maintained as a community‑driven project, with infrastructure and policy enforcement handled by volunteers and contributors. No further specifics regarding subsidiaries or affiliate entities are provided in the source material.