Immutable Deep Scan reportEvidence is locked to this exact artifact and scan.
About immutable reports
Future scans cannot replace the findings, coverage, ruleset, or artifact hash shown on this URL.
- Scan
85d6873e-c678-463c-9c9a-b86b9556dce1- Artifact
53db12d26e40…79efa069
Analysis Report
Python Debugger
ms-python.debugpy@2026.7.12111009Completed analysis for this exact extension version. Use the summary below to decide what your team should do next.
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
- Required action
- Record a team decision before approval
Review decision-relevant behavior before installation.
Review the grouped evidence, affected locations, and whether each behavior matches the extension’s purpose.
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
This result applies only to the scanned artifact SHA-256, not to future releases or a publisher generally.
Review the grouped evidence and record the accountable team decision before approval.
Required analysis completed for this exact artifact; evidence remains scoped to scanner coverage.
- 1Artifact boundExtension, version, hash, and scan identity fixed
- 2Analysis checkedExecutable-file coverage
- 3Evidence grouped1 actionable · 9 contextual
- 4Policy appliedExact-release ruleset evaluated
- 5Review neededCurrent decision for this artifact
46/100Review needed
Diagnostic risk index for this exact artifact — not a probability of malice.
Policy result for this exact artifact
100
7/7 required analyzers completed
0
Diagnostic index, not probability
9 contextual notes kept separate
Power describes access, not intent
1 behavior group needs context before approval.
The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.
53db12d26e400e8d3e0268dc1ee9d626bf71f8965ea572a3a9373c0b79efa069Build ebc6ba89193a · ruleset 2026.08.21-obfuscated-bundle.1
Evidence that drives review
Native binary bundled/libs/debugpy/_vendored/pydevd/pydevd_attach_to_process/attach_amd64.dll has no companion checksum or signature file and no documented provenance.
6 observed locations · review evidence