Your editor is a supply chain security risk now
Developer tooling is part of supply chain security now. Editors, extensions, CLIs, language servers, and AI tools live next to the credentials maintainers use to publish software.