Take ownership of list of deprecated and malicious extensions

[kineticsquid]

Our colleagues at Gitpod currently keep a list of deprecated and malicious extensions: https://github.com/gitpod-io/gitpod/blob/main/components/ide-proxy/static/code/marketplace.json.

This list is created by scanning daily the public that Microsoft maintains for the Visual Studio Marketplace: https://az764295.vo.msecnd.net/extensions/marketplace.json

We should take over this list as a central resource for consumers of extensions from open-vsx.org.

This will require some policy discussions and implementation procedures.

[kineticsquid]

• Extensions get abandoned
• Extensions can be dangerous … and we want to make users aware
• MS introduced deprecated extensions in 05/2022 and has a GitHub Discussions thread for people to contribute to the list
• Eclipse should host it, because
  • It will make sure anyone can use it (VSCodium, Gitpod, Coder, Theia, …)
  • It will ensure that people are free to contribute and add visibility to the effort

[kineticsquid]

@filiptronicek To clarify, currently we just maintain this list, there is no UI treatment of deprecated extensions?

[filiptronicek]

@kineticsquid exactly. The only interface you can use the data from as of now is searching for deprecated extensions in a VS Code client.

[kineticsquid]

I just realized @filiptronicek you'd created #1121 last year for this. Closing this one.