Comment by chunky1994

19 hours ago

Apparently it is public: https://cursor.com/help/customization/extensions

They use a proxy in front of OpenVSX…purportedly for better security, the irony writes itself.

Ironically, that page has a paragraph "How Cursor reduces supply-chain risk:"

Which is exactly the opposite of what happened today.

  • well maybe they did reduce supply chain risk, but still need to reduce it some more

> Team admins can defer extension installs and updates until a marketplace version has been published for a minimum number of hours.

I think everyone is going to be setting this to 168 after today.