PluginStatsJFrog installs statistics
By JFrog (5 listings) · VS Code Marketplace · Other
Security scanning for your Go, npm, Pypi, Maven and NuGet projects.
JFrog has 96,973 recorded installs on VS Code Marketplace.
It ranks #2413 of 2,500 tracked VS Code Marketplace listings by installs.
It is rated 4.6 out of 5 from 8 ratings.
PluginStats has 3 daily observations since Oct 16, 2026; the latest is from Oct 18, 2026.
Rating: 4.63 / 5 from 8 ratings
About JFrog
JFrog Extension for VS Code & Eclipse Theia
🤖 About this Extension
The cost of remediating a vulnerability is akin to the cost of fixing a bug. The earlier you remediate a vulnerability in the release cycle, the lower the cost. The extension allows developers to find and fix security vulnerabilities in their projects and to see valuable information about the status of their code by continuously scanning it locally with the JFrog Platform.
What security capabilities do we provide?
🌟 Basic
Software Composition Analysis (SCA) Scans your project dependencies for security issues and shows you which dependencies are vulnerable. If the vulnerabilities have a fix, you can upgrade to the version with the fix in a click of a button.
CVE Research and Enrichment For selected security issues, get leverage-enhanced CVE data that is provided by our JFrog Security Research team. Prioritize the CVEs based on:
• JFrog Severity: The severity given by the JFrog Security Research team after the manual analysis of the CVE by the team. CVEs with the highest JFrog security severity are the most likely to be used by real-world attackers. This means that you should put effort into fixing them as soon as possible. • Research Summary: The summary that is based on JFrog's security analysis of the security issue provides detailed technical information on the specific conditions for the CVE to be applicable. • Remediation: Detailed fix and mitigation options for the CVEs
You can learn more about enriched CVEs here.
Check out what our research team is up to and stay updated on newly discovered issues by clicking on this link:
🌟 Advanced
*Requires Xray version 3.66.5 or above and Enterprise X / Enterprise+ subscription with Advanced DevSecOps.*
Vulnerability Contextual Analysis Uses the code context to eliminate false positive reports on vulnerable dependencies that are not applicable to the code. Vulnerability Contextual Analysis is currently supported for Python, Java and JavaScript code.
Static Application Security Testing (SAST) Provides fast and accurate security-focused engines that detect zero-day security vulnerabilities on your source code sensitive operations, while minimizing false positives.
Secrets Detection Prevents the exposure of keys or credentials that are stored in your source code.
Infrastructure as Code (IaC) Scan Secures your IaC files. Critical to keeping your cloud deployment safe and secure.
🌟 Additional Perks
• Security issues are easily visible inline. • The results show issues with context, impact, and remediation. • View all security issues in one place, in the JFrog tab. • For Security issues with an available fixed version, you can upgrade to the fixed version within the plugin. • Track the status of the code while it is being built, tested, and scanned on the CI server.
📖 Documentation
Read the documentation to get started.
🔥 Reporting Issues
Please help us improve by reporting issues you encounter.
🫱🏻🫲🏼 Contributions
We welcome contributions from the community through pull requests. To assist in enhancing this project, please review our Contribution guide.
Description from the VS Code Marketplace listing.
- .net
- artifactory
- devops
- devsecops
- dotnet
- go
- golang
- javascript
- jfrog
- js
- json
- maven
- node
- nodejs
- npm
- nuget
- python
- scan
- security
- ts
Where JFrog sits in the listing
Each band is one page of 20. Installs on a log scale. Placement is projected from installs, so it can differ from the marketplace's own sort order. Hover a dot to see the listing.
Charts
Images: 30d · 1y · all time · 1600×900 dark
Adoption over time
7/30/90-day growth
Filled points are observed values; hollow points come from Internet Archive snapshots of the listing page. Dashed segments span periods with no observations — values between points are not interpolated.
Recent observations
Full history (3)Similar VS Code Marketplace Other plugins
Data source
Install counts, average rating, and rating counts come from the public Visual Studio Marketplace gallery API. Installs are cumulative and exclude updates.
Listing: https://marketplace.visualstudio.com/items?itemName=JFrog.jfrog-vscode-extension. First seen Oct 16, 2026; last successful collection Oct 18, 2026. See the methodology.