Open VSIX files in your browser
An extension for VS Code or Visual Studio. Open one right here to see what it adds and when its code runs, without installing it. Nothing leaves your device.
Or drop it anywhere on this page
What you'll see
Your app opens like a folder, its files listed on the left, with a page beside them on what it is, who signed it and what it asks for.
- Its signature • Checked inside your browser
- SHA-256 • Compare it or look it up on VirusTotal
- Heads-ups • What it asks for and what runs
- Its files • Manifests open as text
About VSIX
A VSIX is a ZIP with extension.vsixmanifest naming the extension, its publisher and version. A VS Code extension keeps its package.json in extension/, which says what it adds, such as commands, languages and themes, and the events that start its code.
VS Code runs extensions with your own rights, outside any sandbox, so an extension can read your files and reach the network. One that starts with * or onStartupFinished runs in every window, whatever you open. The Marketplace keeps its signature beside the VSIX, not in it.
Filepeek reads both manifests and shows what the extension adds, when it starts, the extensions it needs and whether it carries native code. It flags extensions that start in every window, and links to the extension's page on the Marketplace.
VS Code and Visual Studio extension
.vsix
Format
- MIME type
- application/vsix
- Made by
- Microsoft
- Released
- 2010
Inside the file
- Container
- ZIP (Open Packaging Conventions)
- Manifest
- extension.vsixmanifest
- VS Code
- extension/package.json
- Code
- JavaScript, and native modules
Opens in every browser
No browser opens a VSIX: they download it. Filepeek opens it as a folder in Chrome, Edge, Firefox and Safari.
- YouChromeOpens through Filepeek
- YouEdgeOpens through Filepeek
- YouFirefoxOpens through Filepeek
- YouSafariOpens through Filepeek
Questions
How do I see what a VS Code extension does before installing it?
Drop its VSIX on this page or choose Peek a VSIX. A page shows what it adds, the events that start its code and the extensions it needs, and its files are listed like a folder.
Can I check a VSIX's signature?
Not from the VSIX alone: the Marketplace keeps its signature in a file beside it, which VS Code checks as it installs. Filepeek works out the VSIX's SHA-256 to look up or compare.
How do I look up a VSIX on VirusTotal?
Filepeek works out its SHA-256 inside your browser. Look up on VirusTotal opens VirusTotal's page for that hash, and only the hash goes, never the file. Compare checks it against a SHA-256, SHA-1 or MD5 you paste.
Does opening a VSIX install it?
No. Filepeek only reads it: nothing in it runs, nothing is installed and it never leaves your device.
Can I get files out of a VSIX?
Yes. Pick any file on the left to open it. package.json and its code open as text. In Chrome and Edge on a computer, Export extracts them all into a folder.