- VSCode is open source, so I'm not sure how that constitutes lock in. Switching text editors is pretty easy.
- GitHub has some special things like issues and pull requests but in general you can just switch your origin URL to another Git repository that isn't GitHub and boom you are off GitHub.
- NPM you can just point your package.json at any Git repository you want, no need to use the NPM package repo.
- VSCode Online: like I said, just use a different online editor.
Not too much lock in going on here. Integrations and seamless workflow? Sure. But lock in? No I don't think so.