The only potential risk was the use of sanity to render a changelog. I didn't want to risk it, so I gutted that and a ton of other stuff. Just published a new, stripped down version.
https://github.com/t3dotgg/vsc-material-but-i-wont-sue-you/p...
https://github.com/t3dotgg/vsc-material-but-i-wont-sue-you/p...
> I did a thorough combing of the code base when I forked. Just did another audit and still not seeing anything suspicious.