alt Hacker NewsApparently it is public: https://cursor.com/help/customization/extensions
They use a proxy in front of OpenVSX…purportedly for better security, the irony writes itself.
Replies
bagacrap • yesterday at 11:56 PM
> Team admins can defer extension installs and updates until a marketplace version has been published for a minimum number of hours.
I think everyone is going to be setting this to 168 after today.
Ironically, that page has a paragraph "How Cursor reduces supply-chain risk:"
Which is exactly the opposite of what happened today.