v0.6.1 - Security Update
✅ Testing & Verification
- ✅ Compiles successfully
- ✅ Extension packages successfully
- ✅ All existing functionality preserved
- ✅ Backward compatible (only rejects invalid names)
- ✅ Ready for VS Code Marketplace publication
Upgrade Notes
This is a mandatory security update. No configuration
changes required.
If you see errors about invalid connection names after
upgrading:
- Your R connection object has an unusual name
- Rename it to follow R identifier rules: start with
letter, use only letters/numbers/dots/underscores - Example: rename
`my-connection`to
my_connection
Security Audit
- Last Audit: 2026-01-21
- Runtime Vulnerabilities: None (known)
- Development Vulnerabilities: Not applicable (tar
package only affects npm install)
For security questions or to report vulnerabilities:
https://github.com/h-a-graham/duckdb-r-editor/security
📦 Installation
Download the .vsix file from the Assets section below
and install via:
- Positron → Extensions →
...→ Install from VSIX - Or use:
code --install-extension duckdb-r-editor-0.6.1.vsix