Check AI Package Trust Scores Without Leaving VS Code

I spend most of my day in VS Code. When I add a new dependency, I do not want to switch to a browser, search for the package, check its GitHub, scan for CVEs, and then come back. I want the trust signal right there in my editor. So I built a VS Code extension that shows trust scores for AI packages and tools inline, without breaking my flow. The Workflow Problem Here is what adding a dependency usually looks like: You hear about a package or an AI assistant suggests one You add it to package.json or requirements.txt You run npm install or pip install Maybe you check the GitHub page. Maybe you do not. You move on Step 4 is where the security decision should happen, but it rarely does because it requires context-switching. By the time you have checked the repo, read the issues, and searched for CVEs, you have lost 5 minutes and your focus. How the Extension Works The Nerq VS Code extension adds trust scoring directly into your editor: Inline annotations : When you open a package.json , r