vscode-go uses form-data 4.0.0 which has a critical security vulnerability : https://github.com/advisories/GHSA-fjxv-7rqg-78g4 It also uses tar-fs 2.1.2 which has a high security vulnerability : https://github.com/advisories/GHSA-8cj5-5rvv-wf4v