<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Forem: Denis_Mal</title>
    <description>The latest articles on Forem by Denis_Mal (@denis-vsc).</description>
    <link>https://forem.com/denis-vsc</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3940005%2Fcf8c8614-9ccd-4592-b9e0-4fd47350e60e.png</url>
      <title>Forem: Denis_Mal</title>
      <link>https://forem.com/denis-vsc</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://forem.com/feed/denis-vsc"/>
    <language>en</language>
    <item>
      <title>I made an extension to securely share entire workspaces via a single link (with zero-knowledge encryption)</title>
      <dc:creator>Denis_Mal</dc:creator>
      <pubDate>Tue, 19 May 2026 10:12:49 +0000</pubDate>
      <link>https://forem.com/denis-vsc/i-made-an-extension-to-securely-share-entire-workspaces-via-a-single-link-with-zero-knowledge-lcj</link>
      <guid>https://forem.com/denis-vsc/i-made-an-extension-to-securely-share-entire-workspaces-via-a-single-link-with-zero-knowledge-lcj</guid>
      <description>&lt;p&gt;Hi Dev Community&lt;/p&gt;

&lt;p&gt;Just pushed my first extension to the marketplace — it's called &lt;strong&gt;Snappy Link&lt;/strong&gt;, and it solves a problem I kept running into: sharing a project with someone and going through the whole "zip it, upload it to Drive, send the link, now install dependencies" ritual every single time.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;How it works:&lt;/strong&gt;&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;You hit "Pack Files" in the sidebar&lt;/li&gt;
&lt;li&gt;It auto-ignores heavy and sensitive paths (node_modules, .venv, .env, .git)&lt;/li&gt;
&lt;li&gt;Encrypts everything locally with AES-256-GCM (Web Crypto API)&lt;/li&gt;
&lt;li&gt;Gives you a single shareable link&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;On the receiving end, pasting the link downloads, decrypts, and mounts the workspace — and if it detects a package.json, requirements.txt, or .csproj, it offers a one-click dependency install.&lt;/p&gt;

&lt;p&gt;**A few things I'm particularly happy with under the hood:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Smart packaging** — strips node_modules, pycache, build artifacts, etc., so you're not shipping 300MB of stuff the recipient will just regenerate anyway
&lt;strong&gt;2. Zero-knowledge encryption&lt;/strong&gt; — the key never hits the server; it rides along as a URL hash fragment (#key=...), so my backend only ever stores encrypted blobs it can't read
&lt;strong&gt;3. Auto-setup&lt;/strong&gt; — detects whether it's a Node, Python, or .NET project and runs the relevant install commands automatically&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;The streams + encryption part took way longer than I expected to get right, but I think it's in a solid place now.&lt;/p&gt;

&lt;p&gt;Up to 1GB per payload, 5 links/month.&lt;/p&gt;

&lt;p&gt;Would love feedback or feature requests — especially if something breaks on your setup!&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Grab it here:&lt;/strong&gt; &lt;br&gt;
&lt;a href="https://marketplace.visualstudio.com/items?itemName=DenisMal.snappy-link" rel="noopener noreferrer"&gt;https://marketplace.visualstudio.com/items?itemName=DenisMal.snappy-link&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;Tags for reach: #vscode #webdev #javascript #typescript #programming #buildinpublic&lt;/p&gt;

</description>
      <category>security</category>
      <category>showdev</category>
      <category>tooling</category>
      <category>vscode</category>
    </item>
  </channel>
</rss>
