Connect Extensions gallery to Open VSX for Code OSS.

build/hygiene.ts

@@ -92,9 +92,14 @@ export function hygiene(some: NodeJS.ReadWriteStream | string[] | undefined, run
 	const productJson = es.through(function (file: VinylFile) {
 		const product = JSON.parse(file.contents!.toString('utf8'));
 
+		// Block Microsoft Marketplace (and other non-OSS galleries) in product.json.
+		// Open VSX is allowed — see https://github.com/eclipse-openvsx/openvsx/wiki/Using-Open-VSX-in-VS-Code
 		if (product.extensionsGallery) {
-			console.error(`product.json: Contains 'extensionsGallery'`);
-			errorCount++;
+			const serviceUrl = String(product.extensionsGallery.serviceUrl ?? '');
+			if (!/^https:\/\/open-vsx\.org(\/|$)/.test(serviceUrl)) {
+				console.error(`product.json: Contains 'extensionsGallery' (only https://open-vsx.org is allowed)`);
+				errorCount++;
+			}
 		}
 
 		this.emit('data', file);

product.json

@@ -37,6 +37,15 @@
 	"urlProtocol": "code-oss",
 	"agentsTelemetryAppName": "agents",
 	"webviewContentExternalBaseUrlTemplate": "https://{{uuid}}.vscode-cdn.net/insider/ef65ac1ba57f57f2a3961bfe94aa20481caca4c6/out/vs/workbench/contrib/webview/browser/pre/",
+	"extensionsGallery": {
+		"serviceUrl": "https://open-vsx.org/vscode/gallery",
+		"itemUrl": "https://open-vsx.org/vscode/item",
+		"resourceUrlTemplate": "https://open-vsx.org/vscode/unpkg/{publisher}/{name}/{version}/{path}",
+		"extensionUrlTemplate": "https://open-vsx.org/vscode/gallery/{publisher}/{name}/latest"
+	},
+	"linkProtectionTrustedDomains": [
+		"https://open-vsx.org"
+	],
 	"builtInExtensions": [
 		{
 			"name": "ms-vscode.js-debug-companion",