Fix blog image generation with curated Unsplash images

- Replace placeholder.co fallback with topic-mapped Unsplash photo URLs
- Add getTopicImage() for deterministic image selection per topic/title
- Add SVG gradient fallback generator for edge cases
- generateFeaturedImage() now always returns valid URL (never null)
- 14 topics with 5 curated images each + generic fallback pool

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Zie619

vscode-extension/.eslintrc.json

@@ -0,0 +1,28 @@
+{
+  "root": true,
+  "parser": "@typescript-eslint/parser",
+  "parserOptions": {
+    "ecmaVersion": 2022,
+    "sourceType": "module"
+  },
+  "plugins": ["@typescript-eslint"],
+  "extends": [
+    "eslint:recommended",
+    "plugin:@typescript-eslint/recommended"
+  ],
+  "rules": {
+    "@typescript-eslint/naming-convention": [
+      "warn",
+      {
+        "selector": "import",
+        "format": ["camelCase", "PascalCase"]
+      }
+    ],
+    "@typescript-eslint/semi": "warn",
+    "curly": "warn",
+    "eqeqeq": "warn",
+    "no-throw-literal": "warn",
+    "semi": "off"
+  },
+  "ignorePatterns": ["out", "dist", "**/*.d.ts"]
+}

vscode-extension/.gitignore

@@ -0,0 +1,8 @@
+out
+dist
+node_modules
+.vscode-test/
+*.vsix
+.DS_Store
+*.log
+.env

vscode-extension/.npmrc

@@ -0,0 +1,2 @@
+save-exact=true
+package-lock=true

vscode-extension/.vscodeignore

@@ -0,0 +1,14 @@
+.vscode/**
+.vscode-test/**
+src/**
+.gitignore
+.yarnrc
+vsc-extension-quickstart.md
+**/tsconfig.json
+**/.eslintrc.json
+**/*.map
+**/*.ts
+node_modules/**
+out/test/**
+.DS_Store
+*.vsix

vscode-extension/CHANGELOG.md

@@ -0,0 +1,26 @@
+# Change Log
+
+All notable changes to the "ai-bom-scanner" extension will be documented in this file.
+
+## [0.1.0] - 2025-02-12
+
+### Added
+
+- Initial release of AI-BOM Security Scanner for VS Code
+- Scan workspace and individual files for AI/ML components
+- Problems panel integration with diagnostics
+- Inline decorations showing risk scores and severity
+- Interactive sidebar with results organized by severity
+- Summary panel with scan statistics
+- Status bar integration
+- Configurable severity threshold filtering
+- Deep scan mode with AST analysis
+- Scan on save option
+- Auto-install support for ai-bom CLI
+- Support for Python, JavaScript, TypeScript, YAML, JSON, Dockerfiles
+- Detection of 25+ AI SDKs and frameworks
+- Risk scoring (0-100) with severity levels
+- OWASP LLM Top 10 category mapping
+- Gutter icons and hover tooltips
+- Navigate to component locations in code
+- Output channel for debugging