This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 49%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Are the open source python packages in VS Pro "more" secure to download as opposed to downloading them from Anaconda or doing a pip install using VS Code?
Is one more compliant (HIPPA, etc.) than the other?
I apologize if the questions seems very straightforward but hopefully someone can clarify this.
A family of Microsoft suites of integrated development tools for building applications for Windows, the web, mobile devices and many other platforms. Miscellaneous topics that do not fit into specific categories.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(140.8, 78%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETS%3C/text%3E%3C/svg%3E)
Hello @Ali,
Welcome to Microsoft Q&A forum.
Is one more compliant (HIPPA, etc.) than the other?
"More compliant/more secure", I think it’s hard to say whether one is more secure than the other if you don’t point specific conditions.
But I believe they are both secure, do you have any concerns about this?
@Tianyu Sun-MSFT Our company (Govt Public Health entity) is leaning towards VS Pro more since they consider it to be more secure. Besides limiting the 3rd party extensions that are fully available in VS Code they believe that the Open-source python packages (PYPI, Anaconda) in VS Pro are more "secure." But from my understanding isn't that just a GUI built on top? It's the same thing as doing a command line operation when installing in VS Code.
If it's just limiting the 3rd party extensions I believe we could set guidelines for my team who is already careful with installing these and python packages. Granted the security is the same for both of these software. Using the much more faster and flexible VS Code would be ideal for team due to the sheer resources (learning, developing web and data apps, etc.) it has.
Do you believe that VS Pro is more secure in this sense?
@ Tianyu Sun-MSFT I don't know if you got my previous reply so I'll just post this here. Our company is a govt Public Health Entity who are concerned about security measures in VS Code. From what my research installing python packages in VS Pro using the GUI is pretty much the same as using a command line to do it in VS Pro, unless VS Pro is automatically filtering out "bad" packages from PYPI or Anaconda. Also VS Pro limits 3rd party extensions as opposed to VS Code. But this can be handled by establishing a guideline of what to install and our team is pretty careful with this.
I feel as if it is too much for IT team to understand the intricacies with VS Code and instead of learning and doing a proper setup and establishing guideline they just want to go with VS Pro. I'm hoping that they go with VS Code or at least allow for our power users to use that since it is much more flexible to suit our needs. I even suggested setting up an Artifactory but they aren't too sure about it.
We as a team mainly do data analytics along with some data science and setting up the pipelines to automate data ingestion.
Do you think that VS Pro is more "secure" than VS Code? If not, what would be some good points to use the much more versatile VS Code?
Hi @Ali,
Third-party extensions are hard to say, but you can trust official extensions, components and features.
VS IDE includes some workloads and components, but VS Code is more like a code editor and it depends on the extensions. As you said, you can establish a guideline of what to install to except installing the "bad" extensions, so in my opinion, they both are secure.
I guess the developers may be a little worried about the possibility of missing something, failing to filter some "bad" things while installing/using the packages/extensions in VS Code. As you know, VS Code is more flexible, so this situation may occur. On this point, VS Pro may be a better choice. Anyway, if you install carefully, they are as secure as each other.
Best Regards,
Tianyu
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi @Ali,
May I know if you have got any chance to check my answer? Please feel free to let us know if you have any further concerns:)