Signature verification

package.json

@@ -71,15 +71,15 @@
   },
   "dependencies": {
     "@gitpod/gitpod-protocol": "main-gha",
-    "@segment/analytics-node": "^1.1.0",
-    "@jeanp413/analytics-node-umd": "^1.1.0",
     "@gitpod/ide-metrics-api-grpcweb": "main-gha",
     "@gitpod/local-app-api-grpcweb": "main-gha",
     "@gitpod/supervisor-api-grpc": "main-gha",
     "@improbable-eng/grpc-web-node-http-transport": "^0.15.0",
+    "@jeanp413/analytics-node-umd": "^1.1.0",
     "@microsoft/1ds-core-js": "^3.2.13",
     "@microsoft/1ds-post-js": "^3.2.13",
     "@parcel/watcher": "2.1.0",
+    "@segment/analytics-node": "^1.1.0",
     "@vscode/deviceid": "^0.1.1",
     "@vscode/iconv-lite-umd": "0.7.0",
     "@vscode/policy-watcher": "^1.1.4",
@@ -92,14 +92,14 @@
     "@vscode/windows-mutex": "^0.5.0",
     "@vscode/windows-process-tree": "^0.6.0",
     "@vscode/windows-registry": "^1.1.0",
-    "@zip.js/zip.js": "^2.4.6",
     "@xterm/addon-image": "0.9.0-beta.17",
     "@xterm/addon-search": "0.16.0-beta.17",
     "@xterm/addon-serialize": "0.14.0-beta.17",
     "@xterm/addon-unicode11": "0.9.0-beta.17",
     "@xterm/addon-webgl": "0.19.0-beta.17",
     "@xterm/headless": "5.6.0-beta.17",
     "@xterm/xterm": "5.6.0-beta.17",
+    "@zip.js/zip.js": "^2.4.6",
     "graceful-fs": "4.2.11",
     "http-proxy-agent": "^7.0.0",
     "https-proxy-agent": "^7.0.2",
@@ -109,6 +109,7 @@
     "native-is-elevated": "0.7.0",
     "native-keymap": "^3.3.5",
     "native-watchdog": "^1.4.1",
+    "node-ovsx-sign": "^1.1.0",
     "node-pty": "1.1.0-beta11",
     "tas-client-umd": "0.2.0",
     "v8-inspect-profiler": "^0.1.1",

src/vs/platform/extensionManagement/node/extensionSignatureVerificationService.ts

@@ -98,7 +98,7 @@ export class ExtensionSignatureVerificationService implements IExtensionSignatur
 		if (!this.moduleLoadingPromise) {
 			this.moduleLoadingPromise = new Promise(
 				(resolve, reject) => require(
-					['@vscode/vsce-sign'],
+					['node-ovsx-sign'],
 					async (obj) => {
 						const instance = <typeof vsceSign>obj;