Inconsistent mirror metadata caused by extensions republishing the same versions

[hoangphamEclipse]

It is noticed that sometimes extensions can republish the same version twice. For example, the extension gh555.File-Explorer v.16.2.2 has been published twice. If the mirror save the metadata of the first publish, then the data will be inconsistent with what open-vsx is broadcasting after the second publish. For example, the timestamp will be different.

Is this an expected behaviour? Are users allowed to publish the same extension version twice?

[netomi]

Publishers have the ability to remove published versions and as the registry does not keep track of published versions atm, it will allow them to re-upload the same version.

It has been identified that this is not what you want for a registry, and we will change that such that previously published versions cant be published again.