What started as "just update the vulnerable packages" turned into a full audit of my Mac's Python chaos — Homebrew Pythons installed as dependencies, a forgotten python.org installer, pyenv, Xcode CLT stubs, and per-version user sites. This is the whole journey from findings to purge.
VS Code already resolves {@link} for symbols the current file imports, and gives up on everything else. Go To Definition for JSDoc closes that gap today — and if enough projects adopt it, that is evidence TypeScript could support it natively.
A small VS Code extension for jumping from JSDoc {@link SymbolName} references to TypeScript workspace symbols without adding imports just for navigation.