[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Discogs Enhancer

Version 4.16.4 View in Chrome Web Store

Last scanned: about 13 hours ago

Extension Details

Developer: https://www.discogs-enhancer.com/

Rating: 4.6 ★ (140 ratings)

Users: 10,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors: The extension has a solid reputation with 10,000 users and a strong 4.6-star rating from 140 reviews, indicating positive user experiences. The focused nature on Discogs.com enhancement suggests legitimate functionality, and the dedicated website (discogs-enhancer.com) demonstrates developer investment in the project.

Concerns: The activeTab permission allows access to any active tab content when the extension icon is clicked, which extends beyond the stated Discogs-only functionality. While the content scripts are properly restricted to Discogs domains, the activeTab permission could potentially access sensitive information on other websites if users interact with the extension outside of Discogs. The combination of activeTab with storage permissions means the extension could theoretically collect and store data from any active tab.

The contextMenus and scripting permissions, while appropriate for enhancement functionality, add to the overall permission footprint.

Recommendations: This extension appears relatively safe for Discogs users given its established reputation and focused purpose. However, due to the activeTab permission extending beyond Discogs domains, consider running it in a dedicated Chrome profile if you frequently handle sensitive information in other tabs. Only click the extension icon when actively using Discogs to minimize exposure. The extension's good ratings and specific use case make it acceptable for most users with basic precautions.

Findings

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

activeTab
contextMenus
scripting
storage

Embedded URLs (209 total):

http://www.w3.org/2000/svg	https://www.discogs.com/search/?sort=nfm
https://www.discogs.com/release/6265588-The-Rise-And-Fall-Of-Paramount-Records-1928-1932-Volume-2/history#latest	https://www.discogs.com/release/stats/3432706
http://www.msalcido.com	https://github.com/salcido
https://api.github.com/repos/salcido/discogs-enhancer/releases	http://browserhacks.com/#hack-e71d8692f65334173fee715c222cb805
https://github.com/webpack-contrib/style-loader/issues/177	http://www.opensource.org/licenses/mit-license.php
https://discogs-enhancer.com/issues	https://www.discogs.com
https://chromewebstore.google.com/detail/discogs-enhancer/fljfmblajgejeicncojogelbkhbobejn/reviews	https://api.discogs.com/marketplace/listings/
https://www.discogs.com/lists/	https://www.discogs.com/Aceyalone-A-Book-Of-Human-Language/master/19149
https://www.discogs.com/sell/item/	https://jonuleis.com/
https://www.discogs.com/sell/release/2897713	https://api.discogs.com/releases/
https://www.discogs.com/sell/post/	https://www.discogs.com/sell/history/
https://www.discogs.com/Burial-Burial/master/11767	https://www.discogs.com/service/catalog/api/graphql
https://www.discogs.com/master/view/419728	https://www.google.com/search?q=
https://www.discogs.com/master/view/55658	https://www.discogs.com/FSOL-ISDN/master/6486
https://www.discogs.com/master/view/58623	https://api.discogs.com/masters/
https://www.discogs.com/group/thread/1136261	https://www.discogs.com/Microwave-Prince-Volume-3/release/32837
https://discogs-enhancer.com/rates?base=	https://www.discogs.com/STL-Night-Grooves/release/1121308
https://www.discogs.com/Jerry-Goldsmith-Gremlins-Original-Motion-Picture-Soundtrack/release/9436212	https://www.discogs.com/Casino-Vs-Japan-Frozen-Geometry/release/9108134
https://www.discogs.com/Farmers-Manual-Fsck/release/106658	https://www.discogs.com/Muse-The-Resistance/release/4318500
https://www.discogs.com/Bunbury-Archivos-Vol-2-Duetos/release/9495721	https://www.discogs.com/Various-The-Rise-And-Fall-Of-Paramount-Records-1928-1932-Volume-2/release/6265588
https://www.discogs.com/The-Orb-Moonbuilding-2703-AD/release/7144376	https://www.discogs.com/Sly-Robbie-Nils-Petter-Molv%C3%A6r-Eivind-Aarset-Vladislav-Delay-NORDUB/release/11868038
https://www.discogs.com/Various-Blech/release/30565	https://www.discogs.com/
https://www.discogs.com/user/	https://www.discogs.com/sell/
https://www.discogs.com/forum/thread/731619	https://www.discogs.com/release/1622285-Myron-Cohen-Everybody-Gotta-Be-Someplace
https://www.discogs.com/release/986404-The-5th-Dimension-Portrait	https://www.discogs.com/release/305806-Dots-10th-Anniversary-Box-II-Dots-Plus-Unreleased-Material
https://www.discogs.com/release/1688717-DJ-Dan-Housing-Project	https://www.discogs.com/release/9459-Jeff-Mills-Live-At-The-Liquid-Room-Tokyo
https://www.discogs.com/release/5500798-The-Ramsey-Lewis-Trio-Hang-On-Ramsey	https://www.discogs.com/Blackalicious-Melodica/master/32289
https://merch.discogs.com	https://discogs-enhancer.com/sl
http://www.w3.org/1999/xlink	https://developer.chrome.com/docs/extensions/mv3/intro/
https://developer.mozilla.org/docs/Mozilla/Add-ons/WebExtensions/API/runtime/onMessage	https://github.com/mozilla/webextension-polyfill/issues/130
https://extensionpay.com	https://stackoverflow.com/a/68456858
https://developer.mozilla.org/en-US/docs/Web/API/Window/open	https://github.com/Glench/ExtPay#2-configure-your-manifestjson
http://mozilla.org/MPL/2.0/.	http://www.discogs.com/search?q=
https://www.alldayrecords.com/search?type=product&q=	https://bandcamp.com/search?q=
https://www.beatport.com/search?q=	https://boomkat.com/products?q
https://www.cdandlp.com/search/?q=	https://clone.nl/all/search?query=
https://www.decks.de/decks/workfloor/search_db.php?such=	http://www.deejay.de/
https://earcave.com/search?type=product&q=	https://www.ebay.com/sch/i.html?&_nkw=
https://gramaphonerecords.com/search?q=	https://hardwax.com/?find=
https://www.juno.co.uk/search/?q%5Ball%5D%5B%5D=	https://meditations.jp/a/search?type=product&q=

Page 1 of 3

Raw Manifest

{
  "name": "Discogs Enhancer",
  "icons": {
    "16": "img/icon_16.png",
    "32": "img/icon_32.png",
    "48": "img/icon_48.png",
    "128": "img/icon_128.png"
  },
  "action": {
    "default_icon": {
      "16": "img/icon_16.png",
      "32": "img/icon_32.png",
      "48": "img/icon_48.png",
      "128": "img/icon_128.png"
    },
    "default_popup": "html/popup.html",
    "default_title": "Discogs Enhancer"
  },
  "author": "Matthew Salcido",
  "version": "4.16.4",
  "background": {
    "service_worker": "js/background.js"
  },
  "short_name": "Discogs Enhancer",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Enhance your Discogs experience with dark themes, seller tools, price comparisons, currency conversion, powerful filters, and more!",
  "permissions": [
    "activeTab",
    "contextMenus",
    "scripting",
    "storage"
  ],
  "homepage_url": "https://www.discogs-enhancer.com",
  "content_scripts": [
    {
      "js": [
        "js/extension/ExtPay.js",
        "js/user-preferences.js"
      ],
      "css": [
        "css/dark-theme.css"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*.discogs.com/*"
      ],
      "all_frames": true
    }
  ],
  "manifest_version": 3,
  "minimum_chrome_version": "88",
  "web_accessible_resources": [
    {
      "matches": [
        "*://*.discogs.com/*"
      ],
      "resources": [
        "css/*",
        "fonts/*",
        "js/extension/dependencies/*",
        "js/extension/features/*",
        "js/collection-explorer-bundle.js"
      ]
    }
  ]
}

by ✦ Astarte

Discogs Enhancer

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (209 total):

Raw Manifest

Detections

Manifest Findings