[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Ultra Violet

Version 2 View in Chrome Web Store

Last scanned: 3 days ago | force re-scan

Extension Details

Developer: Google

Rating: 4.6 ★ (493 ratings)

Users: 100,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension shows strong trust indicators with 100,000 users and a high rating of 4.6 from 493 reviews. The author is listed as "Google," which would typically be a significant trust factor, though this should be verified as the actual Google company rather than an individual using that name. The substantial user base suggests the extension has been in use for some time without major issues.

Concerns:

The primary concern is the use of Manifest Version 2, which has weaker security restrictions compared to the newer Manifest V3 standard. This older framework provides extensions with broader access capabilities and fewer privacy protections. The lack of detailed technical information (permissions, host permissions, content scripts) makes it difficult to assess the full scope of what this extension can access or modify.

The missing description is also concerning as it prevents users from understanding the extension's intended functionality, making it harder to evaluate whether any permissions would be appropriate for its stated purpose.

Recommendations:

Given the low overall risk assessment and high user adoption, this extension appears relatively safe for general use. However, consider monitoring for updates that migrate to Manifest V3 for improved security. If you're particularly security-conscious, you could run this extension in a separate Chrome profile until more technical details are available or the extension updates to the newer manifest version.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "name": "Ultra Violet",
  "theme": {
    "tints": {
      "buttons": [
        0.8,
        1,
        0.8
      ],
      "frame_inactive": [
        -1,
        -1,
        0.6
      ],
      "frame_incognito": [
        0.1,
        0,
        0.3
      ],
      "frame_incognito_inactive": [
        0.1,
        0,
        0.3
      ]
    },
    "colors": {
      "frame": [
        69,
        50,
        110
      ],
      "toolbar": [
        95,
        75,
        139
      ],
      "ntp_text": [
        171,
        144,
        233
      ],
      "tab_text": [
        255,
        255,
        255
      ],
      "bookmark_text": [
        255,
        255,
        255
      ],
      "ntp_background": [
        69,
        50,
        110
      ],
      "tab_background_text": [
        255,
        255,
        255
      ],
      "tab_background_text_inactive": [
        255,
        255,
        255
      ],
      "tab_background_text_incognito": [
        255,
        255,
        255
      ],
      "tab_background_text_incognito_inactive": [
        255,
        255,
        255
      ]
    }
  },
  "version": "2",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Ultra Violet: Inspiring creativity, compassion, and ultralight beams",
  "manifest_version": 2
}

by ✦ Astarte

Ultra Violet

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (1 total):

Raw Manifest

Detections

Manifest Findings