The extension has a decent user base of 10,000 users and maintains a solid 4.5-star rating from 37 reviews, suggesting users find it functional. However, the lack of visible developer information and company details raises transparency concerns. The name "Vue force dev" suggests it's a development tool for Vue.js applications, which would typically require broad access to function properly.
The extension's broad permissions are extremely concerning given the limited context. The <all_urls> host permissions combined with content script injection capabilities across all websites creates a significant attack surface. For a Vue.js development tool, these permissions might be necessary for debugging and inspecting Vue applications across different domains, but they also enable the extension to access sensitive data on banking sites, email platforms, and other confidential web applications. The absence of clear developer identification makes it difficult to verify the extension's legitimacy and trustworthiness.
Consider running this extension in a separate Chrome profile dedicated to development work only. Avoid using this profile for personal browsing, banking, or accessing sensitive websites. Regularly review the extension's behavior and consider alternatives with more limited permissions if available. If you're not actively developing Vue.js applications, this extension's broad access is unnecessary and should be removed. Monitor for any unusual network activity or website behavior when the extension is active.
| https://github.com/hzmming/vue-force-dev/issues | https://vuejs.org/error-reference/#runtime- | |
| https://stackoverflow.com/q/3277182/1008999 | https://www.whatismybrowser.com/guides/the-latest-user-agent/macos | |
| https://pinia.vuejs.org/logo.svg | https://pinia.vuejs.org | |
| https://devtools.vuejs.org/guide/installation.html. | https://github.com/tc39/proposal-async-context | |
| https://clients2.google.com/service/update2/crx |
{ "name": "Vue force dev", "icons": { "16": "icons/16.png", "48": "icons/48.png", "128": "icons/128.png" }, "action": { "default_icon": { "16": "icons/16-gray.png", "48": "icons/48-gray.png", "128": "icons/128-gray.png" }, "default_popup": "popups/not-found.html", "default_title": "Vue force dev" }, "version": "2.1.1", "background": { "scripts": [ "background.js" ], "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "description": "A tool forces vue to run in development", "content_scripts": [ { "js": [ "detector.js" ], "run_at": "document_start", "matches": [ "<all_urls>" ] } ], "host_permissions": [ "<all_urls>" ], "manifest_version": 3, "web_accessible_resources": [ { "matches": [ "<all_urls>" ], "resources": [ "detectorExec.js" ], "extension_ids": [] } ] }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.