[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Jira Metrics Plugin - Analytics & Insights

Version 2025.10.26 View in Chrome Web Store

Last scanned: 3 days ago | force re-scan

Extension Details

Developer: jirametrics.pro

Rating: 5.0 ★ (26 ratings)

Users: 3,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

The extension has a perfect 5.0 rating from 26 reviews and serves 3,000 users, indicating positive user experience. The developer domain "jirametrics.pro" suggests specialization in Jira analytics, which aligns with the extension's purpose. The recent version (2025.10.26) shows active maintenance. However, the relatively small user base and limited review count provide less confidence than extensions with broader adoption.

Concerns:

The identity permission is particularly concerning for a Jira analytics tool, as it grants access to your Google account information, which may not be necessary for analyzing Jira metrics. The tabs permission allows monitoring and manipulation of all browser tabs, extending beyond the stated Jira-focused functionality. The content scripts target specific Jira URLs, which is appropriate, but the broad permissions suggest capabilities that exceed what's needed for basic Jira analytics. The combination of identity and tabs permissions creates potential for data collection beyond the extension's stated purpose.

Recommendations:

Consider running this extension in a separate Chrome profile to isolate it from your primary browsing activities and other accounts. Before installation, verify that the extension actually requires Google identity integration for its Jira analytics features. Monitor the extension's behavior after installation to ensure it only operates on Jira pages as intended. Review your Google account permissions regularly if you choose to install this extension.

Findings

HIGH

High-Risk Permission: identity

This extension has the identity permission. Can access your identity information. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

tabs
storage
identity

Embedded URLs (53 total):

https://fonts.googleapis.com	https://fonts.gstatic.com
https://fonts.googleapis.com/css2?family=Roboto:wght@300	https://fonts.googleapis.com/icon?family=Material+Icons
http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
http://www.w3.org/1999/xhtml	http://www.w3.org/2000/xmlns/
http://svgjs.dev	https://www.highcharts.com?credits
https://www.highcharts.com/docs/accessibility/accessibility-module.	https://code.highcharts.com/11.4.8/gfx/stock-icons/
http://fb.me/use-check-prop-types	https://reactjs.org/docs/error-decoder.html?invariant=
http://www.w3.org/XML/1998/namespace	http://www.w3.org/1998/Math/MathML
http://www.w3.org/2000/svg%27	http://www.w3.org/1999/xlink%27
https://github.com/date-fns/date-fns/blob/master/docs/unicodeTokens.md	https://apis.google.com/js/api.js
https://www.google.com/recaptcha/api.js	https://www.google.com/recaptcha/enterprise.js?render=
https://securetoken.google.com/	https://account.jirametrics.pro/auth-bridge
https://mui.com/production-error/?code=	https://github.com/syntax-tree/hast-util-to-jsx-runtime
https://www.googleapis.com/auth/userinfo.email	https://www.googleapis.com/auth/userinfo.profile
https://jirametrics.pro/	https://github.com/uuidjs/uuid#getrandomvalues-not-supported
https://account.jirametrics.pro/dashboard/subscription	https://jirametrics.pro/dashboard-share?data=
https://jirametrics.pro/ru/docs/getting-started/introduction	https://jirametrics.pro/en/docs/getting-started/introduction
https://community.jirametrics.pro/	https://account.jirametrics.pro/dashboard/profile
https://redux.js.org/Errors?code=	https://reactjs.org/docs/refs-and-the-dom.html#callback-refs
http://react-dnd.github.io/react-dnd/docs/api/drop-target-monitor	http://react-dnd.github.io/react-dnd/docs/api/drag-source-monitor
https://react-dnd.github.io/react-dnd/docs/api/use-drag	https://www.google-analytics.com/debug/mp/collect
https://www.google-analytics.com/mp/collect	https://jirametrics.pro/ru/docs/core-concepts/filtering-modes
https://jirametrics.pro/en/docs/core-concepts/filtering-modes	https://jirametrics.pro/en/docs/getting-started/installation
https://clients2.google.com/service/update2/crx	https://github.com/mholt/PapaParse
http://jedwatson.github.io/classnames	https://github.com/MikeMcl/decimal.js-light/LICENCE
https://github.com/svgdotjs/svg.draggable.js	https://github.com/wout/svg.filter.js
http://www.apache.org/licenses/LICENSE-2.0

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdrmq2h3xyzsr3Mf+6B18ow5AeMM88mRNYfDG9TlpPHCsdZO7YSMOGxBxwnfIMqT3TCX9aMZldHvAkY43N/KXfq+BfgzjCxaQZu8V9MmUN/d+q1lrQ8ocDMVdZ9hjOMlVPswkqGemhI1bhVALmTcBnxWAvTy9Go/hq7qAL6pKGNpOSDRBTbu/+E7+93J4Q0EVLfDqeGSBkh6P4d3Xd4CbuhS3y3gdOvC7OUVhKlXnciLWk3t4HYY9k8X/oNgIIo4QBItEqsfEKrOmMlBqoeUBIqgtgW017mp9ewZSPI6RqMCKVjIXbNS8SvvfGRotL095FL5Zv5N1rHJfaSwex5Y8wIDAQAB",
  "name": "Jira Metrics Plugin - Analytics & Insights",
  "icons": {
    "16": "assets/icon16.png",
    "32": "assets/icon32.png",
    "48": "assets/icon48.png",
    "128": "assets/icon128.png"
  },
  "action": {
    "default_icon": {
      "16": "assets/icon16.png",
      "32": "assets/icon32.png",
      "48": "assets/icon48.png",
      "128": "assets/icon128.png"
    },
    "default_popup": "board-selector.html",
    "default_title": "Analyze Jira Metrics"
  },
  "oauth2": {
    "scopes": [
      "https://www.googleapis.com/auth/userinfo.email",
      "https://www.googleapis.com/auth/userinfo.profile"
    ],
    "client_id": "114103446751-0gh67d0lh2lhlc5uuaueafv9hvetc120.apps.googleusercontent.com"
  },
  "version": "2025.10.26",
  "background": {
    "service_worker": "js/background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "A lightweight analytics plugin that helps you track and analyze your team's performance metrics directly from Jira boards.",
  "permissions": [
    "tabs",
    "storage",
    "identity"
  ],
  "content_scripts": [
    {
      "js": [
        "js/content.js"
      ],
      "css": [
        "assets/styles.css"
      ],
      "matches": [
        "http://*/secure/RapidBoard.jspa?*",
        "https://*/secure/RapidBoard.jspa?*",
        "https://*/jira/software/projects/*/boards/*",
        "https://*/jira/software/c/projects/*"
      ]
    }
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "matches": [
      "*://localhost/*",
      "https://jirametrics.pro/*"
    ]
  },
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "static/js/*",
        "static/css/*",
        "public/*",
        "board-selector.*",
        "assets/*"
      ],
      "use_dynamic_url": false
    }
  ]
}

by ✦ Astarte

Jira Metrics Plugin - Analytics & Insights

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (53 total):

Raw Manifest

Detections

Manifest Findings