npm lookup

Version 2.0.0 View in Chrome Web Store

Last scanned: 4 days ago | force re-scan

Extension Details

Rating: 5.0 ★ (2 ratings)

Size: 7.16MiB

Last Updated: January 25, 2016

Users: 33

Context-Aware Verdict

MEDIUM

Risk Level

Trust Factors:

- The extension has a relatively small user base (33 users), which could indicate a lack of widespread adoption or vetting.

- The developer information is not provided, making it difficult to assess the reputation or trustworthiness of the extension's creator.

- The extension has not been updated since 2016, which raises concerns about its compatibility with modern browsers and potential security vulnerabilities.

Concerns:

- The "contextMenus" permission allows the extension to add items to the context menu, which could potentially be used for malicious purposes, such as injecting unwanted content or redirecting users to malicious websites.

- The use of Manifest Version 2 indicates that the extension may not have the latest security features and restrictions implemented in Manifest Version 3.

Recommendations:

- Exercise caution when installing and using this extension, as the lack of developer information and the small user base make it difficult to assess its trustworthiness.

- Consider using alternative extensions from reputable developers with a larger user base and more frequent updates.

- If you decide to use this extension, it is recommended to run it in a separate Chrome profile or a sandboxed environment to minimize potential risks.

- Monitor the extension's behavior and uninstall it immediately if you notice any suspicious activities or unwanted changes to your browsing experience.

Security Analysis

MEDIUM

Overall Risk

Based on 2 total findings, ranked without considering overall context, including 0 high-risk and 2 medium-risk findings.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

contextMenus

Embedded URLs (4639 total):

https://clients2.google.com/service/update2/crx	https://github.com/radiovisual/github-npm-lookup
https://www.npmjs.com/package/	https://developer.mozilla.org/en-US/docs/SpiderMonkey/Parser_API
http://marijnhaverbeke.nl/git/acorn	https://github.com/marijnh/acorn.git
https://github.com/marijnh/acorn/issues	http://en.wikipedia.org/wiki/ANSI_escape_code#graphics
http://msdn.microsoft.com/en-us/library/ie/dww52sbt	http://en.wikipedia.org/wiki/Operator-precedence_parser
https://bugzilla.mozilla.org/show_bug.cgi?id=745678	https://github.com/mozilla/sweet.js/wiki/design
https://registry.npmjs.org/acorn/-/acorn-1.2.2.tgz	http://registry.npmjs.org/acorn/-/acorn-1.2.2.tgz
https://github.com/marijnh/acorn	https://travis-ci.org/marijnh/acorn.svg?branch=master
https://travis-ci.org/marijnh/acorn	https://img.shields.io/npm/v/acorn.svg
https://www.npmjs.org/package/acorn	https://marijnhaverbeke.nl/fund/status_s.png?force
https://marijnhaverbeke.nl/fund/	http://npmjs.org
https://github.com/Constellation/escodegen	http://www.html5rocks.com/en/tutorials/security/content-security-policy/#eval-too
https://github.com/marijnh/acorn/issues/90	https://github.com/marijnh/acorn/issues/123
http://browserify.org	http://babeljs.io/
https://github.com/marijnh/acorn/tree/jsx	https://registry.npmjs.org/acorn-to-esprima/-/acorn-to-esprima-1.0.7.tgz
https://github.com/babel/acorn-to-esprima/issues	http://registry.npmjs.org/acorn-to-esprima/-/acorn-to-esprima-1.0.7.tgz
https://github.com/babel/acorn-to-esprima#readme	https://github.com/babel/acorn-to-esprima.git
https://github.com/babel/babel-eslint	https://github.com/jscs-dev/babel-jscs
https://github.com/fkling/esprima_ast_explorer	https://github.com/babel/babel-eslint/blob/master/index.js
https://github.com/jonschlinkert/align-text	https://registry.npmjs.org/align-text/-/align-text-0.1.3.tgz
https://github.com/jonschlinkert	https://github.com/jonschlinkert/align-text/issues
http://registry.npmjs.org/align-text/-/align-text-0.1.3.tgz	https://badge.fury.io/js/align-text.svg
http://badge.fury.io/js/align-text	https://travis-ci.org/jonschlinkert/align-text.svg
https://travis-ci.org/jonschlinkert/align-text	https://cloud.githubusercontent.com/assets/383994/8051597/7b716fbc-0e4c-11e5-9aef-4493fd22db58.png
https://www.npmjs.com/	https://github.com/jonschlinkert/center-align
https://github.com/bahamas10/node-justify	https://github.com/jonschlinkert/longest
https://github.com/jonschlinkert/right-align	https://github.com/jonschlinkert/repeat-string
https://github.com/jonschlinkert/word-wrap	https://github.com/jonschlinkert/align-text/issues/new
http://twitter.com/jonschlinkert	https://github.com/assemble/verb-cli
https://registry.npmjs.org/alter/-/alter-0.2.0.tgz	http://registry.npmjs.org/alter/-/alter-0.2.0.tgz
https://github.com/olov/alter.git	http://github.com/jrburke/amdefine
https://registry.npmjs.org/amdefine/-/amdefine-1.0.0.tgz	http://github.com/jrburke
https://github.com/jrburke/amdefine/issues	http://registry.npmjs.org/amdefine/-/amdefine-1.0.0.tgz
https://github.com/jrburke/amdefine.git	https://github.com/jrburke/amdefine/raw/latest/amdefine.js
http://requirejs.org/docs/optimization.html	http://requirejs.org/docs/api.html#text
https://github.com/jrburke/require-cs	https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.1.0.tgz
https://github.com/sindresorhus/ansi-escapes/issues	http://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.1.0.tgz
https://github.com/sindresorhus/ansi-escapes	https://travis-ci.org/sindresorhus/ansi-escapes.svg?branch=master
https://travis-ci.org/sindresorhus/ansi-escapes	http://www.termsys.demon.co.uk/vtansi.htm
https://github.com/chalk/ansi-styles	http://sindresorhus.com

Page 1 of 58

Raw Manifest

{
  "name": "npm lookup",
  "icons": {
    "128": "media/icon.png"
  },
  "version": "2.0.0",
  "background": {
    "scripts": [
      "menu.js"
    ]
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Turn selected text on a webpage into an npm package lookup",
  "permissions": [
    "contextMenus"
  ],
  "homepage_url": "https://github.com/radiovisual/github-npm-lookup",
  "manifest_version": 2,
  "minimum_chrome_version": "38"
}

npm lookup

Extension Details

Context-Aware Verdict

Security Analysis

Security Analysis Details

Required Permissions:

Embedded URLs (4639 total):

Raw Manifest

Secure Annex (beta)