Broad Host Permissions

Flags items that declare overly broad host access patterns, enabling interaction with all websites. This level of access can be exploited to inject scripts into trusted sites and increases the risk of sensitive data exposure, cross-site surveillance, and credential harvesting.

Collection of Authentication Information

Flags items that disclose collecting authentication information, including passwords, credentials, or PINs, which may lead to account breaches or unauthorized access.

Unverified Publisher

Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.

Storage API

Enables persistent data storage for the extension, potentially storing large amounts of user-related information.

Active Tab API

Grants temporary access to the current tab's data when triggered by user interaction, limiting scope compared to permanent permissions.

API Calls

API calls are available for enterprise users.

Secrets

Secrets are available for enterprise users.

External Communications

axios
Version: 1.7.7
MIT

react-dom
Version: 18.3.1
MIT

react-dom
Version: 18.3.1-next-f1338f8080-20240426