Unverified Publisher
Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.
Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.
Flags items that disclose collecting authentication information, including passwords, credentials, or PINs, which may lead to account breaches or unauthorized access.
Flags items that are not maintained on the marketplace, suggesting concerns about the item's reputation and the publisher's reliability.
AI-powered analysis of the extension's source code for security insights and risk assessment.
The OctoBranch Chrome extension is designed to enhance the GitHub user experience by displaying the latest commits from all branches of a GitHub repository. It integrates seamlessly with GitHub's native design, providing users with instant access to commit information.
Installation Event Listener: The code snippet provided sets up an event listener for the installation of the extension.
chrome.runtime.onInstalled.addListener(() => {
console.log("OctoBranch extension installed.");
});
chrome.runtime.onInstalled API to handle the installation event.The provided code snippet is a basic setup for the OctoBranch Chrome extension, focusing on logging a message upon installation. There are no indications of malicious behavior or intent in the current code.
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
Known vulnerabilities and security issues detected in the extension's dependencies and code.
Any identifiers we detected that may indicate external communication from the item's code
Dependencies and third-party libraries used by the extension, including version information and license details.
Compliance status and certifications for the extension and its publisher