Removed from Marketplace
Flags items that have been removed or delisted from the marketplace, potentially due to security vulnerabilities, or malicious behavior. Such extensions pose a risk as they are no longer maintained or patched.
high
Findings
Unverified Publisher
Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.
medium
Unmaintained Item
Flags items that are not maintained on the marketplace, suggesting concerns about the item's reputation and the publisher's reliability.
low
All findings are available for Enterprise users
Code analysis
AI-powered analysis of the extension's source code for security insights and risk assessment.
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
CODE INSIGHTS ARE AVAILABLE FOR ENTERPRISE USERS
Permissions
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
PERMISSIONS ARE AVAILABLE FOR ENTERPRISE USERS
API Calls
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
API CALLS ARE AVAILABLE FOR ENTERPRISE USERS
Secrets
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
SECRETS ARE AVAILABLE FOR ENTERPRISE USERS
Vulnerabilities
Known vulnerabilities and security issues detected in the extension's dependencies and code.
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
VULNERABILITIES ARE AVAILABLE FOR ENTERPRISE USERS
External communication
Any identifiers we detected that may indicate external communication from the item's code
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
EXTERNAL COMMUNICATIONS ARE AVAILABLE FOR ENTERPRISE USERS
Dependencies
Dependencies and third-party libraries used by the extension, including version information and license details.
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
DEPENDENCIES ARE AVAILABLE FOR ENTERPRISE USERS
Licenses & Compliance
Compliance
Compliance status and certifications for the extension and its publisher
Gmail
Gmail is compliant with GDPR, as indicated by its commitment in contracts regarding the processing of customer personal data in accordance with GDPR regulations. Additionally, Google's status as a parent company supports this compliance, confirmed by certifications such as ISO 27017 for Google Cloud and workplace services.
Compliant
Google LLC
Gmail, which is part of Google LLC, is stated to be ISO/IEC 27001:2022 certified along with its services such as Google Cloud Platform and Google Workspace. The parent company, Alphabet Inc., also benefits from this compliance as it oversees Google LLC.
Compliant
Gmail
Gmail, as a service of Google, is PCI DSS compliant. Google's PCI DSS certification meets the PCI DSS 4.0 compliance standard, assuring that they provide secure handling of cardholder information.
Compliant
Licenses
No license text available...