Zenhub – Project Management Inside GitHub
Flags items where the publisher's email address has been found in known data breaches. This indicates potential security risks as compromised email accounts could be used for unauthorized access or malicious publishing.
Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.
Flags publishers lacking installs on the marketplace, suggesting concerns about the publisher's reliability.
AI-powered analysis of the extension's source code for security insights and risk assessment.
This Chrome extension script is part of ZenHub for GitHub Enterprise, designed to enhance project management inside GitHub. It handles OAuth authentication flows, manages browser tabs and windows, executes background network requests using fetch, and tracks GitHub tab URL changes to notify content scripts of navigation events. Key API usages include chrome.tabs (query, create, remove), chrome.windows.create, chrome.scripting.executeScript, chrome.storage (sync and local), chrome.runtime messaging and connection listeners, and fetch for network requests. The script also manages OAuth success notifications to connected ports and redirects users to a thank-you page upon installation (non-enterprise). It does not perform any file system operations, registry access, shell or PowerShell execution, or clipboard access.
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
Known vulnerabilities and security issues detected in the extension's dependencies and code.
Any identifiers we detected that may indicate external communication from the item's code
Dependencies and third-party libraries used by the extension, including version information and license details.
