Undisclosed Privacy Data Collection
Flags items that did not disclose what types of personal data they are collecting.
low
Findings
Unmaintained Item
Flags items that are not maintained on the marketplace, suggesting concerns about the item's reputation and the publisher's reliability.
low
Individual Publisher
Flags items published by individuals rather than verified companies or organizations, indicating potential risks due to limited accountability and unclear operational standards
low
All findings are available for Enterprise users
Code analysis
AI-powered analysis of the extension's source code for security insights and risk assessment.
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
CODE INSIGHTS ARE AVAILABLE FOR ENTERPRISE USERS
Permissions
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
PERMISSIONS ARE AVAILABLE FOR ENTERPRISE USERS
API Calls
API calls detected through static analysis of the source code. For more accurate insights, explore our sandbox dynamic analysis.
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
API CALLS ARE AVAILABLE FOR ENTERPRISE USERS
Secrets
Any encoded/decoded secrets we managed to find in the source code, git repository, or related files
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
SECRETS ARE AVAILABLE FOR ENTERPRISE USERS
Vulnerabilities
Known vulnerabilities and security issues detected in the extension's dependencies and code.
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
VULNERABILITIES ARE AVAILABLE FOR ENTERPRISE USERS
External communication
Any identifiers we detected that may indicate external communication from the item's code
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
EXTERNAL COMMUNICATIONS ARE AVAILABLE FOR ENTERPRISE USERS
Dependencies
Dependencies and third-party libraries used by the extension, including version information and license details.
high
Enterprise Only
Enterprise Only
Enterprise Only
medium
Enterprise Only
Enterprise Only
Enterprise Only
low
Enterprise Only
Enterprise Only
Enterprise Only
DEPENDENCIES ARE AVAILABLE FOR ENTERPRISE USERS
Licenses & Compliance
Compliance
Compliance status and certifications for the extension and its publisher
Google
Google is ISO/IEC 27001:2022 compliant for its Google Cloud and Google Workspace services. Since Google is a subsidiary of Alphabet Inc., it is assumed that the parent company is also compliant as it operates under the same security standards.
Compliant
Google
Google is SOC2 compliant, as they have undergone regular third-party audits to certify their individual products against SOC 2 standards. Additionally, Alphabet Inc., as the parent company of Google, also aligns with the same compliance standards.
Compliant
Google LLC
The search results confirm that Google LLC is GDPR compliant and mentions that it has certifications like ISO/IEC 27018. Additionally, as Alphabet Inc. is Google's parent company, it is also confirmed that Alphabet Inc. is GDPR compliant.
Compliant
Licenses
No license text available...