Sonatype Platform Browser Extension

Shift Security Left with the Sonatype Platform Browser Extension - Scan Open Source Repositories for known Vulnerabilities.

Sonatype Platform Browser Extension - Scan Open Source Repositories

Sonatype Platform Browser Extension is a Chromium browser extension that works with the Sonatype Platform to empower Developers to make better choices earlier in the Software Development Lifecycle. Connect to your Organization's Sonatype Lifecycle Server and get instant risk insight while browsing public Open Source Registries.

Download

Extension stats

By: https://sonatype-nexus-community.github.io/sonatype-platform-browser-extension

Users: 2,000+

Rating: 5.00

(12)

Version: 2.21.0 (Last updated: 2024-11-26)

Creation date: 2023-07-10

Permissions:

activeTab
declarativeContent
background
scripting
storage
tabs

Size: 5.33M

Email: co*****@sonatype.com

URLs: Website ,Privacy policy

Full description: See detailed description

Ranking

# 19,404 ▼ 8

Other rankings

#3141 in Developer Tools ▲ 22 #19 in platform keyword 14 ▼ 3 #79 in community keyword 8 #165 in browser extension keyword 75 ▼ 14 #245 in browser keyword 87 ▼ 5

Other platforms

Not available on Android

Not available on Firefox

Not available on Edge

User reviews

These summaries are automatically generated weekly using AI based on recent user reviews. Chrome Web Store does not verify user reviews, so some user reviews may be inaccurate, spammy, or outdated.

Pros

Helps identify high-risk security vulnerabilities in OSS components before downloading
Provides insights into security and legal implications of components
Facilitates early decision-making in the software development lifecycle (SDLC)
Useful for researching open source components being considered for applications

Cons

Most mentioned

Useful plugin for analyzing OSS components
Prevents mistakes early in the SDLC
Supports shifting left approach in development

User reviews

I use this all the time. As developers are initially considering which component to use in their application, they get information while looking at the component in the OSS repository without doing anything. Awesome for shifting left selecting the best component rather than remediating downstream!

Chris Wolters, 2024-05-09

A great tool for analyzing OSS components on the web for high-risk security vulnerabilities prior to downloading for use. Prevent mistakes early on in the SDLC by alerting on insecure packages before they are built in to application code.

Neil Schloth, 2023-08-16

The ultimate in shifting left!

Ben Hartley, 2023-07-14

View all user reviews

Extension safety

Risk impact

Sonatype Platform Browser Extension requires a few sensitive permissions. Exercise caution before installing.

Risk impact analysis details

Critical Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
High ******* ******* **** *** ****** ***** *** ***** ** ******* **** ********* ********* ** * *********** *****
Low ******* ****** ** *** ********* ********

Risk likelihood

We don't have sufficient data to confidently determine the risk likelihood of Sonatype Platform Browser Extension. Use it at your own risk.

Risk likelihood analysis details

High This extension has low user count. Unpopular extensions may not be stable or safe.
Low **** ********* *** ******* **** **** * ****** **** ***** ******** *** **** ****** ** ** ****** *** *****
Low **** ********* *** ***** **** **** * ****** **** ***** ********** *** **** ****** ** ** ****** *** *****
Good **** ********* *** **** **** *******

Upgrade to see full risk analysis details