Sonatype Nexus IQ Evaluation
Sonatype Nexus IQ Evaluation - Scan Open Source Repositories for known Vulnerabilities.
What is Sonatype Nexus IQ Evaluation?
Sonatype Nexus IQ Evaluation is a Chrome extension allowing users to inspect open source packages for security vulnerabilities before downloading them. It is designed to integrate with a valid Sonatype Nexus Lifecycle instance, allowing for detailed package analysis. The plugin supports multiple package managers across diverse platforms, enabling broad-spectrum inspection of risky open source repositories.
Extension stats
Rating: 5.00
(4)
Creation date: 2020-05-27
Manifest version: 2
Permissions:
- activeTab
- declarativeContent
- cookies
- background
- storage
- https://pkgs.alpinelinux.org/
- https://anaconda.org/anaconda/
- https://community.chocolatey.org/
- https://clojars.org/
- https://cocoapods.org/ See more
Size: 2.40M
Email: co*****@sonatype.com
URLs: Website ,Privacy policy
Ranking
Other platforms
Not available on Firefox
Not available on Edge
Want to check extension ranking and stats more quickly for other Chrome extensions?
Install
Chrome-Stats extension
to view Chrome-Stats data as you browse the Chrome Web Store.
Extension summary
This Chrome Extension works with Sonatype Nexus Lifecycle to inspect an OSS package before you download it. The plugin requires a valid Sonatype Nexus Lifecycle instance. You will be prompted to connect to your Sonatype Nexus IQ Server during setup. Note: Supported by Sonatype.
The extension works with the following package managers and their websites.
- .Net – NuGet – https://www.nuget.org/
- Alpine – Linux – https://pkgs.alpinelinux.org/
- Chocolatey – Windows – https://community.chocolatey.org/
- Clojars – Clojure – https://clojars.org/
- CocoaPods – iOS – https://cocoapods.org/
- Conan – C/C++ – https://conan.io/center/
- Conda – Python – https://anaconda.org/anaconda/
- Debian – Linux – https://packages.debian.org/
- Debian – Linux – https://tracker.debian.org/pkg/
- GitHub – releases – https://github.com/*/releases/tag/*
- Golang – Go – https://pkg.go.dev/
User reviews
A great tool for analyzing OSS components on the web for high-risk security vulnerabilities prior to downloading for use. Prevent mistakes early on in the SDLC by alerting on insecure packages before they are built in to application code.
by 
Neil Schloth, 2020-07-22
Neil Schloth, 2020-07-22Extension safety
Risk impact
Sonatype Nexus IQ Evaluation requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.
Risk likelihood
Sonatype Nexus IQ Evaluation has earned a fairly good reputation and likely can be trusted.
Upgrade to see risk analysis details
Promo images
Similar extensions
Here are some Chrome extensions that are similar to Sonatype Nexus IQ Evaluation:
Gainsight
1.80 10,000+
Unknown
5.00 94
Vivun Inc.
5.00 2,000+
Unknown
5.00 305
seanmysell
3.40 86
City Technology Training
5.00 8
Unknown
N/A 11
https://www.cyberciti.biz
N/A 155
https://sonatype-nexus-community.github.io/sonatype-platform-browser-extension
5.00 2,000+
[email protected]
3.00 94
etokenapp
N/A 42
https://wingu.se
N/A 27