Extension Store Readiness Auditor 1.0.0
·
2 commits
to main
since this release
Initial public release.
- Audits unpacked and packaged browser extensions, including ZIP, XPI, and CRX inputs.
- Reports stable finding codes, severity, evidence, target stores, and package fingerprints.
- Checks Manifest V3 metadata, sensitive permissions, broad hosts, unsafe CSP and remote-code patterns, package debris, Firefox IDs, and icons.
- Enforces safe archive boundaries and supports Markdown or JSON output.
Verified across Windows, macOS, and Linux with Python 3.10 and 3.14. CodeQL and the isolated dependency audit passed.