Sonatype Nexus IQ Evaluation CRX
1.10.0
sonatype-nexus-community.github.io/nexus-iq-chrome-extension

Sonatype Nexus IQ Evaluation - Scan Open Source Repositories for known Vulnerabilities.

Latest Version

Version
1.10.0
Update
July 13, 2023
Size
2.29MiB
Developer
sonatype-nexus-community.github.io/nexus-iq-chrome-extension
Category
Users
930
Rating
5 ★
Manifest Version
2
Web Store Status
Languages Support
English
See more
Permissions
ActiveTab
DeclarativeContent
Cookies
Background
Storage
Https://pkgs.alpinelinux.org/
Https://anaconda.org/anaconda/
Https://community.chocolatey.org/
Https://clojars.org/
Https://cocoapods.org/
Https://cran.r-project.org/
Https://crates.io/
Https://packages.debian.org/
Https://github.com/
Https://mvnrepository.com/
Https://www.npmjs.com/
Https://www.nuget.org/
Https://ossindex.sonatype.org/
Https://packagist.org/
Https://pypi.org/
Https://repo1.maven.org/
Https://repo.maven.apache.org/
Https://rpmfind.net/linux/RPM/epel/
Https://rubygems.org/
Https://pkg.go.dev/
Https://search.maven.org/
Https://repo.spring.io/list/
Https://conan.io/center/
Https://tracker.debian.org/pkg/
See more

Sonatype Nexus IQ Evaluation Extension

This Chrome Extension works with Sonatype Nexus Lifecycle to inspect an OSS package before you download it. The plugin requires a valid Sonatype Nexus Lifecycle instance. You will be prompted to connect to your Sonatype Nexus IQ Server during setup. Note: Supported by Sonatype.

The extension works with the following package managers and their websites.

1. .Net – NuGet – https://www.nuget.org/
2. Alpine – Linux – https://pkgs.alpinelinux.org/
3. Chocolatey – Windows – https://community.chocolatey.org/
4. Clojars – Clojure – https://clojars.org/
5. CocoaPods – iOS – https://cocoapods.org/
6. Conan – C/C++ – https://conan.io/center/
7. Conda – Python – https://anaconda.org/anaconda/
8. Debian – Linux – https://packages.debian.org/
9. Debian – Linux – https://tracker.debian.org/pkg/
10. GitHub – releases – https://github.com/*/releases/tag/*
11. Golang – Go – https://pkg.go.dev/
12. Java – Maven – https://mvnrepository.com/
13. Java – Maven – https://repo.maven.apache.org/
14. Java – Maven – https://repo.spring.io/list/
15. Java – Maven – https://repo1.maven.org/
16. Java – Maven – https://search.maven.org/
17. JavaScript/Node – npm – https://www.npmjs.com/
18. PHP – Packagist/composer – https://packagist.org/
19. Python – PyPI – https://pypi.org/
20. R – CRAN – https://cran.r–project.org/
21. Ruby – RubyGems – https://rubygems.org/
22. Rust – Crates – https://crates.io/
23. Nexus Proxy Repos – supported repository formats are maven2, npm, rubygems and nuget e.g. http://nexus:8081/#browse/browse:maven–central:commons–collections%2Fcommons–collections%2F3.2.1
24. Artifactory Proxy Repos – supported repository formats are maven2 and npm e.g. https://artifactory-server/webapp/#/artifacts/browse/tree/General/npmjs–cache/parseurl/–/parseurl–1.0.1.tgz
25. Artifactory Repo lists – e.g. https://repo.spring.io/list/jcenter–cache/org/cloudfoundry/cf–maven–plugin/1.1.3/
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Sonatype Nexus IQ Evaluation", "description": "Sonatype Nexus IQ Evaluation - Scan Open Source Repositories for known Vulnerabilities.", "author": "Cameron Townshend - [email protected]", "version": "1.10.0", "manifest_version": 2, "content_security_policy": "default-src 'none'; script-src 'self'; object-src 'none'; connect-src *; style-src 'self' data: 'unsafe-inline'; form-action 'none'; frame-ancestors 'none'; frame-src 'none'; sandbox allow-popups allow-same-origin allow-scripts;", "optional_permissions": [ "*://*/*", "tabs", "notifications" ], "permissions": [ "activeTab", "declarativeContent", "cookies", "background", "storage", "https://pkgs.alpinelinux.org/", "https://anaconda.org/anaconda/", "https://community.chocolatey.org/", "https://clojars.org/", "https://cocoapods.org/", "https://cran.r-project.org/", "https://crates.io/", "https://packages.debian.org/", "https://github.com/", "https://mvnrepository.com/", "https://www.npmjs.com/", "https://www.nuget.org/", "https://ossindex.sonatype.org/", "https://packagist.org/", "https://pypi.org/", "https://repo1.maven.org/", "https://repo.maven.apache.org/", "https://rpmfind.net/linux/RPM/epel/", "https://rubygems.org/", "https://pkg.go.dev/", "https://search.maven.org/", "https://repo.spring.io/list/", "https://conan.io/center/", "https://tracker.debian.org/pkg/" ], "content_scripts": [ { "matches": [ "https://pkgs.alpinelinux.org/package/*", "https://anaconda.org/anaconda/*", "https://community.chocolatey.org/packages/*", "https://clojars.org/*", "https://cocoapods.org/*", "https://conan.io/center/*", "https://cran.r-project.org/*", "https://crates.io/*", "https://packages.debian.org/*", "https://tracker.debian.org/pkg/*", "https://github.com/*/releases/tag/*", "https://mvnrepository.com/*", "https://www.npmjs.com/*", "https://www.nuget.org/*", "https://ossindex.sonatype.org/*", "https://packagist.org/*", "https://pypi.org/*", "https://repo1.maven.org/*", "https://repo.maven.apache.org/*", "https://repo.spring.io/list/*", "https://rpmfind.net/linux/RPM/epel/*", "https://rubygems.org/*", "https://pkg.go.dev/*", "https://search.maven.org/*" ], "css": [ "css/pagestyle.css" ], "js": [ "Scripts/lib/jquery.min.js", "Scripts/utils.js", "Scripts/content.js" ], "run_at": "document_end" } ], "web_accessible_resources": [ "images/*" ], "background": { "page": "html/background.html" }, "page_action": { "default_popup": "html/popup.html", "default_icon": { "16": "images/SON_logo_favicon.png", "32": "images/SON_logo_favicon.png", "48": "images/SON_logo_favicon.png", "128": "images/SON_logo_favicon.png" } }, "icons": { "16": "images/SON_logo_favicon.png", "32": "images/SON_logo_favicon.png", "48": "images/SON_logo_favicon.png", "128": "images/SON_logo_favicon.png" }, "options_ui": { "page": "html/options.html?ver=1.9.8", "open_in_tab": true }}
Read more

Similar Extensions

User reviews

icon

Neil Schloth (ID: 0000008899571ce0) Voted 5 ★ - Updated 07/22/2020 A great tool for analyzing OSS components on the web for high-risk security vulnerabilities prior to downloading for use. Prevent mistakes early on in the SDLC by alerting on insecure packages before they are built in to application code.