crx-permission-risk 0.1.0

crx-permission-risk classifies the permissions declared in a Chrome or Chromium extension manifest into risk tiers, with a plain-English rationale for each one. Two permissions that read similarly in a manifest can differ a great deal in what they expose. activeTab grants the current tab's DOM only after an explicit user gesture and then auto-revokes, while tabs reads the URL and title of every open tab continuously

Tags rust library security browser chrome
License MITL
State initial

Recent Releases

0.1.008 Aug 2026 16:56 minor feature: Initial release. Risk tiers and 0-100 scores for named permissions, breadth-based scoring of host match patterns, plain-English rationale strings, and a set score that takes the maximum rather than the average. 9 unit tests.