Zotero Plugins Atlas
Plugins

Chartero

by volatile-static · github.com/volatile-static/Chartero

Records which pages you read and for how long, then charts it: per-item dashboards, a library overview, a progress column, a scrollbar minimap of read pages and annotations, and a sidebar of every image in the PDF.

View source
Downloads a .xpi file (0.7 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
518
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
872,479
ContributorsPeople who have committed code to the repository.
3
LicenceThe licence the code is published under, as GitHub reports it.
Apache-2.0
B
Atlas gradeUse with care
because it contacts a server we couldn't identify: img.shields.io, and 2 more findings
Applies to v2.11.0, released 22 Apr 2026Code checked · in Zotero 10.0.3 on 27 Sep 2026 it did something its card didn't describe
Another plugin uses the same ID2 other plugins share this add-on ID. Zotero can only install one of them.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyMinified (compressed) code, uploaded by the project's automated GitHub buildThe release file was uploaded by the project's automated GitHub build. We haven't yet rebuilt it from the source to compare.LowLow concern: normal for plugins that do this job. Listed so you know.
Updates
Updates come from const_volatile/chartero on GiteeThe update address offers version 2.11.0, which isn't newer than this one, so Zotero won't update it for now
Where your data goesContacts a server we couldn't identify: img.shields.io4 addresses in 3 groups.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Not identified (1)
img.shields.ioseen when we ran itIt contacted this address when we ran it in Zotero.
Apps you connect (2)
export-svg.highcharts.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.sheets.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Code hosting (1)
gitee.comseen when we ran itIt contacted this address when we ran it in Zotero.
Powerful capabilitiesA zotero:// link (a web page can open one) can make it install add-ons without asking you, and 5 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Uses the clipboardlowLow concern.Stores API keys or passwordslowLow concern.Runs code it assembles while runninglowLow concern.Works with files on your computerlowLow concern.
Where we found it
A zotero:// link (a web page can open one) can make it install add-o…content/assets/_plugin-vue_export-helper-yg0pbrYI.js · line 239

zotero://plugin

.`)}}catch(a){i.logError(a),c0(a.message,!1)}},newChannel(o){this.doAction(o)}};Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://plugin"]=n}}function c0(t,e){const i=new
A zotero:// link can make it run code if you approve a promptcontent/assets/_plugin-vue_export-helper-yg0pbrYI.js · line 239

zotero://ztoolkit-debug

ow:o})}catch(d){n.debug(d),o.console.log(d)}}},newChannel(i){this.doAction(i)}};Services.io.getProtocolHandler("zotero").wrappedJSObject._extensions["zotero://ztoolkit-debug"]=e}}class Vd{static versi
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 9, 10 · not 11 betaUpdates automatically
Zotero 9 ✓ worksZotero 10 ✓ worksZotero 11 beta ✗ doesn't work
What you'll needNothing extra detectedDetected automatically from its code
No further detail for this area yet.
MaintenanceActive · last release 22 Apr 20263 contributors
No further detail for this area yet.
LanguagesDocumentation in EnglishInterface: English, Italian, Japanese and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Written by AI from the README

Records which pages you read and for how long, then charts it: per-item dashboards, a library overview, a progress column, a scrollbar minimap of read pages and annotations, and a sidebar of every image in the PDF.

Zotero doesn't track reading at all. Chartero shows what you've actually read and where your time went.

What you'll need

Detected automatically

We haven't detected any setup requirements. That isn't the same as none: check the developer's README.

Where your data goes

We found: contacts a server we couldn't identify: img.shields.io. 4 addresses in 3 groups.

Not identified (1)
img.shields.ioseen when we ran it
Apps you connect (2)
export-svg.highcharts.comnamed in its codesheets.googleapis.comnamed in its code
Code hosting (1)
gitee.comseen when we ran it

Forks and alternatives

2 other plugins use the same ID as this one. Every Zotero plugin carries an ID, a name tag Zotero uses to tell plugins apart. These 3 plugins carry the same one, because people copied Chartero to make their own versions and kept its ID.Show what this means
  • You can only have one. Zotero sees them as the same plugin.
  • Installing another replaces it. If you install one of the others, it takes this one's place.
  • Check what you install. Several share this plugin's name, so make sure the file comes from the one you meant.
Chartero · this pluginvolatile-static/CharteroBUse with care872,47922 Apr 2026
See all 3 and how they differ →

3 listed forks.

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer
Install Chartero
BUse with care
Before you install: It contacts a server we couldn't identify: img.shields.io, and 2 more findings.Read the finding