Downloads a .xpi file (0.05 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
6
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
5,986
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
C
Atlas gradeNot recommended
A+ABCC
because a zotero:// link (a web page can open one) can make it run code without asking you (from zotero-plugin-toolkit)
Next rung: B, once nothing in the code is a serious concern.
Applies to v0.11.0, released 11 Mar 2024Code checked · not yet tested in a live Zotero
Doesn't work with the current Zotero (10)Works with Zotero 7.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code; not yet checked against the published sourceThe developer uploaded the release file from the jyjulianwong account. We haven't yet checked whether this file matches the public source code.UnknownWe couldn't check this yet.
Updates
Updates come from this project's GitHub repositoryThe update address is broken (nothing is there), so Zotero can't update it
Where your data goesContacts a server we couldn't identify: 34.73.167.1641 address in 1 group.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Not identified (1)
34.73.167.164
Where we found it
34.73.167.164chrome/content/scripts/index.js · line 5453
"http://34.73.167.164:8080"
Powerful capabilitiesA zotero:// link (a web page can open one) can make it run code without asking you, and 1 moreHighHigh concern: a serious problem. One high finding makes the grade C.
A zotero:// link (a web page can open one) can make it run code without asking you (from zotero-plugin-toolkit)highHigh concern: a serious problem.Sends your text or keys unencrypted (http://) to 34.73.167.164mediumMedium concern: worth reading before you install.
Where we found it
A zotero:// link (a web page can open one) can make it run code with…chrome/content/scripts/index.js · line 148
Sends your text or keys unencrypted (http://) to 34.73.167.164chrome/content/scripts/index.js · line 5596
Anyone on the network in between can read it
window.fetch(apiUrl, {
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7 · not 9, 10, 11 betaDoesn't work with the current Zotero (10)MediumMedium concern: worth reading before you install. One medium finding makes the grade B.