DAP Detector Chrome extension security report

DAP Detector is a lightweight Manifest V3 Chrome extension that instantly tells you whether the current page includes the official GSA Digital Analytics Program (DAP) Google Analytics snippet — and, when present, displays the agency, subagency, and other key parameters. Under OMB Memorandum M-23-22, every public-facing federal website must participate in DAP. This extension makes verification fast and reliable for auditors, developers, agency staff, and anyone who needs to confirm compliance. Key features Color-coded toolbar badge (green = DAP found, red = not present, gray = checking or restricted page) Hover tooltip shows agency / subagency without opening the popup Instant DOM scan plus MutationObserver support for scripts injected by GTM or SPAs Full script src URL, extra parameters (sitetopic, siteplatform, etc.), and GA4 ID (pga4) Warning when dapdev is active (hits go to the test property, not production analytics.usa.gov) Flag for missing async attribute (render-blocking risk) Detects multiple DAP tags and locally hosted copies SPA-aware re-scanning via chrome.webNavigation (no history monkey-patching) One-click copy of the full DAP script URL Privacy & security Pure vanilla JavaScript — zero external dependencies No network requests, no data collection, no analytics of its own Everything stays local to your browser session Full privacy policy included Perfect for federal website audits, developer testing, and day-to-day compliance checks. Simply pin the extension and browse — the badge updates automatically on every tab. Source code, tests, and documentation are available on GitHub under the MIT license.