Chrome Web Store

58Versions

0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

What our analysis found

Gitako - GitHub file tree, used by 10,000 people, is not yet reviewed by Extension Auditor. Its permissions mean it can inject scripts into pages. It comes from a publisher with 2 extensions and was last updated in October 2026.

Gitako - GitHub file tree Chrome extension security report

ID: giljefjcheohhamkjphiebfjnlphnokk

Supported Languages

🇺🇸US English

Extension Info & Metadata

Status

Active

Version

3.16.1

Size

1.86 MB

Rating

4.0/5

Reviews

Users

10,000

Type

Extension

Updated

Oct 21, 2026

Publisher Contextual Analysis

Author: EnixCoda
Privacy: Privacy Policy
Help: Help Center
MX records exist: Yes
Domain exists: Yes
Is disposable: No
Is role-based: No
Mailbox exists: Yes
Website: Visit

Extensions

Active

Obsolete

Listed

Unlisted

Users

15,000

Screenshots & videos

Install growth

User Growth

Showing data from Sep 10, 2023 to Sep 08, 2024

Versions

-10%(-1,000 users)

Compared to 3 months ago

4 versions released in this period

Rating Count

Total: 76 ratings

Average Rating

Current: 4.92 / 5.0+0.01

See plans

React Flow

Permhash (Mandiant)`917695ba13…`
1 malicious

10 other extensions carry this fingerprint; 1 of the cluster are known malicious.

Withheldmalicious
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
Withheldnot flagged
+3 more

Item	Type	Severity	Description
scripting	Permission	Critical	This permission allows injection and execution of JavaScript on any webpage. Rated Critical because it can modify page content, steal sensitive data, and inject malicious code into any site the extension has access to.
Contextual Risk Factors	Risk Factor	High	The following context increases the overall risk: • 19% increase: Access to sensitive domains increases potential impact
storage	Permission	Medium	This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
activeTab	Permission	Medium	This permission grants temporary access to the current tab. Rated Medium because it can access current page content when invoked, though limited to user-initiated actions.
://.github.com/*	Host	Medium	Host permission — access limited to this URL pattern.
://gitako.enix.one/	Host	Medium	Host permission — access limited to this URL pattern.
://.sentry.io/*	Host	Medium	Host permission — access limited to this URL pattern.
Access to Sensitive Domains	Risk Factor	Medium	This extension requests access to sensitive domains: ://.github.com/*
contextMenus	Permission	Low	This permission adds items to browser context menus. Rated Medium because it only modifies right-click menus without access to page content.

Sensitive Domain Access

This extension has access to the following sensitive domains:

*://*.github.com/*

About this extension

File tree for GitHub, and more than that.

Read the publisher’s full description

Features - 📂 File tree for repository, commits, and pull requests - 🔎 Instant file search and navigation - 🕶️ Support private repositories - 🧩 Support GitHub enterprise, Gitea, Gitee, and more - 🏎 Always performant, even in gigantic projects - ⌨️ Intuitive keyboard navigation - 📋 Copy snippets and file content - 🎨 Various icons and official themes support - 🗂 Support git submodule - 📏 Fold source code NO BS POLICY: Gitako doesn't share about your privacy data at all. GitHub access tokens are required only when you access private repositories or exceed GitHub API rate limit. Gitako stores access tokens in your chrome extension storage (not the LocalStorage) and uses them only when authenticate with GitHub.

User reviews

5.0 out of 5 · 10 most recent reviews

Text reviews

Positive

Negative

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

No network indicators were extracted from this version.

Version	Size	Verdict	Findings	Permhash
3.16.1 Latest	1.86 MB	Not scanned	—	917695ba1313cb18190fae79156a5d110b10d84b2364bd6e4e691598bd805c23
3.16.0	1.86 MB	Not scanned	—	917695ba1313cb18190fae79156a5d110b10d84b2364bd6e4e691598bd805c23
3.15.4	1.86 MB	Not scanned	—	917695ba1313cb18190fae79156a5d110b10d84b2364bd6e4e691598bd805c23
3.15.3	1.86 MB	Not scanned	—	917695ba1313cb18190fae79156a5d110b10d84b2364bd6e4e691598bd805c23
3.15.2	1.86 MB	Not scanned	—	917695ba1313cb18190fae79156a5d110b10d84b2364bd6e4e691598bd805c23
3.15.1	1.86 MB	Not scanned	—	917695ba1313cb18190fae79156a5d110b10d84b2364bd6e4e691598bd805c23
3.15.0	1.86 MB	Not scanned	—	b4c990124e2583d3174e809fc27fc233cf2f63f37f559e33dc096d361c04f5b0
3.14.0	1.86 MB	Not scanned	—	917695ba1313cb18190fae79156a5d110b10d84b2364bd6e4e691598bd805c23
3.12.1	2.12 MB	Not scanned	—	b4c990124e2583d3174e809fc27fc233cf2f63f37f559e33dc096d361c04f5b0
3.12.0	1.96 MB	Not scanned	—	b4c990124e2583d3174e809fc27fc233cf2f63f37f559e33dc096d361c04f5b0

Showing 1 to 10 of 60 rows

Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

Popular in productivity/developer

CryptoPro Extension for CAdES Browser Plug-in10,000,000 users
EditThisCookie2,000,000 users
netPlus: бесперебойный доступ к сайтам!1,151,142 users
Postman800,000 users
SaveProtect: Просто доступ к сайтам!773,305 users

Not reviewed

What our analysis found