Chrome Web Store
9Versions
0Code reviewed

Not reviewed

No code review on record

We have not reviewed this extension’s code, so we cannot vouch for it either way. Check the permissions below to decide whether it asks for more than it needs.

Want us to read this extension's code? Ask for a review and we'll queue it.

78 indicators in this extension

78 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

What our analysis found

Google Apps Script GitHub Assistant, used by 20,000 people, is not yet reviewed by Extension Auditor. It comes from a publisher with 2 extensions and was last updated in March 2025.

Google Apps Script GitHub Assistant

Google Apps Script GitHub Assistant Chrome extension security report

ID: lfjcgcmkmjjlieihflfhjopckgpelofo

Supported Languages

🇨🇳Chinese (Simplified)
🇺🇸English
🇫🇷French
🇯🇵Japanese
🇷🇺Russian

Extension Info & Metadata

Status
Active
Version
5.1.0
Size
0.15 MB
Rating
4.7/5
Reviews
100
Users
20,000
Type
Extension
Updated
Mar 12, 2025
Category
Developer tools
Price
Free
Featured
No
Visibility
Listed
Mature
No
By Google
No
Trusted
No
This publisherTrack record
2extensions
1 no longer listed

Publisher Contextual Analysis

Author
leonhartX
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
No
Mailbox exists
Yes
Website
Visit
Extensions
2
Active
1
Obsolete
1
Listed
2
Unlisted
0
Users
20,063

Screenshots & videos

Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Install growth

Item
Type
Severity
Description
identity
Permission
High
This permission accesses Chrome identity service and user information. Rated High because it can obtain OAuth tokens, access connected accounts, and impersonate the user in authenticated service.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 20% increase: Access to sensitive domains increases potential impact
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
https://script.google.com/*
Host
Medium
Host permission — access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: https://script.google.com/*

78 indicators in this extension

78 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe

About this extension

Manage your gas code with github/github enterprise/bitbucket/gitlab

Read the publisher’s full description

Manage your Google Apps Script code with your favorite scm(github/github enterprise/bitbucket). [IMPORTANT] The new version requires Google OAuth to call Apps Script API, before the OAuth app be verified by Google, it only allow to grant 100 users' permission, if you encounter some errors said can not grant permission to the app, please wait for the verification process completed, sorry for the inconvenience! If you can not wait, please try check out the code from https://github.com/leonhartX/gas-github and switch to v4.0.3, install the extension from source with "Load Unpacked" in the extension page, it can still work with the old IDE. Feature: - Push/Pull code between github and Google Apps Script - Sync your code to public/secret Gist - Works with "Embedded" scripts (Scripts that are bound to SHEETS, DOCS, and FORMS) - Create github repo, branch and file from Google App Script IDE - Show diff when pull/push - Support choose files to pull/push - Support commit comment when push - Support Github, Github Enterprise, Bitbucket and GitLab - Support two-factor authentication(only for Github and Github Enterprise) - Support directory(with slash in filename) - Support Github Organization, Bitbucket Team and GitLab Groups. - Google Apps Script native ui Attention: - The *Pull* is not work actually the same as Github, since Google Apps Script do not have revision info, the *Pull* will just fetch your code from github and OVERWRITE(not merge) to the project. Changelog 5.1.0 - support auto-completion in repo and branch list - adjust diff window size Changelog 5.0.6 - migrate to manifest v3 Changelog 5.0.5 - remove gitlab.com permission, fix some gitlab issue by @Hell-K Changelog 5.0.3 - remove unnecessary permission Changelog 5.0.2 - fix ignore file error Changelog 5.0.1 - improve log for new IDE - change extension icon Changelog 5.0.0 - [IMPORTANT] Use Google Apps Script API instead of internal RPC since it changed in new IDE, need to login with Google to work(currently the Google OAuth App is note verified yet, so there will be a warn page) - Support new GAS IDE(old IDE is not supported anymore) - Fix can not work with multi IDE tab in same browser Changelog 4.0.7 - Fix GitHub deprecation notification for using token in query parameter Changelog 4.0.6 - Use unicode icons - Highlight current repo Changelog 4.0.5 - Fix broken due to internal RPC update Changelog 4.0.4 - Fix broken due to internal RPC update Changelog 4.0.3 - Fix .gs pulled as .html Changelog 4.0.2 - Remove support for hosted GitLab Changelog 4.0.1 - Fix an undefined error when file not existed Changelog 4.0.0 - Add support for GitLab (the addition permission requested is for GitLab) Changelog 3.3.6 - Fix extension not work with AppsScript Color 1.0.1 Changelog 3.3.4 - Fix url issue in 3.3.3 Changelog 3.3.3 - Support corporate google apps account. Changelog 3.3.2 - Fix push/pull not work with embedded script. Changelog 3.3.1 - Fix GAS's PRC change. Changelog 3.3.0 - Support manifest file with a new config item. - Fix unexpected deletion when push to Github. Changelog 3.2.2 - Fix bitbucket connection error when there's too many repo. Changelog 3.2.1 - Bug fix. Changelog 3.2.0 - Add ignore file pattern option. Chaneglog 3.1.0 - Add an option to support change file type to sync(upload .gs file as .js). Changelog 3.0.3 - Fix login github with email not work. Changelog 3.0.2 - Fix dismiss link now work. Changelog 3.0.1 - Add relogin warn. Changelog 3.0.0 - Support bitbucket.org. - Show repo's full name (with user/organization) in dropdown list. - Support create repo under Github organization or Bitbucket team. - Fix create new branch from current branch. - Fix several minor bugs. Changelog 2.0.5 - Bug fix. Changelog 2.0.4 - Bug fix. Changelog 2.0.3 - Add star option when login. Changelog 2.0.2 - Fix delete files failed sometimes. Changelog 2.0.1 - Support create private repo from extension. Changelog 2.0.0 - Support file deleted and rename. Changelog 1.0.1 - Support use access token to login. Changelog 1.0.0 - Add Gist support. now you can sync your code to gist(public/secret). - To use gist, you must re-login to create a new access token which has the gist permission, or manually add gist scope in your current github access token. - Simple usage: select 'Using Gist' in repo dropdown list, and then select gist id in Gist dropdown list. Changelog 0.1.9 - make error message more clearly when try to create branch in empty repo Changelog 0.1.8 - change gwt call to newest version Changelog 0.1.7 - fix minor bugs Changelog 0.1.3 - change github scope to 'repo' to support private repo Changelog 0.1.2 - fix bug: follow Github API's Link header to get all repos/branches

User reviews

Extension files

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.

URLs
44
IPv4
1

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

No URLs found
No IP addresses found

78 indicators in this extension

78 indicators
0 versions analysed

Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.

Unlock this report — $4.99Start 7-day trial — all reports
One-time payment · Secure checkout by Stripe
Version
Size
Verdict
Findings
Permhash
5.0.5
Latest
0.14 MBNot scanned—
78f58cc0b28bb24d192ccf4f878ed8f343fb5ca0d5b768224aa90ed9cc75fa90
5.0.4
0.14 MBNot scanned—
4c851fdd7172d44092771530b5804ec97ba10f332805eeb41fdcb52f1d7d5424
5.0.3
0.14 MBNot scanned—
4c851fdd7172d44092771530b5804ec97ba10f332805eeb41fdcb52f1d7d5424
5.0.2
0.14 MBNot scanned—
8d16fb357944e12c01758ae23216f3dc79670255fa3732e7c26c860e7c440459
5.0.1
0.14 MBNot scanned—
8d16fb357944e12c01758ae23216f3dc79670255fa3732e7c26c860e7c440459
5.0.0
0.14 MBNot scanned—
4f8d39943b78020cd98134894c9d24f18385a4dc9880317c897950189ef55343
4.0.7
0.14 MBNot scanned—
c7f4e34e25c3f01c130e43548d88dbf4bacdfd56fe1c8ea5851ffd95eaa00ad5
5.1.0
0.15 MBNot scanned—
605321482106dcd04b25287dfd86f70be78d297436df237bbd113f73342f3dff
5.0.6
0.15 MBNot scanned—
605321482106dcd04b25287dfd86f70be78d297436df237bbd113f73342f3dff
Showing 1 to 9 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files detected

No comparable text files found between these versions.

Gain full insight into all external connections.

Upgrade for full visibility.

More from leonhartX

Popular in Developer Tools