What our analysis found

JSONVue, used by 900,000 people, showed no malicious code in Extension Auditor's review. Our code review reported 1 finding (1 high), led by other. It comes from a trusted publisher and was last updated in November 2023.

Key findings

• high· other —The bundled declares manifest_version 2, but the Chrome Web Store listing reports manifest_version 3. This mismatch could indicate a delayed update or a discrepancy between the reviewed version and the published version. It does not inherently indicate malicious intent, but is a policy concern.

Extension is a client-side JSON with no external network communication. All data processing occurs locally. The HTML output is properly escaped via htmlEncode. Permissions (contextMenus, storage) are minimal and expected for functionality. The manifest version discrepancy (bundled v2 vs published v3) is likely due to a version update not included in the analysis bundle, not a security threat.