Wordmark Extension

Wordmark Extension

ID: plafaneablgcojpbaeefkmnheilloopl

Supported Languages

🇺🇸English

Extension Info & Metadata

Status
Active
Version
0.0.4
Size
0.03 MB
Rating
4.3/5
Reviews
97
Users
80,000
Type
Extension
Updated
Apr 2, 2025
Category
Workflow & planning
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
Wordmark OÜView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Total Extensions
1
Active
1
Obsolete
0
Listed
1
Unlisted
0
Total Users
80,000
Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Syncronize your fonts with Wordmark + Preview fonts on any website

Welcome to the new Wordmark browser extension! This simple tool detects fonts installed on your computer and shares them with Wordmark (https://wordmark.it). It also lets you discover, preview, and test fonts on any website you visit. # What is Wordmark? Wordmark is a web app that helps you preview and choose fonts by displaying their text in all the fonts installed on your computer. It offers features like tagging and categorizing fonts, sharing font previews with customers, and exporting designs to Cricut and Silhouette. With its user-friendly interface and efficient font selection process, Wordmark is widely used by crafters, designers, and creatives who work with fonts every day. Learn more about Wordmark on https://wordmark.it/ --- Originally built to detect installed fonts for Wordmark, the extension has grown into a font discovery tool, helping crafters and designers explore and test new fonts directly in their browser. # Discover New Fonts While Browsing Easily see which fonts are used on any website you visit. The extension displays a badge with the number of web fonts it detects. Pin it for quick access and explore fonts as you browse. # See How Web Fonts Look with Your Text Type your own text and see how it looks in the fonts used on a webpage. Adjust the size ot zoom in for a closer look. # Export Font Previews as Images You can export the font previews as images to keep as a reference, import into other apps, or share it with others.

Item
Type
Severity
Description
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:• 15% increase: Older manifest version lacks modern security controls
Older Manifest Version
Risk Factor
Medium
This extension uses Manifest Version 2
fontSettings
Permission
Low
This permission controls browser font rendering settings. Rated Low because it only affects visual display preferences without access to content.

The bundled manifest.json declares manifest_version 2 and only the 'fontSettings' permission, while the published manifest on the Chrome Web Store indicates manifest_version 3 with additional permissions 'activeTab', content scripts, and web_accessible_resources. This mismatch suggests the extension may have been updated on the store to a more capable version not reflected in the reviewed source, posing a transparency risk.

manifest.json (Line 1)
{  "update_url": "https://clients2.google.com/service/update2/crx",  "name": "Wordmark.it Extension",  "version": "0.0.4",  "description": "This extension enables you to see your fonts on Wordmark.it",  "permissions": ["fontSettings"],  "background": {    "scripts": [      "javascripts/bugsnag.min.js",      "javascripts/bugsnag_config.js",      "javascripts/background.js"    ],    "persistent": true  },  "browser_action": {    "default_popup": "popup.html",    "default_icon": { ... }  },  "icons": { ... },  "externally_connectable": {    "matches": ["http://localhost:8000/*", "https://test.wordmark.it/*", "https://wordmark.it/*", "https://www.wordmark.it/*"]  },  "manifest_version": 2}

The extension configures Bugsnag error monitoring with API key '222886885ed7986f0c3965744d5f689b' and sends error reports to bugsnag.com when exceptions occur. This constitutes data collection to a third-party service. The Chrome Web Store listing for this extension states data collection: 'none declared', making this an undisclosed tracking mechanism. While the data sent is limited to error stack traces and metadata, the lack of disclosure is a privacy hygiene issue.

javascripts/bugsnag_config.js (Line 1)
(function(self) {  window.bugsnagClient = bugsnag({    apiKey: '222886885ed7986f0c3965744d5f689b',    version: chrome.runtime.getManifest().version,    releaseStage: 'development',    beforeSend: function(report) {      report.stacktrace = report.stacktrace.map(function(frame) {        frame.file = frame.file.replace(/chrome-extension:/g, 'extension');        return frame;      })    }  });})(typeof self !== 'undefined' ? self : this);// background.js catch block:bugsnagClient.notify(error, {  ...});

By severity

Critical0
High1
Medium0
Low1

Versions scanned

Showing 1 of 11 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
0.0.42

Files with findings

2 distinct paths — top paths by unique finding count:

  • javascripts/bugsnag_config.js1
  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
high
manifest.json (line 1)The bundled manifest.json declares manifest_version 2 and only the 'fontSettings' permission, while the published manifest on the Chrome Web Store indicates manifest_version 3 with additional permissions 'activeTab', …
2Unauthorized Data Collection
low
javascripts/bugsnag_config.js (line 1)The extension configures Bugsnag error monitoring with API key '222886885ed7986f0c3965744d5f689b' and sends error reports to bugsnag.com when exceptions occur. This constitutes data collection to a third-party service…
URLs
14
IPv4
0
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

www.w3.org/1999/02/22-rdf-syntax-nshttp://www.w3.org/1999/02/22-rdf-syntax-ns#
ns.adobe.com/xap/1.0/http://ns.adobe.com/xap/1.0/
ns.adobe.com/xap/1.0/mm/http://ns.adobe.com/xap/1.0/mm/
ns.adobe.com/xap/1.0/sType/ResourceRefhttp://ns.adobe.com/xap/1.0/sType/ResourceRef#
wordmark.it-https://wordmark.it
notify.bugsnag.com-https://notify.bugsnag.com
sessions.bugsnag.com-https://sessions.bugsnag.com
tinyurl.com/y94fq5zmhttps://tinyurl.com/y94fq5zm
github.com/bugsnag/bugsnag-jshttps://github.com/bugsnag/bugsnag-js
clients2.google.com/service/update2/crxhttps://clients2.google.com/service/update2/crx
Showing 1 to 10 of 20 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

No IP addresses found
Showing 1 to 10 of 20 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.