Observed arrival · 2026-10-24
ExtensionCRA: compliance checks for browser extensions
A tool for checking browser extensions against EU Cyber Resilience Act and AI Act requirements, with scans, an SBOM, and compliance documents.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Browser extension developers serving EU users
- Worth noticing
- The example output includes a CycloneDX 1.5 SBOM and a report at cra/scan-report.md.
Field notes
The page shows a sample Manifest V3 scan of “Tab Tidy 1.2.0,” with 214 dependencies and findings including broad website access, a vulnerable lodash version, and outdated jQuery. Its sample outputs include a CycloneDX 1.5 SBOM and a report at cra/scan-report.md; the page says scans run locally, sending only package names and versions for vulnerability lookups. These are presented as product behavior and sample output, not independently verified operation.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
One card from the complete issue