esm.sh extension
Security at a glance
Automated estimate from our latest scan (malware, permissions, obfuscation) — not a security audit. Higher safety score is better.
See the full security reportFirefox listing ID: esm-sh
Permissions (2)
- *://npmjs.com/package/*
- *://www.npmjs.com/package/*
Related extensions
Frequently asked questions
Is esm.sh safe to use?
Our latest automated scan rates the Firefox listing of esm.sh at 95/100 (low risk) — malware, permission and obfuscation checks combined. The full report lists every finding behind the number. This is an automated estimate, not a guarantee of safety.
What permissions does esm.sh require?
esm.sh requests 2 permissions. The most significant: *://npmjs.com/package/*, *://www.npmjs.com/package/*. See the full breakdown in the security report.
Who develops esm.sh?
esm.sh is published by GHOST. Impersonators copy popular extension names, so always verify the developer line and listing id on the store page before installing.
What this assessment covers
- Store listing
- Firefox
- Checked version
- 1.0.1
- Current listed version
- 1.0.1
- Scan date (UTC)
- Assessment status
- Completed
Recorded findings: 0 critical and 0 high severity. Read the finding details before interpreting the score; automated flags are not proof of malicious behaviour.
Automated analysis looks for suspicious code, permissions and other risk signals. It does not observe every runtime behaviour or independently audit the publisher’s servers. A low-risk result is not a guarantee of safety. How our checks work.