SECURITY REPORT · EXTENSHI SCAN

Is Tavaalor safe?

Checked version: not provided · Assessment updated (UTC): 2026-08-24

Firefox extension·by Noskyxz
37
/ 100 SAFETY SCORE
DANGEROUS
Meaningful risk surface. Avoid on managed devices without review.

Likely abandonedsafety score reduced by 30 points

  • No update in over 5 years
Why this matters

An unmaintained extension keeps whatever flaws it shipped with, and a listing with users but no owner is an attractive target to buy and repurpose.

Automated analysis of publicly available code — not a professional security audit. It may produce false positives and does not prove an extension is unsafe or safe. Treat it as one signal among many. Disclaimer · Report an issue

How it ranks

Tavaalor's safety score vs every other extension we've scanned
Globally
12%of extensions carry more risk
This extension
Riskier ←→ Safer
Ranked against 429,220 extensions
In Social & Communication
8%of social & communication extensions carry more risk
This extension
Riskier ←→ Safer
Ranked against 13,842 social & communication extensions
Findings
38
median 9Lower is safer
Critical findings
0
median 0Severity = Critical
Permissions
8
median 3Declared in manifest
Active users
0
median 4vs category median

Findings breakdown

Automated security signal · 38 distinct issues across 6 severities
38
distinct issues
detected
Scanners reported 43 raw occurrences; repeats of the same issue at the same location are merged here. The list below shows every occurrence.

Permissions requested

8 permissions declared
No risky permissions
8 permissions requested — none are flagged as risky.
Medium
Store local data

Can save data locally in the browser for persistence

Medium
Show notifications

Can display desktop notifications outside the browser

Medium
Access user identity

Can get OAuth2 tokens and access your Google account identity

Low
Schedule tasks

Can schedule periodic background tasks

Info
https://i.ytimg.com/

No additional information available.

Info
https://id.twitch.tv/

No additional information available.

Info
https://api.communistreams.com/

No additional information available.

Info
*://*.cdninstagram.com/*

No additional information available.

Are you the author of Tavaalor?

Claim this extension to respond to findings, add context, and earn a verified badge on extenshi.io.

Claim this extension

Add the badge to your README

Show Tavaalor's live security score on GitHub or in your docs
Extenshi security score badge preview
Markdown
[![Extenshi security score](https://catalog.extenshi.io/api/badge/120775)](https://catalog.extenshi.io/extensions/120775/security)
HTML
<a href="https://catalog.extenshi.io/extensions/120775/security"><img src="https://catalog.extenshi.io/api/badge/120775" alt="Extenshi security score" /></a>

The badge always shows the current score — it updates automatically after every scan.

Scan performed by extenshi.io · Aug 24, 2026
Browser extensions made transparent.

What this assessment covers

Store listing
Firefox
Checked version
Not provided in this assessment
Current listed version
1.1.10
Assessment updated (UTC)
Assessment status
Completed

Recorded findings: 0 critical and 5 high severity. Read the finding details before interpreting the score; automated flags are not proof of malicious behaviour.

Automated analysis looks for suspicious code, permissions and other risk signals. It does not observe every runtime behaviour or independently audit the publisher’s servers. A low-risk result is not a guarantee of safety. How our checks work.

Compare extensions by task