SECURITY REPORT · EXTENSHI SCAN

Is GitLab Confetti safe?

Checked version: 1.0 · Scan date (UTC): 2026-09-13

Edge extension·by __var
68
/ 100 SAFETY SCORE
CAUTION
Mostly fine, but a few things worth reviewing before you install.

Likely abandonedsafety score reduced by 30 points

  • No update in over 2 years
  • The developer's website is no longer reachable
Why this matters

An unmaintained extension keeps whatever flaws it shipped with, and a listing with users but no owner is an attractive target to buy and repurpose.

Automated analysis of publicly available code — not a professional security audit. It may produce false positives and does not prove an extension is unsafe or safe. Treat it as one signal among many. Disclaimer · Report an issue

How it ranks

GitLab Confetti's safety score vs every other extension we've scanned
Globally
91%of extensions carry more risk
This extension
Riskier ←→ Safer
Ranked against 435,762 extensions
In Developer Tools
97%of developer tools extensions carry more risk
This extension
Riskier ←→ Safer
Ranked against 3,995 developer tools extensions
Findings
3
median 19Lower is safer
Critical findings
0
median 1Severity = Critical
Permissions
0
median 3Declared in manifest
Active users
11
median 41vs category median

Findings breakdown

Automated security signal · 3 distinct issues across 6 severities
3
distinct issues
detected

Permissions requested

0 permissions declared
No permissions requested
This extension doesn't request any browser permissions. That's unusually clean.

Are you the author of GitLab Confetti?

Claim this extension to respond to findings, add context, and earn a verified badge on extenshi.io.

Claim this extension

Add the badge to your README

Show GitLab Confetti's live security score on GitHub or in your docs
Extenshi security score badge preview
Markdown
[![Extenshi security score](https://catalog.extenshi.io/api/badge/50105)](https://catalog.extenshi.io/extensions/50105/security)
HTML
<a href="https://catalog.extenshi.io/extensions/50105/security"><img src="https://catalog.extenshi.io/api/badge/50105" alt="Extenshi security score" /></a>

The badge always shows the current score — it updates automatically after every scan.

Scan performed by extenshi.io · Oct 22, 2026
Browser extensions made transparent.

What this assessment covers

Store listing
Edge
Checked version
1.0
Current listed version
1.0
Scan date (UTC)
Assessment status
Completed

Recorded findings: 0 critical and 0 high severity. Read the finding details before interpreting the score; automated flags are not proof of malicious behaviour.

Automated analysis looks for suspicious code, permissions and other risk signals. It does not observe every runtime behaviour or independently audit the publisher’s servers. A low-risk result is not a guarantee of safety. How our checks work.

Compare extensions by task