Is Mend Advise safe?
Mend Advise sends visited package-repository pages and detected package coordinates to Mend's browser plugin endpoint.
When you view supported package-repository pages, Mend Advise watches tab URL changes and matches them against known package URL patterns. It sends the visited URL, browser extension metadata, user token, and package details such as package name, group ID, artifact ID, or version to its configured browser plugin endpoint.
Who publishes itMend.io - no other listings under this identity
Mend.io - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Mend Advise contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- saas.whitesourcesoftware.com
Mend Advise sends data to saas.whitesourcesoftware.com. No other extension we have analysed sends data here.