Is Vue.js devtools (v5) safe?
Vue.js devtools injects a detection hook into every page to find Vue apps, and keeps inspected component data on your device.
This is the official Vue.js developer tool. On every page it runs a small script in the page itself that defines the Vue devtools hook, which any script on that same page can read, and a detector that tells the extension only whether Vue, Nuxt, or devtools are present. Component, Vuex, and other application data is only read into the local DevTools panel when you open it, and nothing is sent off your device.
Who publishes itvuejs-dev - 3 other listings from the same operator, none carrying a finding
vuejs-dev - 3 other listings from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same store account
3 other listings published from this account, 1.2M+ users between them, none of them carrying a finding.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 5.3.4. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on every site you visit
<all_urls>
Store data in your browser
storage
Run its own code inside the pages you visit
scripting