Welcome to Dependency-Confusion-Hunter! This is a Chrome Extension that helps you find and fix Dependency Confusion vulnerabilities in npm and PyPI packages. With this tool, you can ensure that your software projects stay safe from malicious package hijacking.
- Passive Scanning: Works quietly in the background to detect possible vulnerabilities without disrupting your work.
- User-Friendly Interface: Easy to navigate, even for those unfamiliar with programming.
- Quick Results: Get instant feedback on the packages used in your projects.
- Cross-Platform Compatibility: Works with Chrome on any operating system where Chrome runs.
- Operating System: Windows, macOS, or Linux
- Browser: Google Chrome version 60 or later
- Internet Connection: Required for downloading and updating packages
To get started with Dependency-Confusion-Hunter, visit this page to download: Download Dependency-Confusion-Hunter.
-
Open Your Chrome Browser: Click to open your Google Chrome web browser.
-
Go to the Download Page: Click on the link above or type it into your browser’s address bar to navigate directly to the releases page.
-
Choose the Latest Version: Look for the latest version number on the page. This is usually highlighted at the top.
-
Download the Extension: Click on the download link for the Chrome Extension. It will typically be in a ZIP file format.
-
Extract the ZIP File: Once downloaded, locate the ZIP file in your Downloads folder and unzip it.
-
Install the Extension:
- Open Chrome and go to
chrome://extensions/ - Enable "Developer mode" on the top right.
- Click on "Load unpacked."
- Select the folder where you extracted the ZIP file. This installs the Dependency-Confusion-Hunter extension.
- Open Chrome and go to
-
Start Scanning: Click on the Extension icon in the top right of Chrome to start using it!
Once you have installed the extension, follow these steps to start protecting your packages:
- Launch the Extension: Click the Dependency-Confusion-Hunter icon.
- Scan Your Projects: You can start a scan by selecting the Projects option. The extension will analyze the packages used.
- Review Scan Results: After scanning, you will see a list of any vulnerabilities found. It will show you which packages need attention.
- Take Action: Follow the provided recommendations to resolve any detected issues. This may involve updating or replacing certain packages.
If you run into any issues, consider the following:
- Extension Not Showing: Ensure that the extension is enabled in the Chrome extensions settings.
- Scan Results Not Accurate: Make sure that you have the latest version of Dependency-Confusion-Hunter. If problems persist, try re-installing the extension.
- General Issues: Check the Chrome support page for troubleshooting steps.
If you need further assistance or have questions, please create an issue directly in the repository.
Dependency-Confusion-Hunter will notify you when a new version is available. Always keep the extension updated for the best performance and latest features.
Visit this page to download: Download Dependency-Confusion-Hunter.
Your security matters, so let Dependency-Confusion-Hunter help you safeguard your software packages today!