A browser extension that scans published Chrome and Firefox store extensions for stolen GPL source code
Open-source browser extension authors have no practical way to detect when commercial publishers copy their GPL-licensed code verbatim into store-listed extensions. Existing license-compliance tools (FOSSA, Black Duck, Snyk) operate in CI/CD pipelines and require the scanner to have access to private repos — they do not crawl public extension stores or compare published extension bundles against known open-source codebases. This tool automates the discovery pipeline: crawl store listings, unpack extension bundles, fingerprint code, and alert original authors when a statistically significant match against their GPL repo is found.
Demand Breakdown
Social Proof 1 sources
Gap Assessment
4 tools exist (FOSSA, Black Duck (Synopsys), Snyk Open Source, Developer License Detector (Chrome extension)) but gaps remain: Does not crawl browser extension stores; requires scanner to have repo access; has no code-similarity fingerprinting for detecting copied bundles in the wild.; Enterprise-only pricing; no store-crawling or extension-bundle diffing; not accessible to indie open-source maintainers; no outbound violation-alerting workflow..
Features7 agent-ready prompts
Competitive LandscapeFREE
| Product | Does | Missing |
|---|---|---|
| FOSSA | Scans dependency trees in CI/CD pipelines for license violations; generates SBOMs; policy enforcement on private and public repos. | Does not crawl browser extension stores; requires scanner to have repo access; has no code-similarity fingerprinting for detecting copied bundles in the wild. |
| Black Duck (Synopsys) | Enterprise SCA tool that scans binaries, repos, and containers for open-source components and license obligations. | Enterprise-only pricing; no store-crawling or extension-bundle diffing; not accessible to indie open-source maintainers; no outbound violation-alerting workflow. |
| Snyk Open Source | Dependency scanning and license compliance integrated into developer workflows; flags copyleft licenses in dependency trees. | No extension-store crawler; focuses on dependency-level license flags, not code-similarity detection; cannot identify when a third party has already copied and republished your code. |
| Developer License Detector (Chrome extension) | Scans web pages to identify JavaScript libraries and their licenses for developer use during browsing. | Passive page-scanning only; no code-similarity fingerprinting; no systematic crawl of the extension store; no author-side alert system. |
Leads218BUILDER
Sign in to unlock full access.