Downloads a .xpi file (0.6 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
0
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
14
ContributorsPeople who have committed code to the repository.
3
LicenceThe licence the code is published under, as GitHub reports it.
None stated
B
Atlas gradeUse with care
A+ABBC
because it contacts a server we couldn't identify: hf-mirror.net, and 2 more findings
Next rung: A, once every finding in the code comes out low.
Applies to v1.0.1, released 23 Sep 2026Code checked · tested installed in Zotero 10.0.3 on 27 Sep 2026
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code; not yet checked against the published sourceThe developer uploaded the release file from the yiyangbyts account. We haven't yet checked whether this file matches the public source code.UnknownWe couldn't check this yet.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesContacts a server we couldn't identify: hf-mirror.net6 addresses in 4 groups.MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Not identified (1)
hf-mirror.net
Translation (3)
api-free.deepl.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.api.niutrans.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.translation.googleapis.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Code hosting (1)
huggingface.co
On your computer (1)
127.0.0.1
Where we found it
hf-mirror.netcontent/engines/installer/install_model.py · line 65
huggingface.cocontent/engines/installer/install_model.py · line 64
OFFICIAL_ENDPOINT = "https://huggingface.co"
Powerful capabilitiesInstalls and runs software packages from npm or PyPI, and 6 moreMediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Installs and runs software packages from npm or PyPImediumMedium concern: worth reading before you install.Launches programs on your computermediumMedium concern: worth reading before you install.Stores API keys or passwordslowLow concern.Runs code it assembles while runninglowLow concern.Works with files on your computerlowLow concern.Uses Zotero's password managerlowLow concern.Runs its own server for programs on this computerlowLow concern.
Where we found it
Installs and runs software packages from npm or PyPIcontent/engines/heron/setup.py · line 8