Downloads a .xpi file (3.1 MB). In Zotero, open Tools → Plugins and install it from the file.
StarsPeople who starred the repository on GitHub: a rough measure of interest.
2
DownloadsAll-time downloads of its release files from GitHub. Installs from elsewhere aren't counted.
27
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
AGPL-3.0
C
Atlas gradeNot recommended
A+ABCC
because it writes to Zotero's database directly
Next rung: B, once nothing in the code is a serious concern.
Applies to v0.1.5, released 26 Apr 2024Code checked · not yet tested in a live Zotero
Doesn't work with the current Zotero (10)Works with Zotero 7.
文
Documentation in Chinese onlyOur summary is in English, but the plugin's own docs and support are in Chinese.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code; not yet checked against the published sourceThe developer uploaded the release file from the seasideccm account. We haven't yet checked whether this file matches the public source code.UnknownWe couldn't check this yet.
Updates
Updates come from this project's GitHub repositoryThe update address offers version 0.1.5, which isn't newer than this one, so Zotero won't update it for now
Where your data goesOnly contacts services we could identify6 addresses in 3 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
AI services (2)
aip.baidubce.comapi.openai.comnamed in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Translation (3)
api.fanyi.baidu.comfanyi-api.baidu.comyi.qq.com
On your computer (1)
127.0.0.1named in its codeThe address is in its code, but we didn't trace a request to it. It may be a link or unused.
Where we found it
aip.baidubce.comchrome/content/scripts/translateAnt.js · line 40316
fanyi-api.baidu.comchrome/content/scripts/translateAnt.js · line 40411
let url = "https://fanyi-api.baidu.com/api/trans/sdk/picture";
Powerful capabilitiesWrites to Zotero's database directly, and 6 moreHighHigh concern: a serious problem. One high finding makes the grade C.
Writes to Zotero's database directlyhighHigh concern: a serious problem.A zotero:// link (a web page can open one) can make it install add-ons without asking you (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.A zotero:// link can make it run code if you approve a prompt (from zotero-plugin-toolkit)mediumMedium concern: worth reading before you install.Sends your text or keys unencrypted (http://) to api.fanyi.baidu.commediumMedium concern: worth reading before you install.Stores API keys or passwordslowLow concern.Works with files on your computerlowLow concern.Keeps its own database filelowLow concern.
Where we found it
Writes to Zotero's database directlychrome/content/scripts/translateAnt.js · line 14038
Tables: settings
await Zotero.DB.queryAsync(sql);
A zotero:// link (a web page can open one) can make it install add-o…chrome/content/scripts/translateAnt.js · line 194
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 7 · not 9, 10, 11 betaDoesn't work with the current Zotero (10)MediumMedium concern: worth reading before you install. One medium finding makes the grade B.