Plugins / Import & metadata

ZotUpdate

by 018 · github.com/018/zotupdate

Updates books' Chinese Library Classification numbers and Douban ratings, pulls tables of contents as notes, and tries to download sample chapters and e-books.

ZotUpdate has Atlas grade C (not recommended) because it downloads and runs code. It's a Zotero 6 plugin, so Zotero 7 and later can't load it. What to use instead. Last checked 6 Nov 2026.

View source
Downloads a .xpi file (0.03 MB). In Zotero, open Tools → Plugins and install it from the file.
In useAn estimate of how many copies of Zotero have it: Zotero downloads each new version once for every copy that has the plugin, so we count the downloads of its most-downloaded recent release. Rounded. Plugins that update from outside GitHub count low.
740
DownloadsAll-time downloads of its release files from GitHub, counting every update. Installs from elsewhere aren't counted.
2,077
ReleasesVersions published on GitHub. Everyone who has the plugin downloads each one again, which adds up in Downloads.
8
StarsPeople who starred the repository on GitHub: a rough measure of interest.
26
ContributorsPeople who have committed code to the repository.
1
LicenceThe licence the code is published under, as GitHub reports it.
Apache-2.0
C
Atlas gradeNot recommended
because it downloads and runs code
Applies to v1.1.1, released 9 Oct 2021Code checked · not yet tested in a live Zotero
Legacy plugin for Zotero 6 onlyUses the old plugin format. Zotero 7 and later can't load it.
Documentation in Chinese onlyOur summary is in English, but the plugin's own docs and support are in Chinese.
Contacts a shadow libraryUsing a site such as Sci-Hub carries legal risk in some countries.
What we found in the codeSets the gradeThe worst finding in these three areas sets the grade.
Code transparencyReadable code; not yet checked against the published sourceThe developer uploaded the release file from the 018 account. We haven't yet checked whether this file matches the public source code.UnknownWe couldn't check this yet.
Updates
Updates come from this project's GitHub repositoryThe update address offers this version
Where your data goesOnly contacts services we could identify9 addresses in 2 groups.LowLow concern: normal for plugins that do this job. Listed so you know.
Scholarly services (4)
b-ok.globalbook.ucdrs.superlib.netct.istic.ac.cnkns.cnki.net
Apps you connect (5)
dx.3.cnproduct.dangdang.comsearch.dangdang.comsearch.jd.comweread.qq.com
Where we found it
b-ok.globalchrome/content/zotupdate.js · line 388
Zotero.HTTP.processDocuments('https://b-ok.global/s/' + isbn, function (doc) {
book.ucdrs.superlib.netchrome/content/zotupdate.js · line 292
var url = 'http://book.ucdrs.superlib.net/search?Field=all&channel=search&sw=' + isbn
ct.istic.ac.cnchrome/content/zotupdate.js · line 219
'Origin': 'https://ct.istic.ac.cn',
Powerful capabilitiesDownloads and runs code, and 2 moreHighHigh concern: a serious problem. One high finding makes the grade C.
High concern (1)
Downloads and runs code
Medium concern (1)
Sends your text or keys unencrypted (http://) to product.dangdang.com
Low concern (1)
Runs code it assembles while running
Where we found it
Downloads and runs codechrome/content/zotupdate.js · line 109
eval(doc2.responseText)
Sends your text or keys unencrypted (http://) to product.dangdang.comchrome/content/zotupdate.js · line 127

Only lookups, such as a DOI, to book.ucdrs.superlib.net and search.dangdang.com; anyone on the network in between can read it

promises.push(Zotero.HTTP.processDocuments('http://search.dangdang.com/?key=' + isbn + '&act=input&filter=0%7C0%7C0%7C0%7C0%7C1%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0%7C0#J_tab', async function (doc1) {
Before you installShown, not gradedFacts to help you decide. They don't change the grade.
Works withZotero 6 only (legacy plugin)Doesn't work with the current Zotero (10)MediumMedium concern: worth reading before you install. One medium finding makes the grade B.
Zotero 9 ✗ doesn't workZotero 10 ✗ doesn't workZotero 11 beta ✗ doesn't work
What you'll needNothing extra detectedDetected automatically from its code
No further detail for this area yet.
MaintenanceDormant · last release 9 Oct 20211 contributor
No further detail for this area yet.
LanguagesDocumentation in Chinese onlyInterface: English and Chinese
No further detail for this area yet.
We report what we found in the code. Open any area for the evidence.How we gradeReport a problem

What it does

Written by AI from the README

Updates books' Chinese Library Classification numbers and Douban ratings, pulls tables of contents as notes, and tries to download sample chapters and e-books. It targets Chinese books, many sourced from Douban.

Its features have moved into the zoturead plugin and it is no longer maintained.

What you'll need

Detected automatically

We haven't detected any setup requirements. That isn't the same as none: check the developer's README.

Where your data goes

We found: only contacts services we could identify. 9 addresses in 2 groups.

Scholarly services (4)
b-ok.globalbook.ucdrs.superlib.netct.istic.ac.cnkns.cnki.net
Apps you connect (5)
dx.3.cnproduct.dangdang.comsearch.dangdang.comsearch.jd.comweread.qq.com
Evidence · file and line
b-ok.globalchrome/content/zotupdate.js · line 388
Zotero.HTTP.processDocuments('https://b-ok.global/s/' + isbn, function (doc) {
book.ucdrs.superlib.netchrome/content/zotupdate.js · line 292
var url = 'http://book.ucdrs.superlib.net/search?Field=all&channel=search&sw=' + isbn
ct.istic.ac.cnchrome/content/zotupdate.js · line 219
'Origin': 'https://ct.istic.ac.cn',

Forks and copies

No forks listed.

The developer's response

The developer hasn't responded. Developers can reply here, and their reply sits next to our findings.I'm the developer

Ratings and reviews

What people who use it say. This is separate from the grade, which is what the code does, and never changes it.

No ratings yet.

Write a review
Your rating of ZotUpdate v1.1.1

Your review is public, under the name you give, and published with the directory's data under CC BY 4.0. Links are removed. We never store your IP address: a scrambled code made from it is kept for 30 days to catch fake reviews. Every review is checked before it's published; how fake ones are spotted isn't published, so it can't be gamed.

Install ZotUpdate
CNot recommended
We don't recommend itIt downloads and runs code.
Read what we found