A browser extension that aggregates security and quality data to help developers evaluate open source packages on npm, PyPI, and Go registries.
Overlay is a browser extension that aggregates security, quality, and maintenance data from multiple advisory services to help developers evaluate open source packages. It displays this information directly on package pages of registries like npm, PyPI, and Go, solving the problem of fragmented and time-consuming package research.
Developers and software engineers who regularly select open source dependencies and need to assess their security, popularity, and maintenance status efficiently.
Developers choose Overlay because it centralizes critical package evaluation metrics into a single, seamless browser interface, saving time and reducing risk by providing consolidated insights from trusted sources like Snyk and Socket.
Overlay is a browser extension helping developers evaluate open source packages before picking them
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Aggregates security and quality data from Snyk, Debricked, Socket.dev, and Deps.dev, providing a comprehensive view without visiting multiple sites, as stated in the README.
Injects indicators directly on npm, PyPI, and Go package pages, as well as StackOverflow, fitting naturally into the developer's browsing workflow for quick evaluations.
Allows users to select which sources to display via the extension popup, giving control over the metrics shown, as demonstrated in the usage video and description.
Available as extensions for both Chrome and Firefox, ensuring broad compatibility and easy installation from official stores.
Currently only supports npm, PyPI, Go, and StackOverflow; other registries like Maven or RubyGems are not included, limiting its scope despite future plans mentioned in Issue #14.
Relies on third-party advisory services; changes or downtime in these sources can impact data reliability and extension functionality, with no fallback mechanisms described.
Provides only on-demand evaluation when browsing; lacks features for ongoing dependency tracking or alerts in development pipelines, making it unsuitable for proactive security.