XPI Inspector Link

XPI Inspector Link analyzes a given XPI hosting URL or uploaded XPI file to validate packaging quality and delivery integrity. It targets developers, security engineers, and QA teams who need deterministic diagnostics before distribution. The tool outputs a structured report with a risk score and prioritized findings.
Conceptually, an XPI is a zipped container with metadata; the tool fetches the package or metadata, validates size and content type, checks digital signatures when present, and evaluates TLS/host posture. It also assesses compatibility with Mozilla's extension framework across supported Firefox versions.
Core value is speed, repeatability, and auditability. By centralizing checks that would otherwise require manual steps, it reduces release risk and accelerates reviews for extensions and add-ons. The generated report is CI-friendly and actionable.
Core features include URL validation, size/type checks, integrity verification, signature/certificate evaluation, TLS checks, and a structured issue taxonomy. Use cases include pre-release verification, vulnerability triage, dependency validation, and compliance checks. Outputs include a risk_score and a list of issues with severity and remediation guidance.