Colorpick Eyedropper
🔍 Security Report Available View on Chrome Web StoreChrome will indicate if you already have this installed.
Lets you quickly select color values from webpages and more with a zoomed eyedropper & color chooser tool, making it easy for designers, developers, and anyone who works with colors to get the exact shades they need. Ideal for those who frequently need to grab colors from images or backgrounds, this extension simplifies the process of getting accurate color values. Suitable for graphic designers, web developers, and digital artists looking to streamline their workflow.
Overview
If you feel the need to alert the developer about a bug use the feedback forum instead of writing a review.
Note: by default "Attempt to auto copy value to clipboard" disabled. You will be warned during install about a request for clipboardWrite permissions, but this is disabled by default until you enable it in settings because automatically overwriting the clipboard may be annoying. If you do use this setting you can decide whether to auto copy the hex or the rgb css.
ColorPick needs permission on all websites so that it is at the ready when you need it. In order to use the tabs API this permission is required. Color pick does not abuse this permission and is highly configurable. You can always review the source code yourself, which is available online here https://github.com/qufighter/ColorPick PRs welcome!
Please note that colors are picked from a snapshot of the page that is updated only when you scroll. To take a new snapshot press r or use the re-snap button. Sometimes if you just changed tabs, you may see a snapshot error - this is an intentional security feature. Press R or scroll to correct this, or exit color pick and try again.
As with most extensions of this nature, it will not work out of the box on the web store, or on file:// pages. It will work on local file pages only after you "Allow access to file URLs" from the tools->extensions manager. However there is also an alternative feature "snap mode" that uses the active tab permission to take a screenshot anyway, which is then sent to a new tab where permission to run the extension may be granted, however you will have to click the extension icon again on this new tab at present.
If you experience an issue, try the following:
- Try a new website in a different tab and see if it works there
- Try the same website in a new tab and see if that works
- Reloading the extension or tab may sometimes be needed
If you need to operate on unsupported pages try the desktop app version (mac+pc) at color-pick.com or if you are selecting colors from screenshots, images or photos try the mobile phone/tablet app for IOS and Android - search the store for "ColorPick" (which also includes color based mini games).
If you're looking for a quick and easy to use color eye dropper with zoomed drag-able preview for fine tuning you've come to the right place. If you experience any bugs PLEASE report them using the feedback button, I want to fix them if they can be fixed.
It has been reported that it may take a few tries before it starts working initially. You may have to refresh the page or re-load the extension. I have personally experienced bugs where mousemove event does not fire, etc, but then when I switch out of chrome and back, it starts working. There is little that can be done to fix this except be patient and try again.
Keep in mind that your display's color space matters - if it or chrome is not set to sRGB (and restarted chrome) then some colors set to one value will pick as a different value (as if from a screenshot, which in some cases can have a similar effect).
Color Pick attempts to use lossless PNG quality to detect colors. If you experience bugs or distorted snapshot of the page disable this feature to use JPEG quality.
If your business is using this extension or the desktop app than you should urge them to purchase the appropriate license.
Thank You,
Sam
-------------------------------------------
This program is a Color Picker, or an Eye Dropper, also a ColorPicker or EyeDroper depending on how you wish to spell it. It also contains webpage region magnification/zoom loupe features. Zoom features may help you to see pixel perfect alignment accuracy during web development adjustments. This extension may someday be supported by URL rewriting affiliate links. This may be disabled from options and is disabled by default. When you uninstall this extension you may be asked to complete a survey - you can disable this survey from options.
Tags
Privacy Practices
Security Analysis — Colorpick Eyedropper
Permissions
Code Patterns Detected
External Connections
Package Contents 190 files · 2MB
What This Extension Does
Colorpick Eyedropper is a productivity tool for developers that allows users to select color values from webpages. It provides a zoomed eyedropper & color chooser feature, but requires broad permissions to function.
Permissions Explained
- activeTabexpected: This permission lets the extension access the currently active tab in your browser.
Technical: The extension uses this permission to inject a content script into the active tab, which allows it to capture color values and perform other actions. This permission grants the extension access to sensitive data such as page content and user interactions. - tabsexpected: This permission lets the extension manage multiple tabs in your browser, including switching between them and accessing their contents.
Technical: The extension uses this permission to switch between tabs and access their contents, which allows it to perform actions such as capturing color values from other tabs. This permission grants the extension access to sensitive data such as tab contents and user interactions. - scriptingexpected: This permission lets the extension run scripts in your browser, which can be used to perform a wide range of actions.
Technical: The extension uses this permission to inject content scripts into webpages and execute them, which allows it to capture color values and perform other actions. This permission grants the extension access to sensitive data such as page content and user interactions. - storageexpected: This permission lets the extension store data locally on your device, which can be used to persist settings or cache data.
Technical: The extension uses this permission to store data in browser storage, which allows it to persist settings and cache data. This permission grants the extension access to sensitive data such as user preferences and browsing history. - clipboardWriteexpected: This permission lets the extension write data directly to your clipboard, which can be used to copy color values or other text.
Technical: The extension uses this permission to write data directly to your clipboard, which allows it to copy color values and other text. This permission grants the extension access to sensitive data such as user input and clipboard contents.
Your Data
The extension accesses page content, captures keystrokes, and sends data to various domains, including vidsbee.com and github.com. It also uses the Fetch API and makes XHR requests.
Technical Details
- vidsbee.com
- github.com
- HTTP
- HTTPS
- page content
- keystrokes
- cookies
Code Findings
The extension uses an alternative to the eval function, which can be used to execute malicious code.
Technical: The extension uses the execScript function in its content script, which allows it to execute scripts in the context of webpages. This can potentially be used to inject malicious code or perform other unauthorized actions.
💡 This pattern is commonly used in legitimate extensions to execute scripts in the context of webpages.
The extension uses innerHTML assignment, which can be used to inject malicious code into webpages.
Technical: The extension uses innerHTML assignment in its content script, which allows it to inject HTML code into webpages. This can potentially be used to inject malicious code or perform other unauthorized actions.
💡 This pattern is commonly used in legitimate extensions to inject HTML code into webpages.
The extension captures keystrokes, which can be used to steal sensitive information such as passwords or credit card numbers.
Technical: The extension uses the keyboard event listener in its content script, which allows it to capture keystrokes. This can potentially be used to steal sensitive information or perform other unauthorized actions.
💡 This pattern is commonly used in legitimate extensions to provide features such as password managers or form fillers.
The extension runs on all websites, which can be used to inject malicious code or perform other unauthorized actions.
Technical: The extension uses the activeTab permission to run on all websites, which allows it to inject content scripts into webpages and execute them. This can potentially be used to inject malicious code or perform other unauthorized actions.
💡 This pattern is commonly used in legitimate extensions to provide features such as ad blockers or anti-tracking tools.
The Colorpick Eyedropper extension requires broad permissions and uses some potentially insecure patterns, but its stated purpose aligns with its behavior. Users should exercise caution when installing this extension and review its code to ensure it meets their needs.
