Tusk status

[jookk]

Is it safe to use? Do you somebody using Tusk in chromebooks? I mean security because of lack of updaes

[subdavis]

Hey @jookk

Chrome upgraded to manifest version 3 over the last few years and Tusk received a large update for that change about 1.5 years ago.

Chrome extensions are a unique execution environment with a much different attack surface than, say, a Node.js web server. Most dependency CVEs affect applications running in production handling un-trusted inputs.

With the javascript NPM ecosystem being like it is, a lack of constant updates is not necessarily a bad thing.

In terms of usage numbers, there are about 30,000 people still using Tusk across Chrome and Firefox, many on Chromebooks.

---

All of the above said, I do not personally use or believe in the Keepass ecosystem anymore, and I do not recommend using Keepass or Tusk. Its integration with cloud providers is fragile and frustrating to set up.

I would recommend you switch to BitWarden or another open source fully managed password manager.