EN
Back to the archive

The archive · Developer & Business Tools · Product decision · 2023–2026

Little Rat bet users want to see what Chrome extensions send home; 555-pt HN

An open-source Chrome extension shows and blocks other extensions' network calls; its 2023-08-14 Show HN drew 555 points and 101 comments.

Little Rat

The betThat users fear extension snooping enough to run a watchdog seeing and blocking other extensions' network calls, though Chrome reserves the needed API for debug builds.Live

What the business is

Little Rat is a free, open-source Chrome extension that lists every installed extension and shows the network calls it makes, with an option to block them; it is distributed from GitHub releases plus a feature-limited Chrome Web Store version.

How it started

Little Rat's developer posted it as a Show HN on 2023-08-14: 'a small chrome extension to monitor (and optionally block) other extensions' network calls'. At launch it was not yet on the Chrome Web Store — the tool relies on the declarativeNetRequest debug API, the kind of permission store review treats as a red flag — so the full version was installed manually from GitHub while the store submission sat in review.

What happened

The launch thread doubled as a support desk: users asked about store availability and Firefox, one reported that not all extensions showed on the first popup load, and the developer answered in-thread and shipped a fix. Chrome Web Store review rejected the first submission on 2023-08-15 for an insufficient description; after reworking the listing and making the management and debug permissions optional via a popup button, the developer reported approval on 2023-08-18 — but the debug API is undefined in the store build, so that version can block requests without counting them. The decision was to keep two versions: a limited store one and the full manual-install one.

How it ended up

Still live as of 2026-09-05: the GitHub repo shows 2.3k stars, 75 forks and 33 commits, and the README now warns that a Chromium change means traffic from other extensions can only be detected and blocked with the extensions-on-chrome-urls flag enabled. The project remains a free, open-source tool by an individual; no company, funding or revenue is documented.

Background

Little Rat is a small, open-source Chrome extension that shows the network calls made by other installed extensions and can optionally block them. It launched as a Show HN on 2023-08-14, when its developer described it as 'a small chrome extension to monitor (and optionally block) other extensions' network calls', and users initially installed it manually from GitHub because the Web Store submission was still in review.

The bet was that browser users want a watchdog: extensions phone home, inject trackers and break store policy, and the only way to check was auditing every extension by hand. Little Rat turned that into a one-click audit — a popup listing each extension's outbound calls — and added blocking for extensions users did not trust.

The launch thread drew 555 points and 101 comments and doubled as a support desk. Store review rejected the first submission on 2023-08-15 for an insufficient description; after reworking the listing and making the management and debug permissions optional, the developer won approval on 2023-08-18 for a version that can block but not count requests, because the debug API is undefined in the store build — so he kept two versions, a limited store one and the full manual one.

As of 2026-09-05 the repository is still live at 2.3k stars with 33 commits, but the README carries a new warning: a Chromium change now requires the extensions-on-chrome-urls flag to detect and block other extensions' traffic. The project remains a free tool by an individual — no company, funding or revenue is documented.

What has to be true

  • Concrete dated traction: the 2023-08-14 Show HN drew 555 points and 101 comments (item 37119942, verified via Algolia), and users adopted it to audit extensions.
  • A falsifiable product bet: watching and blocking other extensions' network calls is worth building even though Chrome reserves the needed API for debug builds and store review.
  • A documented platform fight: store rejection on 2023-08-15, a reworked listing, approval on 2023-08-18 with limited store functionality, and a deliberate two-version strategy.
  • An observable outcome: 2.3k stars and 33 commits at the 2026-09-04 crawl, with the README recording that a Chromium flag change now gates the core capability.

What can be applied

Ship the capability the platform treats as debug-only by carrying two versions — one for the store, one full — and expect a platform policy change to gate it later.

Aftermath

As of 2026-09-05 Little Rat is live as a free, open-source Chrome extension: the GitHub repository shows 2.3k stars, 75 forks and 33 commits, and the README warns that detecting and blocking other extensions' traffic now requires the extensions-on-chrome-urls flag. The Chrome Web Store build approved in August 2023 still blocks without counting requests. No company, funding or revenue is documented; it reads as a maintained solo security tool whose core capability now depends on a Chromium flag.

Sources

spotted an error? The archive wants to know.

Your turn

You just read one. Describe what you are building, and see who is betting on the same thing.

Free account · 3 free questions · no card

Related cases