HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
mozilla
addons-frontend
JavaScript2017–2021
mozilla / addons-frontend

addons-frontend

Front-end to complement mozilla/addons-server

27Distinct people
34Mentions
0Explicit recommenders
547GitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

Front-end to complement mozilla/addons-server

GitHub

Where it is used

No documented product use was verified in the last source check.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year34 dated mentions

Observed mentions: 2017-07-12 15:53:05 UTC to 2021-08-31 10:50:21 UTC.

051015202017-01-01 00:00:00 UTC to 2018-01-01 00:00:00 UTC (exclusive): 21 mentions; 2 submissions, 19 comments20172018-01-01 00:00:00 UTC to 2019-01-01 00:00:00 UTC (exclusive): 7 mentions; 0 submissions, 7 comments2019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 4 mentions; 0 submissions, 4 comments20192020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 1 mentions; 1 submissions, 0 comments2021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2021

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20172017-01-01 00:00:00 UTC2018-01-01 00:00:00 UTC21219
20182018-01-01 00:00:00 UTC2019-01-01 00:00:00 UTC707
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC404
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC110
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC101

From the project README

An excerpt from the repository, fetched Nov 13, 2026.

Read the project’s introduction
Addons-frontend 🔥 Front-end infrastructure and code to complement mozilla/addons-server. Security Bug Reports This code and its associated production website are included in Mozilla’s web and services bug bounty program. If you find a security vulnerability, please submit it via the process outlined in the program and FAQ pages. Further technical details about this application are available from the Bug Bounty Onramp page. Please submit all security-related bugs through Bugzilla using the web security bug form. Never submit security-related bugs through a Github Issue or by email. Requirements You need Node LTS (long term support) release. npm is used to manage dependencies and run scripts. It ships with Node. The easiest way to manage multiple node versions in development is to use nvm. Get started If you are on Windows, please make sure to follow windows guidelines too. type npm install to install all dependencies type npm run amo:stage to start a local server that connects to a hosted staging server Development commands Here are some commands you can run: Command Description npm run amo:olympia Start the dev server/proxy (for amo) using data from a local addons-server environment. npm run amo:dev Start the dev server/proxy (for amo) using data from the dev server (https://addons-dev.allizom.org/) npm run amo:dev-https Same as amo:dev but with HTTPS, available at: https://example.com:3000/. Read about setting up this environment npm run amo:stage Start the dev server/proxy (for amo) using data from the staging server (https://addons.allizom.org/) npm run build Build the app. npm run build-ci Run the build and bundlewatch npm scripts. npm run bundlewatch Run bundlewatch to check the generated AMO bundle sizes. Building AMO is required first. npm run flow Run Flow. By default this checks for errors and exits npm run flow:check Explicitly check for Flow errors and exit npm run flow:dev Continuously check for Flow errors npm run eslint Lint the JS npm run start-func-test-server Start a Docker container for functional tests npm run stylelint Lint the SCSS npm run lint Run all the JS + SCSS linters npm run prettier Run Prettier to automatically format the entire codebase npm run prettier-dev Run [Pretty-Quick][] to automatically compare and format modified source files against the master branch npm run prettier-ci Run Prettier and fail if some code has been changed without being formatted npm run version-check Check you have the required dependencies npm test Run all tests (Enters jest in --watch mode) npm run test-debug Run all tests with full console output and full error messages (Enters jest in --watch mode) npm run test-coverage Run all tests and generate code coverage report (Enters jest in --watch mode) npm run test-coverage-once Run all tests, generate code coverage report, then exit npm run test-once Run all tests, run all JS + SCSS linters, then exit npm run test-ci Run all continuous integration checks. This is only meant to run on CI. Running tests You can enter the interactive jest mode by typing npm test or npm run test-debug. This is the easiest way to develop new features. Here are a few tips: npm test will hide most console output and detailed test failure messages, so it is best when you are running a full suite of tests. When working on an individual test, you likely want to run npm run test-debug. When you start npm test, you can switch to your code editor and begin adding test files or changing existing code. As you save each file, jest will only run tests related to the code you change. If you had typed a when you first started then jest will continue to run the full suite even when you change specific files. Type o to switch back to the mode of only running tests related to the files you are changing. Sometimes running tests related to your file changes is slow. In these cases, you can type p or t to filter tests by name while you working fixing a specific test suite. More info. If you see something like Error watching file for changes: EMFILE on Mac OS then brew install watchman might fix it. See jestjs/jest#1767 Run a subset of the tests By default, npm test will only run a subset of tests that relate to the code you are working on. To explicitly run a subset of tests, you can type t or p which are explained in the jest watch usage. Alternatively, you can start the test runner with a specific file or regular expression, like: npm test -- tests/unit/amo/components/TestAddon.js Run all tests If you want to run all tests and exit, type: npm run test-once Eslint As you run tests you will see a report of Eslint errors at the end of the test output: npm test If you would like to run tests without Eslint checks, set an environment variable: NO_ESLINT=1 npm test Flow There is limited support for using Flow to validate the intention of our program. The current version of Flow does not have default support for Silicon Macs. To allow Flow to run on Silicon Macs, first install Rosetta 2 using sudo softwareupdate --install-rosetta --agree-to-license As you run tests you will see a report of Flow errors at the end of the test output: npm test If you would like to run tests without Flow checks, set an environment variable: NO_FLOW=1 npm test To only check for Flow issues during development while you edit files, run: npm run flow:dev If you are new to working with Flow, here are some tips: Check out the getting started guide. Read through the web-ext guide for hints on how to solve common Flow errors. To add flow coverage to a source file, put a /* @flow */ comment at the top. The more source files you can opt into Flow, the better. Here is our Flow manifesto: We use Flow to declare the intention of our code and help others refactor it with confidence. Flow also makes it easier to catch mistakes before spending hours in a debugger trying to find out what happened. Avoid magic Flow declarations for any inte
Read the full README on GitHub

What Hacker News says

34 sources
This marks the last Android release with extensions/add-on support. There will not be a 69 release of this edition of Firefox for Android ("Fennec"). The new remake of the mobile browser ("Fenix") does not have extensions support and it is on an indefinite and easily ignorable backlog. It is explicitly not being worked on this quarter. At the end of this quarter is the scheduled release of Firefox 69. Unless there's no release at all of Firefox 69 upon the Android platform, that's the time when Mozilla I think will deceptively try to drop support for extensions/addons on android. Bug to have Add-ons pages declare Fenix extensions as unsupported. "version <= 68.0.98 is legacy Fennec version >= 68.0.99 is Fenix (or some other GeckoView-powered browser)" https://bugzilla.mozilla.org/show_bug.cgi?id=1548428 "Or do nothing because Fennec 6
Read the rest
8 and Fenix 68 will overlap for only 6–8 weeks with a preview audience." https://github.com/mozilla/addons-frontend/issues/7963 Firefox 69 releases 2019-09-03 at the end of Quarter 3. https://wiki.mozilla.org/Release_Management/Calendar Extensions support are in the "Reserved Backlog" category. Also locked to prevent any more comments about it. https://github.com/mozilla-mobile/fenix/issues/574 Extensions support is not in Q3 backlog https://github.com/mozilla-mobile/fenix/projects/19
In Firefox 68.0
It's hard to take anything you write seriously when you're being disingenuous. >Unfortunately, these prototypes broke the web badly. The web was simply not ready for such protection. Yet Apple was fine disabling third-party tracking since 2001 according to GP? >Now, Apple, with their iOS monopoly A monopoly over their own product? >If you recall, Apple's stance on privacy is quite recent. The tech world has a short memory, but I remember Apple being caught red-handed slurping data from user's iPhones not so long ago. A quick Google search shows that Apple was embroiled because they enabled WiFi-assist by default, which caused some people to use more cellular data than intended. Is this the privacy-invading data "slurp" you mean? >But don't forget that they do this for strategic reasons Who doesn't? Apple is not a charity. We should rejoic
Read the rest
e that Apple is monetizing privacy, because it means the system is working. >We're also working on it (is anyone else doing so?) GP literally just mentioned expiring first-party cookies after 7-days. I don't trust Mozilla _at all_ these days. Instead Mozilla seems interested in marketing themselves as privacy-focused only enough to grow their userbase for the near future. Once at some critical mass, Mozilla seems to proceed exactly like Google. - Google Analytics tracking users on configuration page, https://github.com/mozilla/addons-frontend/issues/2785 - Firefox Focus, a tracker blocker, sending user data to third-party Adjust https://github.com/mozilla-mobile/focus-ios/wiki/Install-Tra... - Firefox installing an add-on without user consent https://news.ycombinator.com/item?id=15931730 - Targeted advertisement via Pocket - SHIELD Studies and Telemetry
In Is Firefox better than Chrome? It comes down to privacy
I assume they're talking about the use of google analytics on the about:addons page discussed here: https://github.com/mozilla/addons-frontend/issues/2785 Two things to note from that thread: From what I've read, Mozilla had some agreement with Google to keep all the data from their tracking stuff silo'ed so it wasn't aggregated with other data and wasn't used for anything besides showing back to Mozilla people. and They're now (and have been for more than a year) respecting DNT, removing the GA code so that you don't make any requests to google if you have that enabled.
In Why I’m done with Chrome
Actually, if you read to the bottom of the discussion [0] you'll see that it was fixed, and FF respects the Do Not Track setting. In addition, they negotiated with google special terms for their analytics. This is the description [1] and this is the resulting options they got [2]. [0] https://github.com/mozilla/addons-frontend/issues/2785#issue... [1] https://bugzilla.mozilla.org/show_bug.cgi?id=697436#c14 [2] https://bug697436.bmoattachments.org/attachment.cgi?id=73207...
In Changing Our Approach to Anti-Tracking
Great, so about:addons doesn’t use tracking Google Analytics cookies anymore? Or has a visible way to disable it (you need to enable DNT to get rid of this). And Firefox Nightly does not track personally identifiable telemetry anymore? No. Mozilla still tracks every step I take. What the fuck, Mozilla? EDIT: Example. Go to If you go to view-source:https://addons.mozilla.org/en-US/firefox/ — In the code you’ll find Google Analytics, and if you open the page, it’ll set tracking cookies. No cookie notice, no opt-in, at all. How the FUCK is this supposed to be GDPR-compliant? Cambridge Analytica is more GDPR-compliant than this. EDIT 2: See also https://github.com/mozilla/addons-frontend/issues/2785 to show that about:addons loads addons.mozilla.org, including the Google Analytics trackers without opt-in. EDIT 3: See also https://www.mozilla.
Read the rest
org/en-US/firefox/channel/desktop/ which explains that Nightly and Beta always send telemetry, which can not be turned off in any way, and your only way to avoid it is to stop using the product, which again violates the GDPR section on "free consent".
In Things to know about the GDPR, Mozilla and Firefox
If Tor browser sends additional data over the net, it does so via the Tor network, so you are at no more risk than any other explicit requests you make via Tor browser. Unless you're using uMatrix in advanced mode with extra strict content settings enabled, Tor browser won't keep your session completely private. It isn't designed to do so. It's designed to keep a single session isolated and - if you're careful - anonymous within itself, but any activity within that session can still be easily associated with other activity within that session, unless you're selectively blocking 3rd parties. NoScript (bundled with TorBrowser) does this partially but not fully. Beyond the above (that TorBrowser isn't designed to protect from what we're discussing here, and as such their vetting won't be overly concerned with it), there's also the fact that
Read the rest
they track ESR which is likely to have less of these issues since they'll usually be fixed before feature releases are backported. Edit: In case you're still of the view these bugs are "imagined", here's two small (related) examples: [0], [1] though not the only ones. The "lack of consideration" I referred to in my above post that imo causes these bugs is the language seen in the second one of those bugs: > It's not tracking but I'd imagine users who were uncomfortable submitting usage data from the app to GA also don't want to log their errors in Sentry This is a Mozilla developer who seems to fundamentally disagree with (I'd guess most) users on what tracking means. [0] https://bugzilla.mozilla.org/show_bug.cgi?id=1380754 [1] https://github.com/mozilla/addons-frontend/issues/2802
In Firefox is on a slippery slope
Well, does it matter if I use Chrome, which sends everything I do back to Google Analytics, or if I use Firefox, which also sends my interaction with the Addon menu to Google https://github.com/mozilla/addons-frontend/issues/2785 and my browsing history to a German publishing, ad and tracking company (CliqZ belongs to the Burda Group) https://news.ycombinator.com/item?id=15421708 ? In a previous discussion, a Mozilla employee gave me as official statement that if I don’t trust Google, I shouldn’t use Firefox. If I have to trust Google anyway, I can at least use the better browser. Disclaimer: Until today, I’ve defended Mozilla in all such discussions, and kept the same PoV that you have presented here, but I just can’t do that anymore, when Mozilla is now just as evil as Google.
In Unknown Mozilla dev addon "Looking Glass 1.0.3" on browser

Showing the 15 most recent of 34 sources. Enable JavaScript to search and browse every indexed mention.

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.