A powerful, open-source userscript manager built on Chrome Manifest V3

Chrome Web Store • Features • Installation • Quick Start • Security • Contributing

Full Greasemonkey/Tampermonkey API compatibility with promise-based GM.* async variants.

Plus GM_getTab, GM_saveTab, GM_getTabs for cross-tab state, window.close, window.focus, window.onurlchange grants, @top-level-await, @delay, and @nodownload support.

• Auto-detect installation — Navigate to any .user.js URL
• One-click toggle — Enable/disable scripts individually or globally
• Auto-updates — Configurable update intervals with notifications
• Per-script update check — Check and apply updates for individual scripts inline
• Version tracking — Installed vs. available version comparison
• Tags & search — Organize and filter scripts by name, description, or metadata
• Popup quick-edit — Click any script in the toolbar popup to jump straight into the editor
• Find Scripts — Search and install userscripts from Greasy Fork and other sources directly in the dashboard
• Bulk operations — Select multiple scripts to enable, disable, update, reset, or delete with progress tracking
• Per-script export — Export individual scripts as .user.js files
• Script templates — 6 starter templates (blank, page modifier, CSS injector, API interceptor, SPA script, cross-site request)
• Version rollback — Auto-saves last 3 versions on update; one-click rollback from info panel
• Storage quota monitor — Visual quota bar with warning when approaching Chrome's 10MB limit
• Tag filtering — Filter scripts by @tag metadata in the dashboard dropdown
• Drag-and-drop install — Drop .user.js or .zip files onto the dashboard to install
• Shift+click multi-select — Select ranges of scripts with Shift+click
• Library browser — Search and add CDN libraries (@require) from cdnjs directly in the editor
• Advanced filters — Filter scripts by grant type, error status, update URL, scope breadth, or tags
• Code snippets — Insert GM API templates directly from the editor toolbar
• Keyboard shortcuts — Ctrl+N new, Alt+1-5 switch tabs, Ctrl+W close tab, Ctrl+Tab cycle tabs
• Script pinning — Pin favorite scripts to the top of the list
• Pattern tester — Test any URL to see which scripts would run on it
• Activity log — Timestamped log of all installs, updates, and errors
• Script health — Visual indicators for scripts with errors or stale updates
• Tampermonkey import — Import from Tampermonkey's .txt backup format
• Batch URL install — Paste multiple .user.js URLs to install at once
• Script notes — Personal notes per script, saved with settings
• Version diff view — Compare any previous version against current code
• Script folders — Organize scripts into color-coded folders with drag-and-drop
• Workspaces — Named snapshots of enabled/disabled script states for quick context switching
• Command palette — Ctrl+K to fuzzy-search actions, scripts, and settings
• Execution profiling — Per-script timing stats with color-coded performance badges
• Performance budgets — Configurable time budget per script with visual over-budget indicators
• Column visibility — Toggle which columns appear in the script table
• Full-text search — Prefix with code: to search inside script source code
• Copy install URL — One-click clipboard copy of script download/update URL

• Full @match, @include, @exclude, @exclude-match support
• User overrides — Add custom match patterns without editing script code
• Per-pattern toggles — Disable individual original patterns per-script
• Glob and regex pattern support

Sync scripts across devices with 5 providers:

• Monaco Editor — Same editor that powers VS Code, loaded in a sandboxed iframe
• Tabbed editing — Open multiple scripts simultaneously with browser-style tabs (middle-click to close)
• Unsaved indicators — Visual dot on tabs with pending changes
• 4 editor themes — Dark, Light, Catppuccin Mocha, OLED
• Status bar — Line count and cursor position display
• IntelliSense — Autocomplete for GM API functions and @metadata directives
• Code folding, bracket matching, bracket pair colorization, auto-close
• Search & replace (Ctrl+F / Ctrl+H)
• Real-time userscript metadata linting
• Code beautifier — One-click indentation normalization
• Snippet insert — 7 GM API code templates from the toolbar
• Open in vscode.dev for external editing

• Network inspector — View all GM_xmlhttpRequest + fetch/XHR/WebSocket/sendBeacon calls from userscripts
• Execution profiler — See run count, avg/total time, and errors per script
• HAR export — Export network log in standard HAR format
• Auto-refreshes every 3 seconds

• Persistent companion panel — Always visible alongside the active page (Chrome 114+)
• Shows scripts running on the current page with toggles, timing badges, and error dots
• Live updates on tab navigation
• Quick access to dashboard and script creation

• Cryptographic signing — Sign scripts with your Ed25519 keypair
• Signature verification — Verify integrity of installed scripts
• Trust store — Manage trusted author public keys
• @signature metadata tag embedded in script header

• AST-based analyzer — 31 risk pattern detectors using Acorn parser
• Zero false positives — AST walk ignores comments and strings
• Risk scoring — Color-coded risk level (minimal/low/medium/high)
• Categories: execution, data access, network, fingerprinting, obfuscation, mining, DOM hijacking
• Shown on install page before script installation

• Script isolation — USER_SCRIPT world via chrome.userScripts API, per-script worldId (Chrome 133+)
• Static analysis — AST-based risk scoring with 31 pattern detectors on every install
• Script signing — Ed25519 cryptographic signatures with trust store
• Blacklist system — Remote + manual blacklists
• Permission analysis — Visual @grant permission breakdown on install
• @connect validation — Restrict XHR domains
• SRI verification — @require URLs with #sha256= hash are verified after fetch
• CSP handling — Works on sites with strict Content Security Policies
• Zero telemetry — No phone home, all data stays local

• ZIP — Full backup with scripts + settings
• JSON — Text-based backup
• File import — Drag and drop .user.js or .zip files anywhere on the dashboard
• URL import — Install directly from any URL
• Clipboard import — Paste script code directly

Available in 8 languages:

English • German • Spanish • French • Japanese • Portuguese • Russian • Chinese

1. Clone or download this repository:

   git clone https://github.com/SysAdminDoc/ScriptVault.git
   cd ScriptVault

2. Open Chrome and navigate to chrome://extensions

3. Enable Developer mode (toggle in top right)

4. Click Load unpacked and select the repository folder

5. Chrome 138+: Click the extension's "Details" and enable Allow User Scripts

Install ScriptVault from the Chrome Web Store

// ==UserScript==
// @name           Script Name
// @namespace      https://example.com
// @version        1.0.0
// @description    What the script does
// @author         Your Name
// @match          https://example.com/*
// @include        http://example.org/*
// @exclude        *://example.com/private/*
// @exclude-match  *://admin.example.com/*
// @grant          GM_getValue
// @grant          GM_setValue
// @grant          GM_xmlhttpRequest
// @require        https://code.jquery.com/jquery-3.6.0.min.js
// @resource       myCSS https://example.com/style.css
// @icon           https://example.com/icon.png
// @run-at         document-end
// @connect        api.example.com
// @downloadURL    https://example.com/script.user.js
// @updateURL      https://example.com/script.meta.js
// @supportURL     https://github.com/user/repo/issues
// @homepageURL    https://github.com/user/repo
// @license        MIT
// @antifeature    tracking
// @tag            productivity
// @priority       10
// @inject-into    auto
// @compatible     chrome
// @incompatible   firefox Needs polyfill
// @contributionURL https://example.com/donate
// @webRequest     {"selector":"*ad*","action":"cancel"}
// @top-level-await
// ==/UserScript==

ScriptVault/
├── manifest.json              # Chrome MV3 manifest
├── manifest-firefox.json      # Firefox MV3 manifest
├── esbuild.config.mjs         # Cross-platform build pipeline
├── .env.example               # Safe template for Chrome Web Store publishing credentials
├── background.js              # Service worker (built from source modules)
├── background.core.js         # Main service worker logic (~5500 lines)
├── content.js                 # Content script bridge (USER_SCRIPT <-> background)
├── offscreen.html/js          # Offscreen document (AST analysis, 3-way merge)
├── build-background.sh        # Concatenates modules into background.js
├── build.sh                   # Packages CWS-ready ZIP
├── bg/
│   ├── analyzer.js            # AST-based static analysis engine
│   ├── netlog.js              # Network request logger
│   ├── signing.js             # Ed25519 script signing
│   └── workspaces.js          # Workspace state manager
├── modules/
│   ├── storage.js             # Settings, scripts, values, folders
│   ├── sync-providers.js      # WebDAV, Google Drive, Dropbox, OneDrive
│   ├── resources.js           # @resource/@require cache
│   ├── xhr.js                 # XHR abort tracking
│   └── i18n.js                # Inline translations (8 languages)
├── shared/
│   └── utils.js               # escapeHtml, generateId, sanitizeUrl, formatBytes
├── pages/
│   ├── dashboard.html/js      # Main dashboard + Monaco editor (~5000 lines)
│   ├── popup.html/js          # Toolbar popup
│   ├── install.html/js        # Script installation page
│   ├── sidepanel.html/js      # Persistent side panel (Chrome 114+)
│   ├── devtools.html          # DevTools registration
│   ├── devtools-panel.html/js # DevTools network + profiling UI
│   ├── editor-sandbox.html    # Sandboxed Monaco editor iframe
│   └── monaco-adapter.js      # CodeMirror-to-Monaco API bridge
├── lib/
│   ├── codemirror/            # CodeMirror (lint only)
│   ├── acorn.min.js           # Acorn JS parser for AST analysis
│   ├── diff.min.js            # diff.js for 3-way merge
│   └── fflate.js              # ZIP compression
├── images/                    # Extension icons
└── _locales/                  # 8 language translations

Contributions are welcome. Feel free to open a Pull Request.

1. Fork the repository
2. Create your feature branch (git checkout -b feature/my-feature)
3. Commit your changes
4. Push to the branch (git push origin feature/my-feature)
5. Open a Pull Request

MIT License — see LICENSE for details.

• Tampermonkey — Setting the standard in userscript management
• ViolentMonkey — Manifest V3 inspiration
• Monaco Editor — The VS Code editor powering the script editor
• Acorn — JavaScript parser for AST-based static analysis
• jsdiff — Text diffing for 3-way sync merge
• fflate — Fast ZIP compression

ScriptVault v3.10.1
Your scripts, your rules — locked down and loaded