Sonatype Nexus IQ Evaluation is a Chrome extension developed by Sonatype Community. It is a free tool that works in conjunction with Sonatype Nexus Lifecycle to inspect open source packages for known vulnerabilities. To use the extension, you need to have a valid Sonatype Nexus Lifecycle instance and will be prompted to connect to your Sonatype Nexus IQ Server during setup.

The extension is designed to work with various package managers and their respective websites, including NuGet, Alpine Linux, Chocolatey, Clojars, CocoaPods, Conan, Conda, Debian, GitHub releases, Golang, Java Maven, JavaScript/Node npm, PHP Packagist/Composer, Python PyPI, R CRAN, Ruby RubyGems, Rust Crates, Nexus Proxy Repos, Artifactory Proxy Repos, and Artifactory Repo lists. By scanning these repositories, Sonatype Nexus IQ Evaluation helps identify any known vulnerabilities in the packages before you download them.

Please note that this extension is supported by Sonatype, ensuring its reliability and accuracy in detecting vulnerabilities in open source repositories.