From a blog post in the subject:

At a distance, tonka beans look a bit like elongated raisins, or shrunken prunes. In many countries around the world, they are prized for the flavor and aroma boost that they can add to dishes. The taste and scent of the beans are reminiscent of vanilla and almond mixed together, though there are other warm notes, as well. But you won’t find them in the spice aisle of your favorite American supermarket because the FDA banned them in 1954.

The reason? A chemical called coumarin found in the beans was shown to cause liver damage in animals, per the Journal of Pharmacology and Experimental Therapeutics. Coumarin is incredibly common and is found in things like strawberries, cherries, licorice, and even fresh cut grass, which is what makes your lawn smell that way.

Grown in Central and South America, tonka beans are seeds of the kumaru tree. Also known as Brazilian teak, the seeds were traditionally used medicinally, but today the wood is used in flooring, on boats, and to make tool handles. Its versatility in flavoring both sweet and savory dishes is what makes it desirable to chefs everywhere. You can find it in everything from Caribbean black cake to even one of Tasting Table’s 13 bucket list beers from overseas.

The flavor imparted by tonka beans is much more complex than you might think. It’s described in such lofty terms that you’d be forgiven for thinking everyone who writes about it is being poetic. Terms like “the most versatile,” “hypnotic,” and “transcendent” are tossed around by journalists and chefs. It’s included in dishes that range from ice cream to mashed potatoes, and braised chicken.

Despite the restrictions, tonka beans have shown up on United States menus, like in the porcini mushroom brulee served at New York’s Timna. Apparently, the restrictions against using it aren’t very strictly enforced. But also, the regulation may be unreasonable. A single tonka bean can flavor as many as 80 dishes. A human would need to eat 30 whole beans to start experiencing toxic effects. Therefore, it seems the ban took place out of an abundance of caution.

If you know where to look, you can find chefs all across the U.S. adding tonka to their menus. Whether it’s grated over tres leches cake in New Orleans or a panna cotta in New York, it’s adding unique notes and pushing some dishes over the top with flavor. Will it ever become commonplace in stores? That’s tough to say, given the reputation.

No problem. Good luck on your search.

https://github.com/wallabag/wallabagger

It just lets you save, tag, and delete though. No list unfortunately.

I’ve been happy with wallabag.

I don’t think the extension meets your list/search requirements though.

Thanks for putting this together. Stuff like this is good for making it more approachable. I definitely have relatives that would benefit from this.

One note though, it would be good if the key included all of the icons and not just the three causes.

As the other commented pointed out, it would also be good to differentiate decentralized services, for example in the category with Mastodon and Bluesky.

Secure Annex has now found that the third wave uses the packages listed below.

VS Marketplace

iconkieftwo.icon-theme-materiall
prisma-inc.prisma-studio-assistance
prettier-vsc.vsce-prettier
flutcode.flutter-extension
csvmech.csvrainbow
codevsce.codelddb-vscode
saoudrizvsce.claude-devsce
clangdcode.clangd-vsce
cweijamysq.sync-settings-vscode
bphpburnsus.iconesvscode
klustfix.kluster-code-verify
vims-vsce.vscode-vim
yamlcode.yaml-vscode-extension
solblanco.svetle-vsce
vsceue.volar-vscode
redmat.vscode-quarkus-pro
msjsdreact.react-native-vsce

Open VSX

bphpburn.icons-vscode
tailwind-nuxt.tailwindcss-for-react
flutcode.flutter-extension
yamlcode.yaml-vscode-extension
saoudrizvsce.claude-dev
saoudrizvsce.claude-devsce
vitalik.solidity

Once the packages are accepted on the marketplaces, the publishers push an update that introduces the malicious code, then inflate their download counts to make them appear legitimate and trustworthy.

Also, artificially increasing download counts can manipulate search results, with the malicious extension appearing higher in the results, often very close to the legitimate projects it impersonates.

I’m sure it’s a mix, but I would expect fewer people that have GrapheneOS because they have a Pixel than have a Pixel because they are the only devices supported by GrapheneOS.