1. A method comprising: providing, by a computer, a plugin interface for enabling browser-based code to execute restricted system operations that access native system resources of a user machine, the restricted system operations are executed by a plurality of computer program code components stored on the user machine, each of the computer code components comprise a native code portion and the plugin interface comprising a native code common library that enables invocation of the computer code components upon receiving a respective type of user permission associated with each of the computer code components; including, by the computer, a first reference to one of the computer program code components in computer program script code executed in a web browser on the user machine; configuring, by the computer, the plugin interface to receive a description of at least one component operation associated with the referenced computer program code component in response to the first reference, the at least one component operation operable to cause execution of at least one of the restricted system operations; enabling, by the computer, generation of a risk rating for the referenced computer program code component to be executed by the user machine, wherein the risk rating indicates a risk posed to the user machine by the referenced computer program code component should the user machine execute the referenced program code component, the risk rating associated with the at least one component operation and a risk level, the risk level is selected from at least two risk levels based upon a signed digital certificate associated with the component; generating, by the computer, a description of the at least one component operation related to the restricted system operation based on the interface definition; and prompting, by the computer via the plugin interface, a user for the respective type of user permission associated with the at least one restricted system operation, wherein the prompt is configured to display the risk rating associated with the component operation and the description of the component operation wherein the description comprises at least one term specific to the referenced computer code component.