You download the source when you install the extension. It's a zip file. You can unzip it and examine it yourself. Even if the developer provides a GitHub repo, how do you know it's the same as the version in the extension store?
Maybe there's a server component too, but again how would you know that the source provided is what's actually running on the server?
Comments
You download the source when you install the extension. It's a zip file. You can unzip it and examine it yourself. Even if the developer provides a GitHub repo, how do you know it's the same as the version in the extension store?
Maybe there's a server component too, but again how would you know that the source provided is what's actually running on the server?
Exactly. You can also look at the source code without installing it. I decided to check this out a couple weeks ago:
https://kaveh.page/snippets/chrome-extensions-source-code