Open/close source is not going to help you here: nothing stops a malicious author from publishing one version open source while publishing the malicious one. T

Open/close source is not going to help you here: nothing stops a malicious author from publishing one version open source while publishing the malicious one. The only way to find out is to run the extension in Chrome and inspect it with the debugger.