5 ms·
But there's no proof that the published source code is the source code of the extension! You still have to just trust them
by atestu 8y ago
But there's no proof that the published source code is the source code of the extension! You still have to just trust them
- keehun 8y agoYou can always load your own from source.
- anyzen 8y agoSure - but do you? Does anyone? EDIT: a better solution would be if the store itself allowed you to inspect the source that went into building the plugin. Then you would only need to trust the store itself, which you already do (when you trust the browser).
- throwawaylolx 8y agoIt's quite common among many groups of people to download and install locally as it also protects you from unwanted automatic updates. For instance, those using MetaMask or Scatter to interact with a blockchain are often advised to install the extension offline.
- anyzen 8y agoI have yet to meet a person who did it though. Though I'll admit that the argument against automatic updates is a good one..
- snaky 8y ago> the store itself allowed you to inspect the source that went into building the plugin Or at least build it from the source code, like F-Droid.
- gsich 8y agoYou don't need to install from the store.
- ibly31 8y agoThere's an extension that allows you to view the source of any Chrome extension direct from Chrome's repository. "Chrome Extension Source Viewer" I use it to audit every single app that I give permission to read each site.