You don't need to do a thorough code review to benefit from the source code: the Chrome/Chromium web browser allows the user to load unpacked extensions directl

You don't need to do a thorough code review to benefit from the source code: the Chrome/Chromium web browser allows the user to load unpacked extensions directly from any folder. So simply git clone the extension, have a quick look at the recently opened (and closed) issues/PRs for any red flags, git checkout the most recent tag, and load it as unpacked. Then you are guaranteed to have the source code of exactly the extension you're running, and have done a reasonable amount due diligence for malware. And if you're interested at any point in the future you can do a code review. It's a simple strategy. Here's an example: https://github.com/igrigorik/videospeed https://github.com/igrigorik/videospeed