So, apparently when chrome extensions have many users, shady companies often offer to buy said extension before secretly adding various types of malware; e.g. t

So, apparently when chrome extensions have many users, shady companies often offer to buy said extension before secretly adding various types of malware; e.g. turning the install base into a bot-net that mines crypto or something of that sort. I don't know if there is an easy way to guarantee that the code posted on a site like github is guaranteed to be the code used to build an extension... maybe some sort of hash comparison. Regardless, open source or at least verbage to assure users that they won't unwittingly be taken advantage of and that, basically, you're a kind person would be nice. The bit you said about privacy at the end of the description is what I'm talking about - it doesn't make me any extra paranoid and reassures people, even if the only way for me to be certain would be to do something unwieldy to normal users like monitoring network traffic or reverse engineering your extension from binary.