4 ms·
> I wish they'd only permit manually vetted FOSS extensions, separating developers (who might secretly sell out) from the ability to push updates directly to us
by GeekyBear 3y ago
> I wish they'd only permit manually vetted FOSS extensions, separating developers (who might secretly sell out) from the ability to push updates directly to users.
The developer does have to supply access to the code and updates do have to be vetted before being pushed to users for an extension to be included in the recommended extensions program.
This is a big advantage over Chromium based browsers, since we know that extension authors have sold their extension to less that scrupulous persons in the past who slip in malware without the user even knowing that a formerly well regarded extension has changed hands.
I've seen more than one post on HN with extension developers revealing how common it is to get offers to buy out an extension with a large user base.
- lupusreal 3y agoMy point is that they shouldn't be publishing any extensions except those vetted extensions, or they should make it easier for another organization to publish extensions. Both Google and Mozilla publish unvetted extensions and consequently their extension "stores" are on the whole very sleazy.