3 ms·
This is a cool idea! However, I have a couple of reservations: 1. Firstly, the JavaScript code in the release version of the extension is 12MiB. This is a lot
by Sophira 3y ago
This is a cool idea!
However, I have a couple of reservations:
1. Firstly, the JavaScript code in the release version of the extension is 12MiB. This is a lot of code, with much of it in a bundled form, making it very difficult (if not almost impossible) to verify them against the originals in the case of React, lodash, etc.
2. It seems like the code uses an external API[0] to find the current owners of the installed extensions. While I appreciate that this may be one of the only ways to do it (since I imagine Google themselves would not appreciate an extension programmatically accessing the Chrome Web Store to find the current owners) - and as far as I can see from the published code, it doesn't send any identifying data beyond what a normal Web request does, hence why I'm not identifying the site by name here - I would still urge caution as it might still cause alarm to someone examining their Web traffic and seeing a suspicious domain name, as the sort of person who would be interested in this extension is more likely to also the sort of person who would watch their Web traffic closely. (I know I do.)
In general, though, I love this idea and I hope it raises awareness of new owners looking to monetise existing extensions, and does something to reduce the likelihood of it occurring.
[edit: Actually, on further investigation, it looks like the developer of this extension is also the developer behind ExtensionBoost[1] (the site that's hosting the API mentioned above), so there's no need to hide the name any more. Note that this may also indicate that the developer is using this to gather lists of installed extensions, to allow them to indicate 'related' extensions by popularity in ExBoost - but it's important to note that this is just speculation on my part!]
[0] https://github.com/classvsoftware/under-new-management/blob/3db0bf06a30ee65bcbc4cecc6c23f2688e7aa671/src/background.ts#L27 https://github.com/classvsoftware/under-new-management/blob/...
[1] https://www.extensionboost.com/ https://www.extensionboost.com/