The extension has a perfect 5.0 rating, though this is based on only 12 reviews which limits its reliability. With 3,000 users, it has modest adoption but lacks the widespread validation of more popular extensions. The absence of clear author and developer information raises transparency concerns, making it difficult to assess the creator's reputation or accountability.
The primary concern is the broad host permissions that extend beyond YouTube domains, which contradicts the extension's specific YouTube PiP functionality. While the scripting permission is appropriate for implementing picture-in-picture features, the overly broad host permissions create unnecessary security exposure. The limited user base and review count make it harder to verify the extension's behavior in practice. The lack of developer information prevents users from researching the creator's track record or contacting them with concerns.
Consider running this extension in a separate Chrome profile to isolate potential risks from your main browsing environment. Before installation, verify that similar functionality isn't available through YouTube's native PiP feature or more established extensions with better transparency. Monitor the extension's behavior after installation and remove it if you notice any unexpected activity. Given the broad permissions, avoid using this extension while logged into sensitive accounts or browsing confidential information.
| https://clients2.google.com/service/update2/crx |
{ "name": "YouTube PiP Extension", "icons": { "16": "images/logo16.png", "48": "images/logo48.png", "128": "images/logo128.png" }, "action": { "default_popup": "popup.html" }, "version": "1.0", "commands": { "skip-forward": { "description": "Skip Forward", "suggested_key": { "mac": "Alt+D", "default": "Alt+D" } }, "skip-backward": { "description": "Skip Backward", "suggested_key": { "mac": "Alt+A", "default": "Alt+A" } }, "toggle-play-pause": { "description": "Toggle Play/Pause", "suggested_key": { "mac": "Alt+P", "default": "Alt+P" } } }, "background": { "service_worker": "background.js" }, "update_url": "https://clients2.google.com/service/update2/crx", "permissions": [ "scripting" ], "host_permissions": [ "*://*.youtube.com/*" ], "manifest_version": 3 }
ⓘ CRXaminer has partnered with our friends at Secure Annex to provide additional findings unique to their platform.
Secure Annex also analyzes extensions from other browsers, IDEs, and can continuously monitor.
This extension may not yet be analyzed by Secure Annex.