[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Hide morning in Calendar

Version 0.1.9 View in Chrome Web Store

Last scanned: 17 days ago | force re-scan

Extension Details

Developer: https://www.raphaelschaad.com/

Rating: 3.8 ★ (131 ratings)

Users: 10,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension has a reasonable user base of 10,000 users and maintains a decent 3.8-star rating from 131 reviews, indicating general user satisfaction. The developer provides a personal website (raphaelschaad.com), which adds some transparency and accountability. The extension has a clear, specific purpose - hiding morning hours in Google Calendar - which aligns with its minimal technical footprint.

Concerns:

The primary concern is the use of Manifest Version 2, which lacks the enhanced security protections of Manifest V3. While this doesn't pose immediate danger, it represents outdated security architecture. The extension's narrow scope of only affecting Google Calendar pages limits potential attack surface, but users should be aware that V2 extensions have broader capabilities than their V3 counterparts.

The relatively low number of ratings (131) compared to users (10,000) suggests limited community feedback, making it harder to assess long-term reliability and user experience.

Recommendations:

This extension presents minimal risk for most users due to its specific functionality and limited scope. You can safely use it in your main Chrome profile. However, monitor for updates that migrate to Manifest V3, as Google will eventually phase out V2 support. Consider checking the developer's website periodically for updates or alternative solutions. If you're particularly security-conscious, you could run it in a separate profile, though this seems unnecessary given the low risk level.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Content Security Policy:

script-src 'self'; object-src 'self';

Embedded URLs (17 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
http://www.bohemiancoding.com/sketch	https://clients2.google.com/service/update2/crx
https://calendar.google.com/calendar/	https://segment.com/docs/spec/identify/
https://stackoverflow.com/questions/3700326/decode-amp-back-to-in-javascript	https://www.tada.coach/sleep
https://calendar.google.com/calendar/r/week	https://calendar.google.com/calendar/r/week/2018/10/12
https://calendar.google.com/calendar/r#main_7	https://calendar.google.com/calendar/r
https://calendar.google.com/calendar/r/customday	https://calendar.google.com/calendar/b/1/r/customday/2018/11/20
https://calendar.google.com/calendar/r/eventedit	https://calendar.google.com/calendar/r?pli=
https://calendar.google.com/calendar/b/1/r/day/2018/12/12

Raw Manifest

{
  "name": "Hide morning in Calendar",
  "icons": {
    "16": "images/bedtime-icon-16.png",
    "32": "images/bedtime-icon-32.png",
    "64": "images/bedtime-icon-64.png",
    "128": "images/bedtime-icon-128.png"
  },
  "version": "0.1.9",
  "background": {
    "scripts": [
      "src/background/externals/amplitudeSnippet.js",
      "src/legacy/impure.js",
      "src/background/bgStateManager.js",
      "src/background/bgMain.js"
    ]
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Hide morning hours on your Google Calendar to stop wasting space on your screen for empty hours.",
  "permissions": [],
  "browser_action": {
    "css": "src/browserAction/browserAction.css",
    "default_icon": {
      "16": "images/bedtime-icon-16.png",
      "32": "images/bedtime-icon-32.png",
      "64": "images/bedtime-icon-64.png",
      "128": "images/bedtime-icon-128.png"
    },
    "default_popup": "src/browserAction/browserAction.html"
  },
  "content_scripts": [
    {
      "js": [
        "src/legacy/pure.js",
        "src/legacy/impure.js",
        "src/content/dom/find/gcalElements.js",
        "src/content/dom/find/tadaElements.js",
        "src/content/dom/domManipulation.js",
        "src/content/dom/domAnalysis.js",
        "src/content/dom/tadaElems.js",
        "src/content/dataManipulation.js",
        "src/content/micro/cStateManager.js",
        "src/content/micro/gatherEssentials.js",
        "src/content/micro/environmentWatchdog.js",
        "src/content/cMain.js"
      ],
      "css": [
        "src/tadaSleep.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://calendar.google.com/calendar/*"
      ]
    }
  ],
  "manifest_version": 2,
  "content_security_policy": "script-src 'self'; object-src 'self';",
  "web_accessible_resources": [
    "images/*"
  ]
}

by ✦ Astarte