[ new scan ] [ statistics ] [ github ] [ twitter ]

Hide morning in Calendar

Version 0.1.9 View in Chrome Web Store

Last scanned: 2 days ago | force re-scan

Extension Details

Developer: https://www.raphaelschaad.com/

Rating: 3.8 ★ (134 ratings)

Users: 10,000

Context-Aware Verdict

LOW

Risk Level

Trust Factors:

The extension has a reasonable user base of 10,000 downloads and maintains a decent 3.8-star rating from 134 reviews, indicating general user satisfaction. The developer provides a personal website (raphaelschaad.com), which adds some transparency and accountability. The extension's purpose is clearly defined and straightforward - hiding morning hours in Google Calendar.

Concerns:

The primary concern is the use of Manifest Version 2, which lacks the enhanced security protections of Manifest V3. While this doesn't pose immediate danger, it represents outdated security architecture. The extension's scope is appropriately limited to Google Calendar pages only, which is good for privacy containment. However, the lack of recent update information makes it difficult to assess ongoing maintenance and security patching.

The extension appears to have minimal permissions and operates only on Google Calendar, which significantly reduces potential attack surface. The content script injection is limited to the specific calendar domain, showing proper scope restriction.

Recommendations:

This extension presents low risk for typical users due to its limited scope and straightforward functionality. Users concerned about security could run it in a separate Chrome profile as a precaution. Consider monitoring for updates that migrate to Manifest V3, and evaluate alternative extensions if this one becomes unmaintained. The extension is generally safe for users who need its specific calendar customization feature.

Security Analysis

LOW

Overall Risk

Based on 1 total findings, ranked without considering overall context, including 0 high-risk and 1 medium-risk findings.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Content Security Policy:

script-src 'self'; object-src 'self';

Embedded URLs (17 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
http://www.bohemiancoding.com/sketch	https://clients2.google.com/service/update2/crx
https://calendar.google.com/calendar/	https://segment.com/docs/spec/identify/
https://stackoverflow.com/questions/3700326/decode-amp-back-to-in-javascript	https://www.tada.coach/sleep
https://calendar.google.com/calendar/r/week	https://calendar.google.com/calendar/r/week/2018/10/12
https://calendar.google.com/calendar/r#main_7	https://calendar.google.com/calendar/r
https://calendar.google.com/calendar/r/customday	https://calendar.google.com/calendar/b/1/r/customday/2018/11/20
https://calendar.google.com/calendar/r/eventedit	https://calendar.google.com/calendar/r?pli=
https://calendar.google.com/calendar/b/1/r/day/2018/12/12

Raw Manifest

{
  "name": "Hide morning in Calendar",
  "icons": {
    "16": "images/bedtime-icon-16.png",
    "32": "images/bedtime-icon-32.png",
    "64": "images/bedtime-icon-64.png",
    "128": "images/bedtime-icon-128.png"
  },
  "version": "0.1.9",
  "background": {
    "scripts": [
      "src/background/externals/amplitudeSnippet.js",
      "src/legacy/impure.js",
      "src/background/bgStateManager.js",
      "src/background/bgMain.js"
    ]
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Hide morning hours on your Google Calendar to stop wasting space on your screen for empty hours.",
  "permissions": [],
  "browser_action": {
    "css": "src/browserAction/browserAction.css",
    "default_icon": {
      "16": "images/bedtime-icon-16.png",
      "32": "images/bedtime-icon-32.png",
      "64": "images/bedtime-icon-64.png",
      "128": "images/bedtime-icon-128.png"
    },
    "default_popup": "src/browserAction/browserAction.html"
  },
  "content_scripts": [
    {
      "js": [
        "src/legacy/pure.js",
        "src/legacy/impure.js",
        "src/content/dom/find/gcalElements.js",
        "src/content/dom/find/tadaElements.js",
        "src/content/dom/domManipulation.js",
        "src/content/dom/domAnalysis.js",
        "src/content/dom/tadaElems.js",
        "src/content/dataManipulation.js",
        "src/content/micro/cStateManager.js",
        "src/content/micro/gatherEssentials.js",
        "src/content/micro/environmentWatchdog.js",
        "src/content/cMain.js"
      ],
      "css": [
        "src/tadaSleep.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://calendar.google.com/calendar/*"
      ]
    }
  ],
  "manifest_version": 2,
  "content_security_policy": "script-src 'self'; object-src 'self';",
  "web_accessible_resources": [
    "images/*"
  ]
}