Hide morning in Calendar

Version 0.1.9 View in Chrome Web Store

Last scanned: about 1 month ago | force re-scan

Extension Details

Developer: www.raphaelschaad.com

Rating: 3.8 ★ (133 ratings)

Size: 62.63KiB

Last Updated: August 10, 2021

Users: 20,000

Context-Aware Verdict

LOW

Risk Level

Trust Factors:

- The extension has a relatively high number of users (20,000), indicating some level of trust and popularity.

- The developer has a website (www.raphaelschaad.com), which adds a degree of legitimacy and transparency.

- The extension has a decent rating (3.8/5) from 133 reviews, suggesting general user satisfaction.

Concerns:

- The extension requests access to all pages on the calendar.google.com domain, which may be more than necessary for its stated purpose of hiding mornings in the calendar.

- The extension uses the older Manifest Version 2, which has fewer security restrictions than the newer Manifest V3.

Recommendations:

- While the overall risk is low, it's advisable to exercise caution when installing extensions, especially those that request broad permissions.

- Consider reviewing the extension's source code (if available) or reaching out to the developer for clarification on the requested permissions.

- If you decide to use the extension, it's recommended to run it in a separate Chrome profile or a dedicated browser instance to isolate its potential impact.

- Periodically review installed extensions and remove those that are no longer needed or have become outdated.

Security Analysis

LOW

Overall Risk

Based on 1 total findings, ranked without considering overall context, including 0 high-risk and 1 medium-risk findings.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Content Security Policy:

script-src 'self'; object-src 'self';

Embedded URLs (17 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
http://www.bohemiancoding.com/sketch	https://clients2.google.com/service/update2/crx
https://calendar.google.com/calendar/	https://segment.com/docs/spec/identify/
https://stackoverflow.com/questions/3700326/decode-amp-back-to-in-javascript	https://www.tada.coach/sleep
https://calendar.google.com/calendar/r/week	https://calendar.google.com/calendar/r/week/2018/10/12
https://calendar.google.com/calendar/r#main_7	https://calendar.google.com/calendar/r
https://calendar.google.com/calendar/r/customday	https://calendar.google.com/calendar/b/1/r/customday/2018/11/20
https://calendar.google.com/calendar/r/eventedit	https://calendar.google.com/calendar/r?pli=
https://calendar.google.com/calendar/b/1/r/day/2018/12/12

Raw Manifest

{
  "name": "Hide morning in Calendar",
  "icons": {
    "16": "images/bedtime-icon-16.png",
    "32": "images/bedtime-icon-32.png",
    "64": "images/bedtime-icon-64.png",
    "128": "images/bedtime-icon-128.png"
  },
  "version": "0.1.9",
  "background": {
    "scripts": [
      "src/background/externals/amplitudeSnippet.js",
      "src/legacy/impure.js",
      "src/background/bgStateManager.js",
      "src/background/bgMain.js"
    ]
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Hide morning hours on your Google Calendar to stop wasting space on your screen for empty hours.",
  "permissions": [],
  "browser_action": {
    "css": "src/browserAction/browserAction.css",
    "default_icon": {
      "16": "images/bedtime-icon-16.png",
      "32": "images/bedtime-icon-32.png",
      "64": "images/bedtime-icon-64.png",
      "128": "images/bedtime-icon-128.png"
    },
    "default_popup": "src/browserAction/browserAction.html"
  },
  "content_scripts": [
    {
      "js": [
        "src/legacy/pure.js",
        "src/legacy/impure.js",
        "src/content/dom/find/gcalElements.js",
        "src/content/dom/find/tadaElements.js",
        "src/content/dom/domManipulation.js",
        "src/content/dom/domAnalysis.js",
        "src/content/dom/tadaElems.js",
        "src/content/dataManipulation.js",
        "src/content/micro/cStateManager.js",
        "src/content/micro/gatherEssentials.js",
        "src/content/micro/environmentWatchdog.js",
        "src/content/cMain.js"
      ],
      "css": [
        "src/tadaSleep.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://calendar.google.com/calendar/*"
      ]
    }
  ],
  "manifest_version": 2,
  "content_security_policy": "script-src 'self'; object-src 'self';",
  "web_accessible_resources": [
    "images/*"
  ]
}