[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Sunset

Version 1 View in Chrome Web Store

Last scanned: 21 days ago | force re-scan

Extension Details

Developer: http://mahadevchromethemes.blogspot.com/

Rating: 4.7 ★ (1.3K ratings)

Users: 20,000

Context-Aware Verdict

MEDIUM

Overall Risk

Trust Factors:

The extension has a solid user base of 20,000 users with a high rating of 4.7 stars from 1,300+ reviews, indicating general user satisfaction. However, the author appears to be an individual blogger rather than an established company, which reduces institutional credibility. The lack of detailed developer information and missing technical details like manifest version, size, and last update date raise transparency concerns.

Concerns:

The primary concern is the use of an older Manifest Version, which lacks the enhanced security protections of Manifest V3. This older framework has weaker permission controls and less restrictive content security policies. The incomplete technical information provided makes it difficult to assess the full scope of permissions and potential security implications. The individual developer status means less accountability compared to established companies with formal security practices.

Recommendations:

Consider running this extension in a separate Chrome profile if you decide to use it, especially given the older manifest version. Monitor for updates that might migrate to Manifest V3 for improved security. Given the theme nature suggested by the author's blog URL, verify that the extension's functionality matches its stated purpose. Look for alternative sunset-themed extensions from more established developers or those using Manifest V3 if security is a primary concern. Regularly review the extension's permissions if you choose to install it.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version , which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Raw Manifest

{
  "name": "Sunset",
  "theme": {
    "tints": {
      "frame": [
        -1,
        -1,
        -1
      ],
      "buttons": [
        -1,
        -1,
        -1
      ],
      "background_tab": [
        -1,
        0.5,
        0.75
      ],
      "frame_inactive": [
        -1,
        -1,
        0.75
      ],
      "frame_incognito": [
        -1,
        0.2,
        0.35
      ],
      "frame_incognito_inactive": [
        -1,
        0.3,
        0.6
      ]
    },
    "colors": {
      "frame": [
        66,
        116,
        201
      ],
      "toolbar": [
        93,
        63,
        101
      ],
      "ntp_text": [
        224,
        224,
        224
      ],
      "tab_text": [
        255,
        255,
        255
      ],
      "bookmark_text": [
        224,
        224,
        224
      ],
      "frame_inactive": [
        161,
        182,
        228
      ],
      "ntp_background": [
        255,
        255,
        255
      ],
      "frame_incognito": [
        83,
        106,
        139
      ],
      "button_background": [
        0,
        0,
        0,
        0
      ],
      "tab_background_text": [
        224,
        224,
        224
      ],
      "frame_incognito_inactive": [
        126,
        139,
        156
      ]
    },
    "images": {
      "theme_frame": "images/theme_frame.png",
      "theme_toolbar": "images/theme_toolbar.png",
      "theme_ntp_background": "images/theme_ntp_background.png",
      "theme_tab_background": "images/theme_tab_background.png",
      "theme_ntp_attribution": "images/theme_ntp_attribution.png",
      "theme_window_control_background": "images/theme_window_control_background.png"
    },
    "properties": {
      "ntp_background_repeat": "no-repeat",
      "ntp_background_alignment": "bottom"
    }
  },
  "version": "1",
  "update_url": "http://clients2.google.com/service/update2/crx",
  "description": "Supported Resolution:1920x1200"
}

by ✦ Astarte

Sunset

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Embedded URLs (1 total):

Raw Manifest

Detections

Manifest Findings