Hide morning in Calendar

Version 0.1.9 View in Chrome Web Store

Last scanned: 17 days ago | force re-scan

Extension Details

Developer: https://www.raphaelschaad.com/

Rating: 3.8 ★ (134 ratings)

Users: 10,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension has a reasonable user base of 10,000 users and maintains a decent 3.8-star rating from 134 reviews. The developer provides a personal website (raphaelschaad.com), which adds some transparency and accountability. The extension's purpose is straightforward - hiding morning hours in Google Calendar - which aligns with its minimal technical footprint.

Concerns:

The primary concern is the use of Manifest Version 2, which lacks the enhanced security protections of Manifest V3. While this isn't immediately dangerous, it represents outdated technology that Google is phasing out. The extension only targets Google Calendar, which is appropriate for its stated function, but users should be aware that any extension with calendar access could potentially view appointment details.

The extension appears to be a simple utility tool with limited scope, requesting only the necessary access to modify Google Calendar's display. The absence of background scripts and additional permissions suggests a focused, lightweight implementation.

Recommendations:

This extension presents minimal risk for most users. You can safely install it in your main Chrome profile. However, consider checking if the developer has plans to update to Manifest V3 for future compatibility. Monitor for updates, as Google will eventually deprecate Manifest V2 extensions. If you're particularly security-conscious, you could run it in a separate profile, though this seems unnecessary given the low risk level.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Content Security Policy:

script-src 'self'; object-src 'self';

Embedded URLs (17 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
http://www.bohemiancoding.com/sketch	https://clients2.google.com/service/update2/crx
https://calendar.google.com/calendar/	https://segment.com/docs/spec/identify/
https://stackoverflow.com/questions/3700326/decode-amp-back-to-in-javascript	https://www.tada.coach/sleep
https://calendar.google.com/calendar/r/week	https://calendar.google.com/calendar/r/week/2018/10/12
https://calendar.google.com/calendar/r#main_7	https://calendar.google.com/calendar/r
https://calendar.google.com/calendar/r/customday	https://calendar.google.com/calendar/b/1/r/customday/2018/11/20
https://calendar.google.com/calendar/r/eventedit	https://calendar.google.com/calendar/r?pli=
https://calendar.google.com/calendar/b/1/r/day/2018/12/12

Raw Manifest

{
  "name": "Hide morning in Calendar",
  "icons": {
    "16": "images/bedtime-icon-16.png",
    "32": "images/bedtime-icon-32.png",
    "64": "images/bedtime-icon-64.png",
    "128": "images/bedtime-icon-128.png"
  },
  "version": "0.1.9",
  "background": {
    "scripts": [
      "src/background/externals/amplitudeSnippet.js",
      "src/legacy/impure.js",
      "src/background/bgStateManager.js",
      "src/background/bgMain.js"
    ]
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Hide morning hours on your Google Calendar to stop wasting space on your screen for empty hours.",
  "permissions": [],
  "browser_action": {
    "css": "src/browserAction/browserAction.css",
    "default_icon": {
      "16": "images/bedtime-icon-16.png",
      "32": "images/bedtime-icon-32.png",
      "64": "images/bedtime-icon-64.png",
      "128": "images/bedtime-icon-128.png"
    },
    "default_popup": "src/browserAction/browserAction.html"
  },
  "content_scripts": [
    {
      "js": [
        "src/legacy/pure.js",
        "src/legacy/impure.js",
        "src/content/dom/find/gcalElements.js",
        "src/content/dom/find/tadaElements.js",
        "src/content/dom/domManipulation.js",
        "src/content/dom/domAnalysis.js",
        "src/content/dom/tadaElems.js",
        "src/content/dataManipulation.js",
        "src/content/micro/cStateManager.js",
        "src/content/micro/gatherEssentials.js",
        "src/content/micro/environmentWatchdog.js",
        "src/content/cMain.js"
      ],
      "css": [
        "src/tadaSleep.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://calendar.google.com/calendar/*"
      ]
    }
  ],
  "manifest_version": 2,
  "content_security_policy": "script-src 'self'; object-src 'self';",
  "web_accessible_resources": [
    "images/*"
  ]
}

by ✦ Astarte