Hide morning in Calendar

Version 0.1.9 View in Chrome Web Store

Last scanned: 1 day ago | force re-scan

Extension Details

Developer: https://www.raphaelschaad.com/

Rating: 3.8 ★ (129 ratings)

Users: 9,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension has a reasonable user base of 9,000 users and maintains a decent 3.8-star rating from 129 reviews, indicating general user satisfaction. The developer provides a personal website (raphaelschaad.com), which adds some transparency and accountability. The extension's purpose is clearly defined and straightforward - hiding morning hours in Google Calendar.

Concerns:

The primary concern is the use of Manifest Version 2, which has weaker security protections compared to the newer Manifest V3 standard. While this doesn't pose immediate danger, it represents outdated technology that may have security vulnerabilities. The extension only targets Google Calendar, which is appropriate for its stated functionality, but users should be aware that any extension with calendar access could potentially view or modify calendar data.

The relatively small number of reviews (129) compared to users (9,000) suggests either newer adoption or lower engagement, which makes it harder to assess long-term reliability.

Recommendations:

This extension appears safe for regular use given its specific, limited scope and reasonable trust indicators. Users concerned about security could run it in a separate Chrome profile as a precaution. Consider monitoring for updates that might migrate to Manifest V3, and be prepared to switch to alternative extensions if this one becomes unsupported. The low risk level makes it suitable for most users who need this specific calendar functionality.

Findings

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Content Security Policy:

script-src 'self'; object-src 'self';

Embedded URLs (17 total):

http://www.w3.org/2000/svg	http://www.w3.org/1999/xlink
http://www.bohemiancoding.com/sketch	https://clients2.google.com/service/update2/crx
https://calendar.google.com/calendar/	https://segment.com/docs/spec/identify/
https://stackoverflow.com/questions/3700326/decode-amp-back-to-in-javascript	https://www.tada.coach/sleep
https://calendar.google.com/calendar/r/week	https://calendar.google.com/calendar/r/week/2018/10/12
https://calendar.google.com/calendar/r#main_7	https://calendar.google.com/calendar/r
https://calendar.google.com/calendar/r/customday	https://calendar.google.com/calendar/b/1/r/customday/2018/11/20
https://calendar.google.com/calendar/r/eventedit	https://calendar.google.com/calendar/r?pli=
https://calendar.google.com/calendar/b/1/r/day/2018/12/12

Raw Manifest

{
  "name": "Hide morning in Calendar",
  "icons": {
    "16": "images/bedtime-icon-16.png",
    "32": "images/bedtime-icon-32.png",
    "64": "images/bedtime-icon-64.png",
    "128": "images/bedtime-icon-128.png"
  },
  "version": "0.1.9",
  "background": {
    "scripts": [
      "src/background/externals/amplitudeSnippet.js",
      "src/legacy/impure.js",
      "src/background/bgStateManager.js",
      "src/background/bgMain.js"
    ]
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Hide morning hours on your Google Calendar to stop wasting space on your screen for empty hours.",
  "permissions": [],
  "browser_action": {
    "css": "src/browserAction/browserAction.css",
    "default_icon": {
      "16": "images/bedtime-icon-16.png",
      "32": "images/bedtime-icon-32.png",
      "64": "images/bedtime-icon-64.png",
      "128": "images/bedtime-icon-128.png"
    },
    "default_popup": "src/browserAction/browserAction.html"
  },
  "content_scripts": [
    {
      "js": [
        "src/legacy/pure.js",
        "src/legacy/impure.js",
        "src/content/dom/find/gcalElements.js",
        "src/content/dom/find/tadaElements.js",
        "src/content/dom/domManipulation.js",
        "src/content/dom/domAnalysis.js",
        "src/content/dom/tadaElems.js",
        "src/content/dataManipulation.js",
        "src/content/micro/cStateManager.js",
        "src/content/micro/gatherEssentials.js",
        "src/content/micro/environmentWatchdog.js",
        "src/content/cMain.js"
      ],
      "css": [
        "src/tadaSleep.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://calendar.google.com/calendar/*"
      ]
    }
  ],
  "manifest_version": 2,
  "content_security_policy": "script-src 'self'; object-src 'self';",
  "web_accessible_resources": [
    "images/*"
  ]
}

by ✦ Astarte