Time Zone Converter - Savvy Time

Version 1.10 View in Chrome Web Store

Last scanned: about 1 month ago | force re-scan

Extension Details

Developer: https://savvytime.com/

Rating: 4.5 ★ (180 ratings)

Users: 100,000

Context-Aware Verdict

LOW

Overall Risk

Trust Factors:

The extension has strong trust indicators with 100,000 users and a solid 4.5-star rating from 180 reviews. The developer operates from a legitimate website (savvytime.com) focused on time zone conversion services. The extension uses Manifest V3, which provides enhanced security protections. The minimal permission set and lack of host permissions or content scripts demonstrate a privacy-conscious approach.

Concerns:

The storage permission, while necessary for a time zone converter to save user preferences and settings, does allow local data storage. However, this is entirely appropriate for the extension's functionality and poses minimal privacy risk since it cannot access external websites or transmit data.

Recommendations:

This extension presents very low risk for typical users. The single storage permission is justified and necessary for core functionality like saving preferred time zones and conversion settings. The extension can be safely installed in your main Chrome profile without concerns. The developer's transparent approach with minimal permissions and strong user feedback suggests responsible development practices. For users particularly concerned about data storage, you could periodically clear extension data through Chrome's settings, though this would reset your saved preferences.

Findings

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage

Content Security Policy:

extension_pages: script-src 'self'; object-src 'self'

Embedded URLs (35 total):

http://www.w3.org/2000/svg	https://mui.com/production-error/?code=
https://momentjs.com/timezone/docs/#/use-it/browser/	http://momentjs.com/timezone/docs/#/data-loading/.
http://momentjs.com/guides/#/warnings/define-locale/	http://momentjs.com/guides/#/warnings/js-date/
http://momentjs.com/guides/#/warnings/min-max/	http://momentjs.com/guides/#/warnings/add-inverted-param/
http://momentjs.com/guides/#/warnings/zone/	http://momentjs.com/guides/#/warnings/dst-shifted/
https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/1999/xlink
http://www.w3.org/XML/1998/namespace	http://www.w3.org/1998/Math/MathML
http://www.w3.org/1999/xhtml	https://savvytime.com/converter/
https://savvytime.com/converter	https://www.google.com/calendar/render
https://calendar.yahoo.com/?v=60	https://github.com/uxsolutions/bootstrap-datepicker
http://www.apache.org/licenses/LICENSE-2.0	https://sizzlejs.com/
https://js.foundation/	https://jquery.com/
https://jquery.org/license	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
http://themes.googleusercontent.com/static/fonts/arimo/v6/wZLYhRRxZWGToTRP78bqJQ.woff	http://themes.googleusercontent.com/static/fonts/arimo/v6/UnXpojilM3XslYxUnWuVe_esZW2xOQ-xsNqO47m55DA.woff
http://themes.googleusercontent.com/static/fonts/arimo/v6/8ezAIdgyp-Cm5_X7mWzP_g.woff	http://themes.googleusercontent.com/static/fonts/arimo/v6/_K7sg-ijHdmkwPzV9FiqaBsxEYwM7FgeyaSgU71cLG0.woff
http://www.w3.org/2000/svg%27	https://getbootstrap.com/
https://github.com/twbs/bootstrap/blob/master/LICENSE	https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
https://clients2.google.com/service/update2/crx

Raw Manifest

{
  "name": "Time Zone Converter - Savvy Time",
  "action": {
    "default_icon": {
      "16": "public/images/logo_16.png",
      "24": "public/images/logo_24.png",
      "32": "public/images/logo_32.png",
      "48": "public/images/logo_48.png",
      "128": "public/images/logo_128.png"
    },
    "default_popup": "index.html"
  },
  "version": "1.10",
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Time zone and local time converter. Compare and convert time between many locations at a time.",
  "permissions": [
    "storage"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "script-src 'self'; object-src 'self'"
  },
  "browser_specific_settings": {
    "gecko": {
      "id": "yuriy@savvytime.com"
    }
  }
}

by ✦ Astarte