fc-oss

Warpcast

Software developer, open source enthusiast, privacy advocate.

Clear Wallet Open-source privacy focused wallet: https://clear-wallet.flashsoft.eu/


Did this extension in a few hours, it will put a "quote to Warpcast" button on every tweet on X.com 

I will put the Chrome download link in the repo readme once it is approved, repo link: https://github.com/andrei0x309/x-to-warpcast-extension

I need to make some minor changes after approval and re-release.

I mean I have 7 or 8 extensions(with a few thousand of active users) on Chrome Store(plus apps on Google Play) all open source , my Google account has very good reputation over the years, I generally get insta review approve.

One of the extension is a wallet that's listed on many websites Wallet Connect, alchemy even Ethereum.org.

Anyway yeah an extension can do some damage, depending on the permissions, the wallet one needs a wide range of permissions, this one with the quote it only request access to X.com in theory the worst thing an extension with such permissions could do is get your X user token.

But the script injected into X is super small and simple any amateur can analyze it https://github.com/andrei0x309/x-to-warpcast-extension/blob/main/src%2Fclient%2Finject.ts to see how it works and that it doesn't make external calls.

Probably when you get something from Google if the developer has over 3-4 things published the risk of getting malware is extremely low, not to mention if everything is FOSS.

this might be a dumb q but ,,, short of reading all the code, how do I get comfortable with the security implications of using a random chrome extension (no offense, lol)