Top Risks

• Google brand impersonation: developer is outlook.com user, not Google — confirmed is_impersonation=true
• Free-webmail developer (outlook.com) with no verified business identity
• 24-month stale update — extension may be abandoned or ripe for takeover
• Privacy policy admits data collection and third-party sharing without retention disclosure
• manifest_source=html_fallback means full permission surface cannot be verified

Evidence

• brand_impersonation store brand_mention.is_impersonation=true; mentions 'google' but developer domain is outlook.com, confirmed_owner=false
• free_webmail_developer store developer_email=easycalendarplan@outlook.com; no verified business domain
• manifest_unavailable store manifest_source=html_fallback; permissions cannot be authoritatively enumerated
• staleness store last_updated=July 2024; months_since_update=24; maintenance risk at 6.0
• privacy_policy_third_party_sharing api Policy fetched; scope_extension=true, data_collection=true, third_party_sharing=true, retention=false
• no_rating store rating=0, rating_count=0; no community trust signal available
• cve_findings crx cve_findings_raw=[]; no CVE exposure detected
• code_findings crx code_findings_raw=[]; js_files_scanned=0; no code surface observable due to html_fallback

Pillar Scores

Bookkeeping