Top Risks

• Privacy policy is Google's generic account policy — not scoped to this extension, admits data collection and 3rd-party sharing.
• Extension is 23 months stale, approaching the high-risk maintenance threshold.
• No developer display name listed in store; only email eu@pedromenezes.com.
• One operator sibling extension (olpfnfcoflgpbbfhedielmmdacikbfhk) under same fingerprint.
• No CSP declared (MV3 mitigates somewhat but absence is still a gap).

Evidence

• privacy_policy_generic store Policy URL is Google account policy; scope_extension=false, data_collection=true, third_party_sharing=true → Privacy pillar +10.0.
• maintenance_stale store Last updated July 2024; 23 months since update → Maintenance +6.0 (6-24mo band).
• operator_cluster api 1 sibling extension under same fingerprint (eu@pedromenezes.com|||dolarhoje.com) → Webstore +2.5.
• no_csp manifest csp_present=false on MV3; no CSP declared. No high/medium CVEs so CVE amplifier not triggered.
• host_permissions_narrow manifest Only dolarhoje.com host permissions and content scripts; matches stated function.
• verified_publisher store verified_publisher=true → Reputation -3.0; 0c cap not triggered (no stale>18mo... wait 23mo>18mo, cap at -1.0).
• no_code_findings crx code_findings_raw empty, obfuscation_score=0.0, no CVEs → Code quality 0.0.
• no_developer_name store developer_name is empty string; no 'Offered by' display name in listing → Reputation +1.0.

Permissions Breakdown

• host_permission: http://DolarHoje.com/ low Scoped to single domain matching stated function (ETH price via DolarHoje.com).
• host_permission: https://DolarHoje.com/ low Scoped to single domain matching stated function (ETH price via DolarHoje.com).
• content_script: http://dolarhoje.com/ethereum/ low Narrow content script on single path of dev-owned domain.
• content_script: https://dolarhoje.com/ethereum/ low Narrow content script on single path of dev-owned domain.

Pillar Scores

Operator Siblings (1)

Other extensions sharing this developer's compound fingerprint:

• olpfnfcoflgpbbfhedielmmdacikbfhk

Bookkeeping