Top Risks

• Extension not updated in 25 months — stale codebase with no active maintenance.
• Privacy policy is Google's generic policy (scope_extension=false, data_collection=true, third_party_sharing=true) — admits data sharing but not scoped to this extension.
• No developer display name; identity accountability reduced.
• Operator cluster has 1 sibling extension under same developer fingerprint.
• MV3 but no CSP declared; minor surface gap.

Evidence

• maintenance_stale store Last updated May 2024; 25 months since update → +8.5 maintenance score.
• privacy_policy_generic store Policy URL is Google's own policy; fetched=true, scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 privacy (v3.5-D).
• operator_cluster crx sibling_count=1 under eu@pedromenezes.com fingerprint → +2.5 webstore.
• no_developer_name store developer_name is empty string; no 'Offered by' display name → +1.0 reputation.
• verified_publisher store verified_publisher=true → -3.0 reputation; floor applied at 2.0.
• host_permissions_narrow manifest host_permissions scoped to dolarhoje.com only; matches stated Bitcoin/dollar quote function.
• code_quality_clean crx code_findings_raw empty, obfuscation_score=0.0, js_file_count=2, no external risky hosts.
• cve_none crx cve_findings_raw empty; no bad_host_hits, no monetization_hits, no affiliate_hits.

Permissions Breakdown

• host_permission: http://dolarhoje.com/ low Scoped to single domain matching stated function; content scripts only operate on that domain.
• host_permission: https://dolarhoje.com/ low Scoped to single domain matching stated function; narrow host access.

Pillar Scores

Operator Siblings (1)

Other extensions sharing this developer's compound fingerprint:

• kfkmakbpfgmgeiajohdbdddbeikdkhkm

Bookkeeping