Bandcamp Enhancement Suite Chrome extension security report

The purpose of this extension is to make Bandcamp easier to navigate for larger collections of music. It has been designed with DJs in mind. 1.15.0 Changes: * update cart import/export to better handle potential changes in item prices * add cart import support for urls * add post-checkout 'Download Zip' button for downloading purchases in browser 1.14.0 Changes: * add hide/unhide all button for collections page * full re-factor of codebase into typescript 1.13.0 Changes: * improve keyboard shortcuts 1.12.0 Changes: * add support for parallel downloading for purchase download script 1.11.0 Changes: * add Support BES button to cart * remove old Support BES popup modal 1.10.5 Changes * fix another issue with 1-click buy button 1.10.4 Changes * fix issue with 1-click buy button and re-enable 1.10.3 Changes: * emergency release rolling back the 1-click buy feature. This feature contained a major bug that could cause the cart to be cleared (and not recovered) 1.10.2 Changes: * fix bug where 'undefined' was displayed on track/album pages with non-purchasable items * removed 1-click button for track/album already owned by user * improved 1-click buy button UI for consistently across platforms * moved 1-click buy button for albums 1.10.0 Change: * add cart import/export 1.9.0 Change: * add 1-click add to cart on album and track pages 1.8.1 Change: * fix error when going through add album to cart modal 1.8.0 Change: * BPM in Album/Track page player 1.7.2 Change: * fix bug causing plugin to fail to load in Firefox * security updates 1.7.1 Change: * remove 'offlineAudioContext' with simpler code calling 'decodeAudioData' by @sabjorn in #150 * Bump ua-parser-js from 0.7.31 to 0.7.33 by @dependabot in #151 * Bump socket.io-parser from 4.2.1 to 4.2.3 by @dependabot in #156 * Bump engine.io and socket.io by @dependabot in #155 * Bump yaml from 2.1.1 to 2.2.2 by @dependabot in #154 * add Stripe links in call to support popup by @sabjorn in #159 1.6.2 Change: * fix Firefox waveform clicking bug * add delay to call to support popup (30 days) 1.6.1 Change: * update to Manifest v3 for Firefox (now version parity) 1.6.0 Change: * update to Manifest v3 1.5.4 Change: * fix blocking default Chrome keyboard shortcuts 1.5.3 Change: * update popup checkout dialog to be centred in user view at all times 1.5.2 Change: * re-add Checkout feature 1.5.1 Changes: * remove Checkout feature because it caused Waveform feature to break * remove storage requirement from Chrome 1.5.0 Changes: * Add popup when users check out to provide information about how to contribute to the plugin 1.4.0 Changes: * add github sponsorship link in browser action page * add Half Past Vibes records link in browser action page 1.3.1 Changes: * generated cURL file now works across wider range of shells * generated cURL file can now be run as a shell script (added shebang) 1.3.0 Changes: * playlist in album views to be right below the player * state of the waveform toggle persists (config backend) 1.2.0 Changes: * Add Waveform display. Users can enable/disable a Wavform on album pages. * Changed layout of player UI 1.1.1 Changes: * Fix keyboard focus bug preventing space bar from working in search bar of player pages. 1.1.0 Changes: * Keyboard control for player * Mouse control for player playbar to jump to time selection * Purchased download assistance * Volume control. 1.0.4 Changes: * Update storage backend for larger capacity (and versatility for future developments). 1.0.3 Changes: * Preview state tracked when loading albums on their own page * Preview state is accessible from multiple machines using the same google account (chrome storage api) * Tool tips pop up on injected UI elements * Single track "albums" preview properly * Featured albums are made visible in main grid view and can thus be previewed * Improperly rendered UI elements removed completely from "collection" pages 0.6.2 Changes: * Application runs correctly again 0.6.1 Changes: * Widens preview window 0.6.0 Changes: * adds tracking (local cache) of albums preview history * adds clickable element to represent (and alter) previewed history 0.5.0 Changes: * removed album artwork from iFrames. * preview window now shows up below preview button. 0.4.1 Changes: * iFrames always in front (no longer occluded by any other element on screen) 0.4.0 Changes: * Collections and Wishlist now have preview button * Clicking on any preview button with close any open preview before starting next preview.