How can an extension change hands with no oversight?

Let's open up this JSON file. You might want to reformat this document so it doesn't have so much whitespace. Use the "Compress current JSON file" plugin command ...