Earlier quoted context omitted.
Not the OP, but I have given up on trusting low-audience browser extensions. Too many stories of the author selling out and injecting analytics/malware into the product.
What I've been doing is using high audience extensions (like Tampermonkey) and getting ChatGPT to write a script for it which does what I need it to. Much more effective and trustworthy than relying on another extension developer. If Tampermonkey can't do it then I'll just write the entire extension on my own and load it as a developer extension.
Greasyfork restricts what 3rd party libraries can be pulled in + you have the option of disabling automatic updates in your userscript manager.