Browser Bailiff 0.2.0

Browser Bailiff 0.2.0

This release hardens the first cut after a critical review of real-world browser extension behavior.

Critique applied

• The original table lacked profile context, making multi-profile systems ambiguous.
• Content-script host matches were invisible, underreporting actual page access.
• Optional permissions were not represented, hiding latent capability requests.
• Risk explanations were too coarse for triage.
• Terminal output could become unwieldy with long names, versions, or host patterns.
• There were no tests guarding manifest parsing, localization, or scoring behavior.

Changes

• Added profile names to audit records and terminal output.
• Added content-script host matches to access analysis.
• Added optional permission reporting and medium-risk handling for optional sensitive permissions.
• Added more sensitive and moderate permission categories.
• Sorted docket output by risk, then extension age.
• Bounded table columns for stable terminal output.
• Added --version.
• Added CHANGELOG.md.
• Added unit tests for scoring, localization, content-script hosts, optional permissions, and Firefox .xpi parsing.

Validation

• python -m py_compile .\browser_bailiff.py
• python -m unittest discover -s tests -v
• python .\browser_bailiff.py --version
• python .\browser_bailiff.py --browser edge --no-json
• python .\browser_bailiff.py --browser edge --output .\browser_bailiff_results_test.json