[yjftsjthsd-h]

That's an interesting idea. I, too, would happily contribute to a funding pool to have a competent human analyze the extensions that I'm using. One would expect this to (loosely) allocate money to checking the extensions that are most used, so the ecosystem would benefit even for people who weren't contributing.

[anbop]

And corporations would pay a lot to have extensions security reviewed if they had a business use case.