Examine source code of Scopuly - Stellar Mobile Signer

{
  "manifest_version": 3,
  "name": "Scopuly – Stellar Signer",
  "short_name": "Scopuly",
  "version": "0.3.4",
  "description": "Connect Stellar dApps to Scopuly. Review account access and signing requests without exposing secret keys to the extension.",
  "action": {
    "default_title": "Scopuly – Stellar Signer",
    "default_popup": "popup.html",
    "default_icon": {
      "16": "icons/scopuly-16.png",
      "32": "icons/scopuly-32.png",
      "48": "icons/scopuly-48.png",
      "128": "icons/scopuly-128.png"
    }
  },
  "icons": {
    "16": "icons/scopuly-16.png",
    "32": "icons/scopuly-32.png",
    "48": "icons/scopuly-48.png",
    "128": "icons/scopuly-128.png"
  },
  "background": {
    "scripts": [
      "assets/background.js"
    ],
    "type": "module"
  },
  "content_scripts": [
    {
      "matches": [
        "<all_urls>"
      ],
      "js": [
        "assets/content-script.js"
      ],
      "run_at": "document_start",
      "all_frames": false,
      "world": "ISOLATED"
    },
    {
      "matches": [
        "<all_urls>"
      ],
      "js": [
        "assets/injected-provider.js"
      ],
      "run_at": "document_start",
      "all_frames": false,
      "world": "MAIN"
    }
  ],
  "permissions": [
    "storage"
  ],
  "host_permissions": [
    "https://api.scopuly.com/*"
  ],
  "options_page": "options.html",
  "content_security_policy": {
    "extension_pages": "default-src 'self'; script-src 'self'; object-src 'none'; base-uri 'none'; img-src 'self' data:; style-src 'self'; connect-src 'self' https://api.scopuly.com"
  },
  "browser_specific_settings": {
    "gecko": {
      "id": "extension@scopuly.com",
      "strict_min_version": "140.0",
      "data_collection_permissions": {
        "required": [
          "financialAndPaymentInfo",
          "websiteActivity"
        ]
      }
    },
    "gecko_android": {
      "strict_min_version": "142.0"
    }
  }
}