Examine source code of ZeeOTP

{
  "manifest_version": 2,
  "name": "__MSG_extName__",
  "short_name": "__MSG_extShortName__",
  "version": "2.2.1",
  "default_locale": "en",
  "description": "__MSG_extDesc__",
  "applications": {
    "gecko": {
      "id": "zeeotp@zeetim.com"
    }
  },
  "icons": {
    "16": "images/ZeeOTP_16x16.png",
    "48": "images/ZeeOTP_48x48.png",
    "128": "images/ZeeOTP_128x128.png"
  },
  "browser_action": {
    "browser_style": false,
    "default_icon": {
      "19": "images/ZeeOTP_19x19.png",
      "38": "images/ZeeOTP_38x38.png"
    },
    "default_title": "__MSG_extShortName__",
    "default_popup": "view/popup.html"
  },
  "background": {
    "scripts": [
      "dist/background.js"
    ]
  },
  "commands": {
    "_execute_browser_action": {},
    "scan-qr": {
      "description": "Scan a QR code"
    }
  },
  "options_ui": {
    "page": "view/options.html",
    "browser_style": true
  },
  "permissions": [
    "activeTab",
    "<all_urls>",
    "clipboardWrite",
    "storage"
  ],
  "optional_permissions": [
    "clipboardWrite",
    "https://www.google.com/"
  ],
  "content_security_policy": "script-src 'self'; font-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; connect-src https://www.google.com/ https://*.dropboxapi.com https://www.googleapis.com/ https://accounts.google.com/o/oauth2/revoke https://login.microsoftonline.com/common/oauth2/v2.0/token https://graph.microsoft.com/; default-src 'none'"
}