Is Stylus safe?

Stylus ships hardcoded OAuth client secrets for Google Drive, OneDrive, and UserStylesWorld in its extension source.

Stylus is a user-styles manager that injects custom CSS into web pages across all sites. Its sync feature includes OAuth integration with Google Drive, OneDrive, and UserStylesWorld, with the client secrets for all three providers stored in plaintext in the background script. These secrets are sent verbatim in token-exchange requests when a user connects a sync account.