I don't do it either because I am not a good coder who can easily recognize something unusual in scripts. To be safe, actually you can choose paid extensions rather than the free ones.