people act weird around any kind of script, more-so than executables, i've never really understood it.

I periodically get told that a published browser userscript of mine is malicious or suspicious in emails simply because of the cautions and wording around the userscript installers themselves (it's just a css tweak, a theme), meanwhile the executables I have in the wild have generated zero similar feedback.

my theory is that since the script is more easily read that it attracts people to read it without any theory or knowledge of what they're even looking at .