How can an extension change hands with no oversight?

Don't forget that specifying the plugins setting will override the defaults if you didn't already have it set! See this page for more information. The redirects map should take the form of a key/value ...