The web extension is just a wrapper around lesspass-pure on npm. Source file correspond to the zip downloaded on http://github.com/lesspass/lesspass/archive/${sha256}.zip. {sha256} is the git sha256 use when build was done.
To rebuild the web extension, you need node, yarn and md5sum to check the md5 sum of the files
Tested with:
unzip {sha256}.zip -d /tmp
cd /tmp/lesspass-{sha256}
yarn install
yarn workspace lesspass-pure run build
find packages/lesspass-web-extension/extension/dist/ -type f -exec md5sum {} \;
find packages/lesspass-pure/dist -type f -exec md5sum {} \;