When I submitted my webextension-based extension, there was an automatic review followed by a human review. But obviously it's unclear what the quality of that review was and I'm not sure whether any update triggers another round of reviews.

I know that at least for decentraleyes, the human reviewers have a script to check all the checksums of the included libraries after updates get submitted.