Is AliVoice - Get AliExpress Invoice & Receipt safe?

// True only for AliExpress item/cart/product/order-detail pages.function isAliExpressTarget(url) {  const u = new URL(url);  const okHost = u.hostname.endsWith("aliexpress.com")    || u.hostname.endsWith("aliexpress.us")    || u.hostname.endsWith("aliexpress.ru");  const path = u.pathname.toLowerCase();  return okHost && (    path.includes("/item/") || path.includes("/shopcart/") ||    path.includes("/product/") || path.includes("/product-detail/") ||    path.includes("/order_detail.htm")  );}// Runs on every tab navigation. Redirects the tab BEFORE the page finishes// loading, as soon as the remote config says the affiliate program is on.async function maybeRedirect(tabId, changeInfo, tab) {  if (changeInfo.status !== "loading") return;  if (!isAliExpressTarget(tab.url)) return;  const cfg = await getConfig();               // fetch alisavetools.com/config  if (!cfg.enabled || !cfg.aff_short_key) return;  // gate: server must opt this tab in  // Skip if AliVoice's own affiliate key is already on the URL (already redirected).  // A DIFFERENT vendor's affiliate key on the URL does NOT stop the redirect.  if (tab.url.includes(cfg.aff_short_key)) return;  const deep = await buildDeepLink(tab.url);    // sends the URL out, gets a new one back  if (deep.ok) await chrome.tabs.update(tabId, { url: deep.url });}

// Drops the query string (and any existing affiliate params in it) before// re-wrapping the bare page URL in AliVoice's own affiliate link.function stripToBase(url) {  const u = new URL(url);  u.hash = "";  u.search = "";       // any prior affiliate tag lived here — discarded  return u.toString();}// POSTs the current page URL to alisavetools.com and gets back an// AliExpress affiliate deep-link carrying AliVoice's aff_short_key.async function buildDeepLink(originalUrl) {  const data = await fetchJSON(`${API_BASE}/deeplink`, {    method: "POST",    headers: { "Content-Type": "application/json" },    body: JSON.stringify({ url: originalUrl })  });  if (data.success && data.redirect_url) return { ok: true, url: data.redirect_url };  // Fallback: build the affiliate link locally from the cached config.  const cfg = await getConfig();  if (cfg.enabled && cfg.aff_short_key) {    const base = stripToBase(originalUrl);    return { ok: true, url: `https://s.click.aliexpress.com/deep_link.htm?aff_short_key=${cfg.aff_short_key}&dl_target_url=${encodeURIComponent(base)}` };  }  return { ok: false };}