Is Companion Window | Always on Top safe?

const W = Ie(),  H = L.defineItem("local:extConfigCache", {    defaultValue: {      adBanner: {        enabled: !0      },      features: {        reviewPrompt: {          enabled: !0,          timesToPop: 7        }      }    }  }),  D = L.defineItem("local:extConfigLastFetch", {    defaultValue: 0  }),  ue = 5 * 60 * 1e3,  Ce = "https://cdn.givefreely.com/config/companionwindow.json",  P = {    adBanner: {      enabled: !1    },    features: {      reviewPrompt: {        enabled: !1,        timesToPop: 7      }    }  };class Me {  constructor() {    M(this, "configUrl");    M(this, "currentConfig", P);    this.configUrl = this.getConfigUrl()  }  getConfigUrl() {    return Ce  }  async fetchConfig() {    try {      const e = await D.getValue(),        t = Date.now();      if (t - e < ue) {        v.log("Using cached configuration");        const g = await H.getValue();        return this.currentConfig = g, g      }      v.log("Fetching fresh configuration from:", this.configUrl);      const n = new AbortController,        l = setTimeout(() => n.abort(), 1e4),        s = await fetch(this.configUrl, {          method: "GET",          headers: {            Accept: "application/json",            "Cache-Control": "no-cache"          },          signal: n.signal        });      if (clearTimeout(l), !s.ok) throw new Error(`HTTP ${s.status}: ${s.statusText}`);      const u = await s.json();      if (!this.isValidConfig(u)) throw v.warn("Invalid configuration received, using defaults"), new Error("Invalid configuration format");      const h = this.mergeWithDefaults(u);      return await H.setValue(h), await D.setValue(t), this.currentConfig = h, v.log("Configuration updated successfully:", h), h    } catch {      try {        const t = await H.getValue();        return v.log("Using expired cached configuration as fallback"), this.currentConfig = t, t      } catch {        return this.currentConfig = P, P      }    }  }  isValidConfig(e) {    return e && typeof e == "object" && e.adBanner && typeof e.adBanner == "object" && typeof e.adBanner.enabled == "boolean"  }  mergeWithDefaults(e) {    var t, n, l, s, u;    return {      adBanner: {        enabled: ((t = e.adBanner) == null ? void 0 : t.enabled) ?? P.adBanner.enabled      },      features: {        reviewPrompt: ((n = e.features) == null ? void 0 : n.reviewPrompt) ?? ((l = P.features) == null ? void 0 : l.reviewPrompt),        analytics: ((s = e.features) == null ? void 0 : s.analytics) ?? ((u = P.features) == null ? void 0 : u.analytics)      }    }  }  getCurrentConfig() {    return this.currentConfig  }  getAdBannerConfig() {    return this.currentConfig.adBanner  }  isAdBannerEnabled() {    return this.currentConfig.adBanner.enabled  }  async forceRefresh() {    return await D.setValue(0), await this.fetchConfig()  }  setConfigUrl(e) {    this.configUrl = e  }  getConfigUrlCurrent() {    return this.configUrl  }  async initialize() {    return await this.fetchConfig()  }  async clearCache() {    await H.setValue(P), await D.setValue(0), this.currentConfig = P  }  async getStatus() {    const e = await D.getValue(),      n = Date.now() - e;    return {      currentConfig: this.currentConfig,      configUrl: this.configUrl,      lastFetch: e,      cacheAge: n,      isExpired: n > ue    }  }}

const b = be(),  Z = S.defineItem("local:extUserId");function Pe() {  return crypto.randomUUID()}class Oe {  constructor() {    L(this, "eventsUrl");    this.eventsUrl = "https://events.givefreely.com/popup"  }  async sendEvent(e, r, s = {}) {    const g = {        partner: e,        eventType: r,        eventData: s      },      m = {        "Content-Type": "application/json"      };    try {      const h = await fetch(this.eventsUrl, {        method: "POST",        headers: m,        body: JSON.stringify(g)      });      return h.ok ? {        success: !0,        status: h.status      } : {        success: !1,        status: h.status,        error: h.statusText      }    } catch (h) {      return {        success: !1,        error: h instanceof Error ? h.message : "Unknown error occurred"      }    }  }}class ke {  constructor() {    L(this, "client");    L(this, "partner", "companionwindow");    this.client = new Oe  }  async getUserId() {    let e = await Z.getValue();    return e || (e = Pe(), await Z.setValue(e)), e  }  async trackEvent(e, r = {}) {    const g = {      userId: await this.getUserId(),      ...r    };    return await this.client.sendEvent(this.partner, e, g)  }}async function Ie(t, e = {}) {  return await new ke().trackEvent(t, e)}

async function re(r, e = {}) {  return new Promise((t, n) => {    chrome.runtime.sendMessage({      action: "trackEvent",      eventName: r,      eventData: e    }, l => {      chrome.runtime.lastError ? n(new Error(chrome.runtime.lastError.message)) : l != null && l.success ? t() : n(new Error((l == null ? void 0 : l.error) || "Unknown error"))    })  })}async showReviewModal() {  const e = await R.getValue();  await Q.setValue(e);  try {    await re("review_shown", {      url: window.location.href,      popout_count: e    })  } catch {}  this.removeReviewModal(), this.currentModal = this.createReviewModal(), document.body.appendChild(this.currentModal)}async handleOptionClick(e) {  try {    await re("review_option_clicked", {      url: window.location.href,      option: e,      popout_count: await R.getValue()    })  } catch {}  switch (e) {    case "review":      await this.markReviewShown(), await this.openReviewPage();      break;    case "later":      break;    case "never":      await this.markReviewShown(), await this.dismissReview(!0);      break  }  this.removeReviewModal()}