Is Email Tracker + Pixelblock Detector & Blocker safe?

#!/usr/bin/env node
// check-csp-strip-rules.js
// Verifies that Email Tracker + Pixelblock contains CSP-stripping
// declarativeNetRequest rules targeting Outlook webmail domains.
//
// Usage: node check-csp-strip-rules.js <path-to-extracted-extension>
// Example: node check-csp-strip-rules.js ./bnompdfnhdbgdaoanapncknhmckenfog/extracted

const fs = require('fs');
const path = require('path');

const extDir = process.argv[2];
if (!extDir) {
  console.error('Usage: node check-csp-strip-rules.js <path-to-extracted-extension>');
  process.exit(1);
}

const rulesPath = path.join(extDir, 'declarative_net_request_rules.json');
if (!fs.existsSync(rulesPath)) {
  console.error('ERROR: declarative_net_request_rules.json not found at', rulesPath);
  process.exit(1);
}

const rules = JSON.parse(fs.readFileSync(rulesPath, 'utf8'));

const cspRules = rules.filter(rule =>
  rule.action &&
  rule.action.type === 'modifyHeaders' &&
  Array.isArray(rule.action.responseHeaders) &&
  rule.action.responseHeaders.some(h =>
    h.header === 'content-security-policy' && h.operation === 'remove'
  )
);

if (cspRules.length === 0) {
  console.log('RESULT: No CSP-stripping rules found.');
  process.exit(0);
}

console.log(`RESULT: Found ${cspRules.length} CSP-stripping rule(s):\n`);
for (const rule of cspRules) {
  const headers = rule.action.responseHeaders.map(h => h.header).join(', ');
  console.log(`  Rule ID      : ${rule.id}`);
  console.log(`  URL filter   : ${rule.condition.urlFilter}`);
  console.log(`  Resource types: ${rule.condition.resourceTypes.join(', ')}`);
  console.log(`  Headers removed: ${headers}`);
  console.log();
}
console.log('These rules cause Chrome to remove Content-Security-Policy headers');
console.log('from all Outlook webmail responses before the page renders.');