Is Internet Archive Downloader safe?

Internet Archive Downloader sets CORS headers on archive.org responses to allow credentialed cross-origin fetches when downloading books.

The extension injects content scripts into archive.org and babel.hathitrust.org pages to add download buttons for books and PDFs. On install, it installs a declarativeNetRequest rule that sets Access-Control-Allow-Origin and Access-Control-Allow-Credentials on responses to any request originating from archive.org, allowing those pages to make credentialed cross-origin requests. The extension does not transmit user data to any remote server; all activity is local or directed at archive.org and hathitrust.org.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.