Is RocketReach Chrome Extension safe?

enum MetricType {
  increment = "increment",
  histogram = "histogram",
}

class MetricsService {
  static async build(): Promise<MetricsService> {
    const svc = new MetricsService();
    svc._apiService = await ApiService.build();
    svc._endpointUrl = new URL("/browser-extension/v1/m5s", svc._apiService.BASE_URL);
    svc._featureFlags = await FeatureFlagService.build();
    return svc;
  }

  encodedBody(): string {
    // base64-encodes the entire metrics batch — not encrypted, trivially reversible
    return btoa(JSON.stringify({ metrics: this._batch }));
  }

  _getBatchDelaysMS(): number {
    return 10000; // flush every 10 seconds
  }
}

// Registers a Chrome alarm named 'util.FeatureFlag' that fires every 60 minutes.
async registerAlarm() {
  if (!chrome.alarms) return;
  if (await chrome.alarms.get(FeatureFlagService.AlarmName)) return; // already registered
  chrome.alarms.create(FeatureFlagService.AlarmName, { periodInMinutes: this._intervalMinutes }); // 60 min
}

// Fetches whether the extension should activate on all sites.
// Called unconditionally — no login check, fires on every extension load.
async getAndSaveEverywhereState() {
  const url = new URL("/browser-extension/v1/rr-everywhere", this._apiService.BASE_URL);
  const response = await fetch(url, { method: "GET" });
  const data = await response.json();
  const isEnabled = data?.enabled ?? false;
  await this._setEverywhereState(isEnabled); // writes to chrome.storage.local
}

// Fetches per-account feature flags. Requires login.
// Also tracked with metric event he.ff3p ('endpoint:ff3p').
async fetchFeatureFlags() {
  if (!(await this._authService.isLoggedIn())) return;
  const url = new URL("v1/user/ff3p?no_encode=true&inc1=true", this._apiService.BASE_URL);
  const response = await fetch(url);
  if (response.ok && response.status === HttpStatus.OK) {
    const data = await response.json();
    await this._saveFeatureFlags(data); // stored at 'feature-flags' in chrome.storage
  }
}

!function(r) {
  var i, o, s;
  r.OnMessageName = "util.Metric";
  class u extends re {
    constructor() {
      super(), i.set(this, void 0), o.set(this, void 0), s.set(this, void 0), this._batch = [], this._pendingBatchRequest = null, this._batchDelayMS = 1e3;
    }
    static build() {
      return n(this, void 0, void 0, (function*() {
        const e = new u;
        return t(e, i, yield Ue.Service.build(), "f"), t(e, o, new URL("/browser-extension/v1/m5s", a(e, i, "f").BASE_URL), "f"), t(e, s, yield xe(), "f"), e
      }))
    }
    increment(e, a) {
      return n(this, void 0, void 0, (function*() {
        this._enqueueMetric({
          metric_type: $e.increment,
          name: e,
          tags: a
        });
      }))
    }
    histogram(e, a, t) {
      return n(this, void 0, void 0, (function*() {
        this._enqueueMetric({
          metric_type: $e.histogram,
          name: e,
          value: a,
          tags: t
        });
      }))
    }
    _enqueueMetric(e) {
      return n(this, void 0, void 0, (function*() {
        this._batch.push(e), this._ensureBatchEnqueued();
      }))
    }
    _ensureBatchEnqueued() {
      return n(this, void 0, void 0, (function*() {
        if (this._pendingBatchRequest) return;
        const e = this._getBatchDelaysMS();
        this._pendingBatchRequest = setTimeout((() => {
          this._sendBatch(), this._batch = [], clearTimeout(this._pendingBatchRequest), this._pendingBatchRequest = null;
        }), e);
      }))
    }
    _sendBatch() {
      return n(this, void 0, void 0, (function*() {
        yield fetch(a(this, o, "f"), {
          method: "POST",
          body: this.encodedBody()
        });
      }))
    }
    encodedBody() {
      const e = JSON.stringify({
        metrics: this._batch
      });
      return btoa(e)
    }
    _getBatchDelaysMS() {
      return 1e4
    }
  }
  i = new WeakMap, o = new WeakMap, s = new WeakMap, e([u.alwaysRunInServiceWorkerContext(r.OnMessageName)], u.prototype, "increment", null), e([u.alwaysRunInServiceWorkerContext(r.OnMessageName)], u.prototype, "histogram", null), r.Service = u;
}(Ee || (Ee = {}));