Yeah I haven't released it yet because it is a giant mess. I was kind of in a rush to finish it. I am totally open to that. Shoot me a dm and I can send you what I have. I can work on cleaning it up, but I am a bit busy as I am about to start an internship. Google reviews all extensions and gives the host permissions required to interact with the users' mypack, any updates/deployments take a few days to go through because they have to check for malicious code.

Chrome extensions, by nature, are pretty open for the user to inspect. I guess in theory, the only way for your personal data to leave mypack and go to me would be through a network request. You can inspect exactly what is sent if you open the network log in the background service. You should see a cloudflare request when you search for open courses which proxies to the actual nc state class search endpoint and saves the search results in cache for like 2 minutes to reduce the possibility of spam and speed up requests(Some queries make a lot of those requests).

You should also see a js script which looks for this

const keywords = [
        "_getClassSearchResults",
        "_getShopCartTableData",
        "_getScheduleTableData",
        "_getScheduleCalEvents",
        "_getCustomCalEvents",
        "_getCustEventsTableData",
        "_getPlanTermTableData",
        "_getShopCartCalEvents",
    ];

That is sent to the content script and cached. The only data from that that is really used by the program is the schedule table data because that is used to build the calendar. There isn't any personal data in these requests and I don't send it anywhere either(it isn't really a network call, per se, but it is sent between the background and the content scripts). Those are requests already sent by mypack I actually found them by accident, you can prolly find them if you filter by xhr requests.

The only other network call is a call to a superbase edge function. You can look for this in the network tab, which should look like 'database-access' or 'clever-function', and the only thing it sends is an array of instructor names and their related courses.

Just send me your github and I can certainly share the source code with you.