What pcmonk said. And:
* I'm a dschep, sorry I don't work at keybase
* it's open source
* extensions are easy to unpack & view the source if you don't trust I'm not tampering the extension before upload
* I do no obfuscation of the JS, it's only 201 LOC