Your plugin code is safe as long as the user selects 'Minify script' on export. This compresses and obfuscates the code which should make it very difficult to reverse engineer.
External scripts are not minified. You can minify them yourself if you like with Google Closure Compiler.