A HyperCard-style authoring tool for the web. Draw, script, and stack cards together into one portable file.
no public repo linked · 7.0 KB
Is it a true single-file web app?
✗ Nearly. Its own code is all in one file, but it still pulls in 1 file from elsewhere.
How to fix it
→ Inline
style.css — it's already your own file, it just needs to move into the HTMLSecurity audit — full results 6/10
– No leaked credentials (detect-secrets) — no repo set — nothing to clone
– Semgrep security-audit ruleset — no repo set — nothing to clone
– Semgrep javascript ruleset — no repo set — nothing to clone
✓ eval() usage
✓ Function() construction
✓ decode→eval chain
✓ document.write of decoded content
✓ sendBeacon usage
✓ decoded content DOM injection
– SFWA structure check — no repo set — nothing to inspect
Embed this badge
