by akanshujamwal
A single-file browser-based work journal for developers and PMs. Log daily tasks, sync to Google Sheets.
HTML 100%
Is it a true single-file web app?
✗ Nearly. Its own code is all in one file, but it still pulls in 1 file from elsewhere.
– Contacts
cdnjs.cloudflare.com– Contacts
fonts.googleapis.com– Contacts
fonts.gstatic.comHow to fix it
→ Inline
html2pdf.bundle.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Self-host the webfont as a base64
@font-face, or fall back to a system font stack (currently fonts.googleapis.com)→ Self-host the webfont as a base64
@font-face, or fall back to a system font stack (currently fonts.gstatic.com)Security audit — full results 13/13
✓ No leaked credentials (detect-secrets)
✓ Semgrep security-audit ruleset
✓ Semgrep javascript ruleset
✓ eval() usage
✓ Function() construction
✓ decode→eval chain
✓ document.write of decoded content
✓ sendBeacon usage
✓ decoded content DOM injection
✓ Ships an HTML file
✓ No build step required
✓ No backend required
✓ Submitted URL looks like the app itself
Embed this badge
