by chicogong
Over a thousand small frontend utilities, each a single file — zero build, works offline, privacy-first.
HTML 99.4% · JavaScript 0.5% · CSS 0.1% · EJS 0%
Is it a true single-file web app?
✗ No, this is not a single-file web app. It needs 6 files from elsewhere.
– Contacts
cdn.jsdelivr.net– Contacts
fonts.googleapis.com– Contacts
fonts.gstatic.comHow to fix it
→ Inline
main.css — it's already your own file, it just needs to move into the HTML→ Inline
tool-chrome.js — it's already your own file, it just needs to move into the HTML→ Inline
index.js into a <script>/<style> tag instead of fetching it from cdn.jsdelivr.net→ Inline
main.js — it's already your own file, it just needs to move into the HTML→ Self-host the webfont as a base64
@font-face, or fall back to a system font stack (currently fonts.googleapis.com)→ Self-host the webfont as a base64
@font-face, or fall back to a system font stack (currently fonts.gstatic.com)Security audit — full results 9/9
✓ No leaked credentials (detect-secrets)
✓ Semgrep security-audit ruleset
✓ Semgrep javascript ruleset
✓ eval() usage
✓ Function() construction
✓ decode→eval chain
✓ document.write of decoded content
✓ sendBeacon usage
✓ decoded content DOM injection
Embed this badge
