This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Matt Kane
mk.gg
did:plc:uwbl4k3tza7eyjv3morkrld2
Good postmortem on the @tanstack.com supply-chain attack. The key part (which should be called out loudly): never run install on untrusted code inside a `pull_request_target` workflow.
https://tanstack.com/blog/npm-supply-chain-compromise-postmortem
2026-05-12T05:51:59.274Z