appears to be vibe-coded to me
And?
It's dangerous, carelessly coded, not human-reviewed, and likely malware laden.
No docker container either, which is a red flag.
Do you have evidence of malfeasance, or are you assuming that because one user said he thought it was vibe-coded without further elaboration?
How would a docker container do anything for a web component?
[dead]