It's dangerous, carelessly coded, not human-reviewed, and likely malware laden.

No docker container either, which is a red flag.

Do you have evidence of malfeasance, or are you assuming that because one user said he thought it was vibe-coded without further elaboration?

How would a docker container do anything for a web component?