it's the same as damus.io/web and might(?) still be vulnerable.

clone and host if you want to mess around with it or just wait for them to iron things out