Handling of user-provided API keys in a client-side app (no server). Secure?
I’d like to create a simple JavaScript app that asks a user for their API key from a third-party service and makes it easier to use the service with a better GUI. There will be no server-side code on my side, opensource, hosted on GH. So, the question is: