Closed beta Titration Vault is being tested with a small group. Request an invite

Titration Vault Request an invite
Open source

Open source

The source code for this site and the app is public. You can read it, check that the live site matches it, or run your own copy.

The source code is at github.com/fobiat/titration-vault-com. This page was built from commit 8d8ad1850880a542eea49e0d734b97b7e62911c6.

It is licensed under the GNU Affero General Public License, version 3 or later. You may use, change and host it. If you run a changed version as a service, you must offer its source code to that service's users.

Verify a build

Each public build is published as a GitHub release with build-info.json, which lists every file the site serves and its SHA-256, and SHA256SUMS. The release carries a build provenance attestation.

  1. Open the app and note the build number and commit in its footer.
  2. Run npm run verify:build -- https://app.titrationvault.com --release from a clone of the repository. It compares every live file with the release.
  3. For the strongest check, add --rebuild: it builds the commit from source and compares the result byte for byte.

The app runs a lighter version of this check itself, once a day and before every update, and tells you if anything does not match.

Host your own copy

The app is a static site with an optional sync service. The self-hosting guide in the repository covers Cloudflare and other static hosts.

Report a security issue

Please report vulnerabilities privately, as the security policy in the repository describes. Never put health data or recovery words in an issue.