Is Passwork Self-Hosted safe?

Passwork Self-Hosted fills and saves credentials on every site, syncing them with the Passwork server you configure.

This is the browser client for a self-hosted Passwork password manager. It runs content scripts on all pages (including iframes) to detect login forms, autofill saved passwords, and capture new credentials, sending and retrieving vault data over your own configured Passwork server rather than a vendor-operated cloud. Credentials are stored locally encrypted with AES-GCM on Chrome; one low-severity finding notes that on Safari-identified browsers this at-rest encryption is skipped and the master password, API token, and session token are written in plaintext to extension storage.