u/Crepuscular897

I’ve been able to create WPAs, using claude code, now, Im going to make an app for apple / google store for a friend’s new business. he wont be doing any payments on it, it will be scheduling, a push notifications to customers. it is one thing to make the app, a whole other thing to get the security right, which im not sure about. SO, are there companies or people, or something that can be the security engineer for the application to check it, etc? Or is what claude makes sufficient? and, any other tips on getting apps thru apple and google would be appreciated.

just vibecoded my first app for an org i work for, I went the pwa route. any advice on which companies are the best for hosting the website once i go live? just for your curiosity, here are some details

Vanilla JS SPA (Single Page Application, no framework)

•    2,016 lines, one single self-contained .html file, 124 KB total

•    HTML/CSS/JS

•    Role-based access with user defined access

•    Audit logs, reconciliation logic, computational abilities, reporting

•    A tight ratio of 311 functions in ~1,660 lines – for ease of maintenance 

•    346 lines of CSS, ~1,660 lines of JavaScript, the rest is markup/scaffolding

•    311 functions — that's the actual shape of the app: dozens of small tabX() render functions and bindX() event-wiring functions, one per screen/feature

•    Zero external dependencies — no CDN scripts, no fonts fetched from the internet, no libraries. Everything it needs is either written inline or already installed on your device (system fonts, browser APIs)

•    Zero build step — no npm, no compiler, no bundler. What you're looking at in the editor is exactly what runs in the browser

•    Plain JavaScript (ES5) — var used 283 times, let/const used zero times, arrow functions used zero times.  ES5 is the most universally compatible dialect, runs correctly on essentially any browser ever made, no transpiling required

•    HTML built via string concatenation and innerHTML, not JSX or a templating engine