thanks for your reply.
Yes. Right now it is a CUSTODIAL web wallet. Developing a non-custodial Taro wallet is possible but it would require more implicated approach. I know that privacy-wise there are MILES to go. I am planning to expose an API and release a web app but this is what we have for now.
As for the license - yes I will add this to my TODO list. You are correct this is kind of crucial.
As for username and password - I decided to only go with the basic necessities. I am intentionally not collecting emails.
Is there something wrong with generating invoices? I filled in the description and clicked the button, but I wasn't given anything and the page just keeps refreshing every few seconds.