Both 1Password and LastPass provide js implementation of their code which people have used to check that they are doing vaguely what they claim to be doing, i.e. doing things securely
_________________________
Remind me to change my signature to something more interesting someday