Not if you just save the JS file to your local machine, right? There's no HTTP involved in that case (which is precisely how I intended to use it).

Provided that the code is intact when you initially retrieve it, that solves the MITM issue. But then you're tied to that computer, and if that's acceptable, then you're far better off just using a password-keeper that uses real crypto.