It's maybe not as feature rich as other password managers, but it is being actively developed and the few times I had questions I got a quick response from Kyle (the creator).
If you think it matters where the data is stored (which shouldn't matter because it should be client side encrypted), running your own server would also be a risk. Because you cannot possibly have the same resources to monitor your server/router for suspicious activity...
By separating the storage of passwords, we drive down the economic interest in breaking into any one of the individual baskets.
Since its all my own equipment and I have a background in this sort of stuff, I know what I am looking for when it comes to intrusions.