But if he wants to provide open source code?
I only don't understand what would be the benefits, to use your generator instead of well known services like bitaddress.
I'm not saying that I know 100% sure that this is a scam, but even if he says he will open-source his script, it's still very likely that his current generator is designed to have access to the private keys of generated paper wallets.
Anyone who uses this service as it is now will be giving that website access to their private keys of their generated paper wallets.
OP, why even make a service like this? No-one should even think about generating a paper wallet this way, even if you're not a scammer, you're teaching people to use a server-side generated paper wallet, which is bad under any circumstance.
I would take the website down and focus on making a paper wallet that is generated client-side and open up the code for inspection.
No-one should use this service or a service like this ever.