Regarding the "Source map error" message, indeed, this isn't the problem.
Regarding "running Orbeon in a local VM Ware as HTTP and the site being
marked as insecure", are you loading your page with HTTP as well? If
everything is loaded with HTTP, things should work fine (in fact this is how
I run Orbeon Forms locally). Issues happen if you load the page through
HTTPS, but scripts are loaded though HTTP, in which case the browser won't
If everything is HTTP, you should be be good (at least for development; of
course, you'll want to use HTTPS in production). That "Unable to process Jar
entry" error message makes me suspect that this might be related to the
Tomcat or Java version you're using. Are you on Tomcat 8.5 or 9? Are you
using Java 8 or newer?