LibreSign / LibreSign/libresign

Add optional anonymous telemetry for usage insights

Open
#7,709 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
818
Forks
146
Avg merge
11h 31m
Merged PRs (30d)
326

Description

I’d like to suggest adding an optional, anonymous telemetry system to help the maintainers understand how LibreSign is used in real deployments.

The goal would be to collect only aggregate, privacy-friendly metrics such as:

  • app / Nextcloud / PHP versions
  • total user count
  • active users in the last 30 days
  • feature usage counters
  • counts of completed / cancelled signing flows
  • basic server environment info like database type and web server
  • an anonymous instance hash generated locally, only to distinguish installations

Privacy should be a hard requirement:

  • no personal data
  • no document contents
  • no file names
  • no email addresses
  • no user IDs
  • no raw instance URL
  • no secrets or tokens

Suggested approach:

  • add a backend telemetry service to build and send the payload
  • run it periodically via a background job
  • add an admin setting to enable / disable telemetry
  • add a manual “send report now” action for admins
  • make failures silent so telemetry never affects normal app usage

This would help maintainers better understand adoption, feature usage, and the impact of releases while keeping the data collection minimal and
anonymous.

If there is interest, I’d be happy to help refine the metric list and implementation details.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue does not name implementation files, tests, or existing entry points. Start by reviewing the app's background-job and admin-settings infrastructure, then clarify the telemetry scope, privacy model, and reporting endpoint before implementation. Done should include opt-in controls, anonymous aggregate reporting, scheduled and manual submission, and failure isolation.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
backend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.