⚠️ What's up with the PII telemetry collection?
Open
- Dominant language
- TypeScript
- Stars
- 124
- Forks
- 10
- PR merge metrics
- No merged PRs in 30d
Description
Undisclosed telemetry / data exfil risk
- src/browser/contexts/telemetry.tsx
- Sends events to PostHog: https://us.i.posthog.com.
- Identifies users with GitHub ID, username, email, avatar, bio, company, location.
- Tracks private repo metadata such as owner/repo, PR number, file paths, review activity.
- This is the closest thing to “suspicious” behavior because README says “Entirely client-side” and I found no
telemetry disclosure.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.