⚠️ What's up with the PII telemetry collection?

[aryzing]

Undisclosed telemetry / data exfil risk

• src/browser/contexts/telemetry.tsx
• Sends events to PostHog: https://us.i.posthog.com.
• Identifies users with GitHub ID, username, email, avatar, bio, company, location.
• Tracks private repo metadata such as owner/repo, PR number, file paths, review activity.
• This is the closest thing to “suspicious” behavior because README says “Entirely client-side” and I found no
  telemetry disclosure.

[jennings]

It looks like this project is done, so I forked it and I'm running it for myself at https://pr.jennings.io. I did the following:

• Removed the Electron app
• Removed telemetry
• Removed the OAuth client (it's still in the UI, just broken).
• Hosted it on GitHub Pages

You're free to use it, or you can clone that repo and run a copy for yourself.