Item — HN Reader

Six years? I think you're not being candid.

Why is the landing page 100% gated behind a sign up form? Why is this on NPM to begin with? All around weird.

Could be a trojan horse. Just a heads up to anyone about to download this.

This does not help: "Task management service based on the Kanban methodology. Helps decompose the task pipeline and speeds up all stages of your work" Sounds 100% generated by AI tbh.

1 comments

I do it alone in my free time. NPM is the easiest way to publish an application. You can install the app locally at your place. And there is also a TG channel, there are posts on the functionality for review.

I'm supposed to just blindly boot it up on my computer, with the license explicitly banning decompiling and disassembling the code, so it could sensibly reviewed?

Can you see why I'd be concerned about that?

you can run it in a virtual machine. All the code is written in javascript, and you can study it without even decompiling it.

Virtual machines don't prevent data exfiltration. Auditing code before using it does. I'm with GP. I was going to use this for personal use until I noticed this problem.

What is a GP? I'm not a lawyer, so I wrote the license as best I could. If decompilation is needed only for auditing, then I have no objections, you can do it.