outstatic

Hey HN, These claims that op has made have been found to be false. His project uses an Open MIT license, and I forked it like a good OSS community member does. The main dealer breaker for me not using his code directly within my project was a serious GDPR and data privacy violation that I found on the surface of OP’s code. https://github.com/avitorio/outstatic/blob/d440f8f53ee559fb3... There is no disclaimers or privacy polices within OP’s website, project, or readers that say he is collecting analytics data, including sensitive GitHub project details. Some of my users and customers require ISO2700 and SOC2 compliant solutions, and this was a huge red flag to us. I contacted OP about it, and other security issues, but he blew me off and turned to trashing me online like this. What do you think?

For more context, the author of the fork seemed to have stepped in to "answer" some of the concerns in the Reddit thread by OP, and some of it is just plain hilarious. https://www.reddit.com/r/nextjs/comments/17wujjc/my_open_sou... Claiming that the project is "a copy of a copy" because the author forgot to switch the license from the template MIT which had "Vercel" in it - https://www.reddit.com/r/nextjs/comments/17wujjc/comment/k9j... Claiming code (!) contributions to the project, while there is only a single commit by him (fixing typos) and he has an unresolved conversation in a single GH issue - https://www.reddit.com/r/nextjs/comments/17wujjc/comment/k9j... (the commit is https://github.com/avitorio/outstatic/commit/442a3189697540e..., issue https://github.com/avitorio/outstatic/issues/73)

Commits tell a different story: https://github.com/elegantframework/elegant-cli/commit/8d8d8... (March 2023) https://github.com/avitorio/outstatic/commit/76c82a05cf82896... (August 2022)

Something curious is that the oldest tag I can find on Github from Elegant is from March 16 [1], while the oldest tag I can find from Outstatic is from March 26 [2] [1] https://github.com/elegantframework/elegant-cli/tree/v1.0-al... [2] https://github.com/avitorio/outstatic/tags?after=v0.0.37

Well, your license gave them permission to pretty much do anything. As nefarious as it may be, it is not illegal. https://github.com/avitorio/outstatic/blob/canary/license.md