I'm not defending anyone here but just strace the program if you're really worried about it. If you don't know what strace is: it exports every syscall the program has made, so you'd see if it's doing anything suspicious.

Or don't use it, and warn others of the issues and let them decide if they want to use it.

Well I don't see why not, also I don't see which issues if you're not using it as you couldn't encounter any to begin with. Being closed source is not an issue.

Careful with the sarcasm. Only positive vibes are allowed on showHN or the admin goes ballistic. I've seen it happen.

> Only positive vibes are allowed on showHN

Sarcasm?

No. It's real. According to dang, showHN is suppose to be a "safe space". You could make absolute crap, everyone is suppose to be positive about it. Dang will flag people who don't do this.

Nothing dang can do though is hundreds of people hate it though. Things with actual security issues for example he'll likely just be quiet about it.

That is unfortunate. You would think that the intent behind posting ShowHN is to get constructive feedback but based on what you described, it appears that the expectation is to make those creators feel good instead.

You still can, just have to be excessively nice about it. Huge emphasis on excessively.

What could go wrong? It is static site and there is no backend, so the key is only in the browser.