Audit this repository to determine whether the application is safe and trustworthy to self-host. Do not modify any code.
Examine the actual implementation, dependencies, configuration, and deployment files. Focus on:
- External communication: Identify all outbound connections, telemetry, analytics, update checks, and data sent to third parties. Flag anything unexpected or undocumented.
- Security: Look for vulnerabilities, insecure defaults, hardcoded secrets, weak authentication, exposed endpoints, and unsafe handling of sensitive data.
- Data privacy: Determine what data the application collects, stores, transmits, and logs. Identify where sensitive data could leak.
- Dependencies & supply chain: Check for suspicious, outdated, or vulnerable dependencies, installation scripts, container images, and build-time downloads.