Hacker News Reader

How mature is this project? For some reason (possibly just scars from years past), I'm pretty wary of IRC clients that aren't mature, due to concerns around security.

The first PR is from Feb 2016, so that makes it a little under 3 years old. Is that old enough for an IRC client?

I really like how it looks! Feels much more modern than HexChat (what I currently use).

View on HN

The Lounge is a fork (well, really a continuation) of shout, which was started 4-5 years ago (https://github.com/erming/shout)

Additionally, the backend irc framework used was changed to one used by another popular web client, kiwiirc.

Are there any specific security concerns you have?

Nope! I am possibly overly paranoid about my IRC client, if only because of my time many years ago in some slightly shady (but honestly entirely benign) areas of the Internet, where if your client wasn't properly configured you'd (sometimes) find out about it in negative ways.

> How mature is this project? For some reason (possibly just scars from years past), I'm pretty wary of IRC clients that aren't mature, due to concerns around security.

I've reviewed this from a security perspective and was pretty pleasantly surprised. It sets a sensible Content-Security-Policy, doesn't leak the Referer etc. JS is written properly to avoid introducing DOM-based cross-site scripting vulnerabilities.

Reply on news.ycombinator.com