Hacker News Reader

I clicked on the openfront repo, and...

Having a .claude folder, which also contains full publicly-accessible postgres credentials, does not instill confidence I'm afraid.

View on HN

10 minutes after your comment I checked and I don’t see any pgsql credentials, but I do see that they have committed their local settings instead, including their local file paths now.

https://github.com/openshiporg/openfront/blob/master/.claude...

That is an old database used for development, I will remove and add .claude to gitignore

It's still there. Check the pg_dump command.

I feel safer always running him in dangerous mode now.

Reply on news.ycombinator.com