cordova-cli icon indicating copy to clipboard operation
cordova-cli copied to clipboard

Remove Insight & Disable telemetry

Open breautek opened this issue 2 years ago • 1 comments

Platforms affected

CLI

Motivation and Context

closes #625

Insight is no longer maintained and it contains sub-dependencies with moderate vulnerabilities.

Description

All code relating to telemetry and using Insight have been commented out. Fake implementations were left in place so our Telemetry API still exists, just it will always "opt out" of telemetry.

This is done so that we can easily bring back telemetry later once we find a replacement for Insight.

Tests related to telemetry were disabled.

This PR is intended to be a stopgap just to resolve the present audit issues.

Testing

Ran npm test

Checklist

  • [x] I've run the tests to see all new and existing tests pass
  • [x] I added automated test coverage as appropriate for this change
  • [x] Commit is prefixed with (platform) if this change only applies to one platform (e.g. (android))
  • [x] If this Pull Request resolves an issue, I linked to the issue in the text above (and used the correct keyword to close issues using keywords)
  • [x] I've updated the documentation if necessary

breautek avatar Dec 14 '23 16:12 breautek

It would be nice if this could be merged and released. I tried to manually remove insight but the require('insights') then fails when calling CLI commands.

mschoettle avatar Feb 20 '24 17:02 mschoettle

We also have now the task to address our security issues, where this shows up as a very critical one. So it would be very nice if this could find its way to a release very soon!

SteveW94 avatar Apr 12 '24 11:04 SteveW94

The work in #633 is slightly more complete as far as also removing the documentation for the telemetry stuff, so I'm in favour of trying to that one merged.

dpogue avatar Jun 17 '24 16:06 dpogue