extension-firefox icon indicating copy to clipboard operation
extension-firefox copied to clipboard

Update the source code from PIA VPN firefox extention to match the current release

Open 8pen-s8urce opened this issue 1 year ago • 0 comments

Summary

This repository was last updated on May 31, 2021, as well as the latest GitHub release, which is version 3.1.0, while the current PIA VPN firefox extension was last updated on February 21, 2023, and the current release is version 3.2.5, according to the Add-ons for Firefox official website. PIA VPN website states that PIA VPN apps are 100% open-source multiple times, but the firefox extension source code isn't updated, which makes those statements misleading and untrue because only some parts of PIA VPN are open-source and have their respective GitHub repositories updated.

Steps to reproduce

  1. Go to the Private Internet Access website;
  2. Go to the bottom of the site and click in "Firefox VPN", in the "PIA Apps" section;
  3. Scroll the page until you find this marketing sentence: "Check out our source code on GitHub anytime — we have nothing to hide."
  4. To verify PIA's claims, go to GitHub, search for "pia-foss", filter by "Users" and you will find PIA's official GitHub profile;
  5. Click in "Private Internet Access - Free and Open Source Software" profile;
  6. Look for the "extension-firefox" repository among the profile's repositories;
  7. Click in "extension-firefox";
  8. Notice that the last release in the release section is the 3.1.0 from May 31, 2021;
  9. In another tab, go to the "Add-ons for Firefox" and search for "Private Internet Access";
  10. Find the extension and click on it;
  11. Scroll until you find the extension's version number (currently 3.2.5) and the date from the latest update (currently February 21, 2023);
  12. Understand that the extension's current source code isn't published in GitHub, only the source code from an old version.

What is the expected correct behaviour?

The current firefox extension's source code should be available in the "pia-foss/extension-firefox" repository in GitHub and the latest source code and extension releases in GitHub should be similar with the current firefox extension release in the Add-ons for Firefox website.

Possible fixes suggested remediation

Update the Private Internet Access firefox extension's source code in this GitHub repository and provide the latest extension and source code releases for this firefox extension in the releases section of this GitHub repository. Another solution is to clarify in PIA VPN's website that only some of its apps are open-source and exactly which ones, and consequently archive this repository. In fact, I think that the website shouldn't state that all PIA VPN apps are open-source until they really are.

8pen-s8urce avatar Oct 21 '23 15:10 8pen-s8urce