nice-registry / owner-profiles

✉️ Names, emails, GitHub handles, and more for every npm package author
18 stars 8 forks source link

Sensitive information in owner-profiles #1

Open houey opened 7 years ago

houey commented 7 years ago

Is there someone who can please remove sensitive information in the owner-profiles? How and what is this used for?

hemanth commented 7 years ago

Could you elaborate what sensitive information is?

Whatever is data is displayed here is publicly available.

zeke commented 7 years ago

Like @hemanth said, all of this data is public. However if there is something specific you would like removed, please let us know.

houey commented 7 years ago

So what I am seeing is a person's userid from a company account. Can you tell me where this information comes from? I reached out the person and they have no idea how it got here.

houey commented 7 years ago

I think see.. you guys just pulled the NPM profile and this person used their company internal username for npm.

FML. thanks.

zeke commented 7 years ago

Yep. It comes from npm.

Source: https://www.npmjs.com/~zeke

Result: https://github.com/nice-registry/owner-profiles/blob/master/profiles/zeke.json

hemanth commented 7 years ago

2 years ago -> is-hireable a node module to check if a given github user is open for new opportunities. :D

codetomylaw commented 7 years ago

@zeke please remove birenjie.json , thx

greyKid commented 7 years ago

@zeke I don't know how can my company's information be here. Maybe someone pushed npm modules using work email. Please remove owner-profiles/profiles/musai.json and owner-profiles/profiles/wanghong.json , thank you