search

scarf-sh / scarf-js

Installation analytics for your npm package
https://scarf.sh
Apache License 2.0
157 stars 11 forks source link

You are need to know IP ... #26

Closed furryablack closed 4 years ago

furryablack commented 4 years ago

Why?

"Your IP address will be used to look up any available company information"

But it's the lie =)

Pls, explain me, how is it works technically. How are you to grab a company info with the ip's knowledge?

aviaviavi commented 4 years ago

Hi @furryablack. I can assure you it's not a lie :)

IP addresses are associated with some owning entity. Often this is just the internet service provider, but in many cases, they can be associated with a business or a cloud hosting provider. There are many paid API's which let you look up this information, and we use these API's to learn if the IP is associated with a business. Scarf stores the metadata associated with the IP, but discards the IP address itself from our system. When we find an installation that comes from a business, we show that information to the maintainer of the package.