ReviewOS

stacks/ts-analytics

public
Clone

Push over the same URL. A password will not work: create a token under access tokens and use it in place of one.

Star 0 Watch 0

A privacy-first analytics toolkit for web applications, powered by DynamoDB. Includes error-tracking.

  • Closed
    Honor explicit telemetry disable in the STX head helper and raw tag

    #182 opened 16 hours ago by chris · 1 comment

  • Closed
    Published tracker ships 5 unused runtime deps, incl. broken `bun-router@0.0.19`

    #181 opened 8 days ago by glennmichael123 · 1 comment

  • Open
    Dashboard filters: expose remaining dims + row-click drill-down

    #180 opened 8 days ago by glennmichael123

  • Closed
    Tracker version identity + cache strategy

    #179 opened 8 days ago by glennmichael123

  • Closed
    GDPR/export completeness + honest retention semantics

    #178 opened 8 days ago by glennmichael123

  • Closed
    Test suite partially tests copies of itself; live ingest path has zero coverage

    #177 opened 8 days ago by glennmichael123

  • Closed
    Privacy: PII-scrub error payloads; stop logging raw IP+UA per hit; align docs with code defaults

    #176 opened 8 days ago by glennmichael123 · 1 comment

  • Closed
    Operational telemetry: no metrics, no alerts, health check never touches the database

    #175 opened 8 days ago by glennmichael123

  • Closed
    Conversions overcount per instance: goal dedup is an in-process Map

    #174 opened 8 days ago by glennmichael123 · 1 comment

  • Closed
    Ingest hardening: no body-size cap; pageview fields stored unbounded

    #173 opened 8 days ago by glennmichael123 · 1 comment

  • Closed
    Dimensional day rollups: breakdown panels silently capped at 30 days by raw TTL

    #172 opened 8 days ago by glennmichael123

  • Closed
    Sessions have no time index: ~14 endpoints full-scan the partition and silently truncate at scale

    #171 opened 8 days ago by glennmichael123

  • Closed
    No ingress firewall: open site auto-provisioning + domains never enforced

    #170 opened 8 days ago by glennmichael123 · 1 comment

  • Closed
    No idempotency: at-least-once delivery double-counts events

    #169 opened 8 days ago by glennmichael123 · 1 comment

  • Closed
    Background jobs never run on either documented production deploy path

    #168 opened 8 days ago by glennmichael123 · 1 comment

  • Closed
    Avg time on site is structurally wrong — bounces count as 0s; departure pings unused for sessions

    #167 opened 8 days ago by glennmichael123

  • Closed
    Bot filtering admits headless browsers, http libraries, and empty user agents

    #166 opened 8 days ago by glennmichael123 · 1 comment

  • Closed
    CRITICAL: process-random daily salt inflates unique visitors per instance/restart

    #165 opened 8 days ago by glennmichael123

  • Closed
    Epic: Fathom-parity audit — gaps & correctness tracking

    #163 opened 8 days ago by glennmichael123 · 1 comment

  • Closed
    CRITICAL: late events silently undercounted across all stats

    #162 opened 8 days ago by glennmichael123

  • Closed
    CRITICAL: lost session updates on concurrent pageviews (blind putItem)

    #161 opened 8 days ago by glennmichael123

  • Closed
    CRITICAL: code-injection / XSS in served minimal tracking script

    #160 opened 8 days ago by glennmichael123

  • Closed
    excludedIps / excludedPaths configured but never enforced at ingest

    #159 opened 8 days ago by glennmichael123

  • Closed
    No rate limiting on /collect, /t, or API-key validation

    #158 opened 8 days ago by glennmichael123

  • Closed
    Admin can remove the owner / other admins (no rank check)

    #157 opened 8 days ago by glennmichael123

  • Open
    Billing is inert scaffolding — plan can never be changed

    #156 opened 8 days ago by glennmichael123

  • Closed
    GA4/UA importer missing — biggest Fathom-migration blocker

    #155 opened 8 days ago by glennmichael123 · 1 comment

  • Closed
    No read API (the 'read' key permission is minted but never validated)

    #154 opened 8 days ago by glennmichael123

  • Closed
    Period comparison broken (toggle no-op + wrong-shape consumer)

    #153 opened 8 days ago by glennmichael123

  • Closed
    Shared dashboards are a dead end (tokens minted, no page/endpoint/UI)

    #152 opened 8 days ago by glennmichael123