<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>Forem: Livrädo Sandoval</title>
    <description>The latest articles on Forem by Livrädo Sandoval (@livrasand).</description>
    <link>https://forem.com/livrasand</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3368434%2F9f010822-8582-4e47-97c5-65d86d43a6cd.jpeg</url>
      <title>Forem: Livrädo Sandoval</title>
      <link>https://forem.com/livrasand</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://forem.com/feed/livrasand"/>
    <language>en</language>
    <item>
      <title>Should anonymous contributions be allowed in open source?</title>
      <dc:creator>Livrädo Sandoval</dc:creator>
      <pubDate>Tue, 07 Apr 2026 20:00:00 +0000</pubDate>
      <link>https://forem.com/livrasand/should-anonymous-contributions-be-allowed-in-open-source-1ofg</link>
      <guid>https://forem.com/livrasand/should-anonymous-contributions-be-allowed-in-open-source-1ofg</guid>
      <description>&lt;p&gt;Open source has always been built on a simple idea:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Transparency builds trust.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;You can see who wrote the code, who reviewed it, and how decisions were made. Identity is part of the system.&lt;/p&gt;

&lt;p&gt;But that assumption is starting to be questioned.&lt;/p&gt;

&lt;p&gt;With growing concerns around privacy, harassment, and professional risk, a new question is emerging:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Should anonymous contributions be allowed in open source?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Not as an edge case — but as a first-class option.&lt;/p&gt;




&lt;h2&gt;
  
  
  The case for anonymity
&lt;/h2&gt;

&lt;p&gt;Let’s start with why this idea is gaining traction.&lt;/p&gt;

&lt;h3&gt;
  
  
  1. Privacy is no longer optional
&lt;/h3&gt;

&lt;p&gt;A Git commit is not just code. It’s identity.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Name&lt;/li&gt;
&lt;li&gt;Email&lt;/li&gt;
&lt;li&gt;Activity history&lt;/li&gt;
&lt;li&gt;Contribution patterns&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Over time, this creates a detailed public profile.&lt;/p&gt;

&lt;p&gt;For some developers, that’s fine. For others, it’s exposure they never really agreed to.&lt;/p&gt;

&lt;p&gt;Anonymity gives contributors control over what they reveal — and what they don’t.&lt;/p&gt;




&lt;h3&gt;
  
  
  2. Safety and risk mitigation
&lt;/h3&gt;

&lt;p&gt;Not all contributions are neutral.&lt;/p&gt;

&lt;p&gt;Some developers contribute to:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Politically sensitive projects&lt;/li&gt;
&lt;li&gt;Privacy tools&lt;/li&gt;
&lt;li&gt;Software their employer may not support&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;In some regions or contexts, visibility can carry real consequences.&lt;/p&gt;

&lt;p&gt;Anonymity isn’t about hiding.&lt;br&gt;
It’s about reducing unnecessary risk.&lt;/p&gt;




&lt;h3&gt;
  
  
  3. Lowering the barrier to entry
&lt;/h3&gt;

&lt;p&gt;Open source can be intimidating.&lt;/p&gt;

&lt;p&gt;Especially for:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;New developers&lt;/li&gt;
&lt;li&gt;People dealing with impostor syndrome&lt;/li&gt;
&lt;li&gt;Contributors from underrepresented groups&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;When identity is attached, contribution becomes personal.&lt;/p&gt;

&lt;p&gt;When identity is removed, contribution becomes technical.&lt;/p&gt;

&lt;p&gt;That shift can make it easier to:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Open your first PR&lt;/li&gt;
&lt;li&gt;Ask questions&lt;/li&gt;
&lt;li&gt;Participate without fear of judgment&lt;/li&gt;
&lt;/ul&gt;




&lt;h3&gt;
  
  
  4. Reducing noise around reputation
&lt;/h3&gt;

&lt;p&gt;Not every contribution needs to be a signal.&lt;/p&gt;

&lt;p&gt;Sometimes you just want to:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Fix a typo&lt;/li&gt;
&lt;li&gt;Suggest a small improvement&lt;/li&gt;
&lt;li&gt;Help without building a “public track record”&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Anonymity allows contribution without turning everything into reputation capital.&lt;/p&gt;




&lt;h2&gt;
  
  
  The case against anonymity
&lt;/h2&gt;

&lt;p&gt;Now the other side — and it’s just as important.&lt;/p&gt;

&lt;h3&gt;
  
  
  1. Accountability matters
&lt;/h3&gt;

&lt;p&gt;Open source relies on trust.&lt;/p&gt;

&lt;p&gt;Maintainers need to know:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Who is contributing&lt;/li&gt;
&lt;li&gt;Whether they have a track record&lt;/li&gt;
&lt;li&gt;If they can be trusted over time&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Anonymous contributions remove that layer.&lt;/p&gt;

&lt;p&gt;If something goes wrong:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Who is responsible?&lt;/li&gt;
&lt;li&gt;Who do you follow up with?&lt;/li&gt;
&lt;li&gt;Who builds long-term trust?&lt;/li&gt;
&lt;/ul&gt;




&lt;h3&gt;
  
  
  2. Increased risk of abuse
&lt;/h3&gt;

&lt;p&gt;Without identity, barriers drop — for everyone.&lt;/p&gt;

&lt;p&gt;Including bad actors.&lt;/p&gt;

&lt;p&gt;Potential risks:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Spam PRs&lt;/li&gt;
&lt;li&gt;Malicious code submissions&lt;/li&gt;
&lt;li&gt;Harassment through issues/comments&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Most platforms already struggle with moderation.&lt;/p&gt;

&lt;p&gt;Anonymity can amplify that challenge.&lt;/p&gt;




&lt;h3&gt;
  
  
  3. Harder collaboration
&lt;/h3&gt;

&lt;p&gt;Open source is not just about code.&lt;/p&gt;

&lt;p&gt;It’s about relationships.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Long-term contributors&lt;/li&gt;
&lt;li&gt;Maintainer trust&lt;/li&gt;
&lt;li&gt;Ongoing discussions&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Identity helps build continuity.&lt;/p&gt;

&lt;p&gt;Without it, every interaction can feel like starting from zero.&lt;/p&gt;




&lt;h3&gt;
  
  
  4. Reputation is part of the incentive
&lt;/h3&gt;

&lt;p&gt;Let’s be honest:&lt;/p&gt;

&lt;p&gt;Many developers contribute to open source because it:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Builds credibility&lt;/li&gt;
&lt;li&gt;Helps with jobs&lt;/li&gt;
&lt;li&gt;Strengthens their public profile&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;If anonymity becomes the norm, that incentive weakens.&lt;/p&gt;

&lt;p&gt;And that could reduce participation in some contexts.&lt;/p&gt;




&lt;h2&gt;
  
  
  So… what’s the right balance?
&lt;/h2&gt;

&lt;p&gt;This isn’t a binary choice.&lt;/p&gt;

&lt;p&gt;It’s not:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Full anonymity
vs&lt;/li&gt;
&lt;li&gt;Full transparency&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The more interesting question is:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Where should anonymity be allowed — and where shouldn’t it?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Some possibilities:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Anonymous contributions allowed, but clearly labeled&lt;/li&gt;
&lt;li&gt;Maintainers choose whether to accept them&lt;/li&gt;
&lt;li&gt;Rate limits and validation to reduce abuse&lt;/li&gt;
&lt;li&gt;No anonymity for critical infrastructure projects&lt;/li&gt;
&lt;li&gt;Optional anonymity for low-risk contributions&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;In other words:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Make anonymity a tool — not the default.&lt;/strong&gt;&lt;/p&gt;




&lt;h2&gt;
  
  
  A practical example
&lt;/h2&gt;

&lt;p&gt;Tools like &lt;strong&gt;gitGost&lt;/strong&gt; are exploring this space.&lt;/p&gt;

&lt;p&gt;They allow developers to:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Open pull requests&lt;/li&gt;
&lt;li&gt;Comment on issues&lt;/li&gt;
&lt;li&gt;Contribute code&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;…without attaching personal identity.&lt;/p&gt;

&lt;p&gt;But they don’t remove accountability entirely:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;All contributions are still public&lt;/li&gt;
&lt;li&gt;Maintainers review everything&lt;/li&gt;
&lt;li&gt;Abuse can still be moderated&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The difference is:&lt;/p&gt;

&lt;p&gt;Identity is no longer required to participate.&lt;/p&gt;




&lt;h2&gt;
  
  
  My take
&lt;/h2&gt;

&lt;p&gt;Open source should be about &lt;strong&gt;contribution quality&lt;/strong&gt;, not identity exposure.&lt;/p&gt;

&lt;p&gt;But removing identity completely, everywhere, would be a mistake.&lt;/p&gt;

&lt;p&gt;A better approach:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Keep transparency where it matters (core maintainers, critical systems)&lt;/li&gt;
&lt;li&gt;Allow anonymity where risk is low and contribution is small&lt;/li&gt;
&lt;li&gt;Give maintainers control over their boundaries&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Anonymity should not replace identity.&lt;/p&gt;

&lt;p&gt;But it should exist as a legitimate option.&lt;/p&gt;




&lt;h2&gt;
  
  
  The real question
&lt;/h2&gt;

&lt;p&gt;This debate is not just technical.&lt;/p&gt;

&lt;p&gt;It’s cultural.&lt;/p&gt;

&lt;p&gt;Open source has always assumed that:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;“If you have nothing to hide, you have nothing to fear.”&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;That assumption doesn’t hold as well anymore.&lt;/p&gt;

&lt;p&gt;So the real question becomes:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Should contributing to open source require exposing your identity?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Or should that be a choice?&lt;/p&gt;




&lt;p&gt;I’m curious where you stand.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Would you accept anonymous PRs in your repo?&lt;/li&gt;
&lt;li&gt;Have you ever avoided contributing because of visibility?&lt;/li&gt;
&lt;li&gt;Do you see anonymity as a feature — or a risk?&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Let’s discuss.&lt;/p&gt;

</description>
      <category>opensource</category>
      <category>github</category>
      <category>programming</category>
      <category>softwaredevelopment</category>
    </item>
    <item>
      <title>How anonymous is GitHub… really?</title>
      <dc:creator>Livrädo Sandoval</dc:creator>
      <pubDate>Mon, 06 Apr 2026 18:00:00 +0000</pubDate>
      <link>https://forem.com/livrasand/how-anonymous-is-github-really-441f</link>
      <guid>https://forem.com/livrasand/how-anonymous-is-github-really-441f</guid>
      <description>&lt;p&gt;GitHub feels public.&lt;/p&gt;

&lt;p&gt;But not &lt;em&gt;that&lt;/em&gt; public.&lt;/p&gt;

&lt;p&gt;You push a commit, open a PR, maybe use a username that isn’t your real name… and it feels “safe enough”.&lt;/p&gt;

&lt;p&gt;But here’s the real question:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;How anonymous are you actually?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Let’s break it down.&lt;/p&gt;




&lt;h2&gt;
  
  
  What a normal commit really exposes
&lt;/h2&gt;

&lt;p&gt;Every Git commit contains more than just code.&lt;/p&gt;

&lt;p&gt;A typical commit includes:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Author name&lt;/li&gt;
&lt;li&gt;Author email&lt;/li&gt;
&lt;li&gt;Commit timestamp&lt;/li&gt;
&lt;li&gt;Commit message&lt;/li&gt;
&lt;li&gt;Diff (your actual changes)&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Even if you’re using a pseudonym, your &lt;strong&gt;email is often the real identifier&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;And yes — it’s public.&lt;/p&gt;




&lt;h2&gt;
  
  
  Email leakage is more common than you think
&lt;/h2&gt;

&lt;p&gt;Unless you’ve explicitly configured GitHub’s email privacy settings, your commits may expose your real email.&lt;/p&gt;

&lt;p&gt;Even worse:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Old commits may still contain it&lt;/li&gt;
&lt;li&gt;Forks and mirrors preserve that data&lt;/li&gt;
&lt;li&gt;Anyone can scrape it at scale&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;This has led to:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Spam campaigns&lt;/li&gt;
&lt;li&gt;Targeted phishing&lt;/li&gt;
&lt;li&gt;Identity correlation across platforms&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Once your email is in the Git history… it’s effectively permanent.&lt;/p&gt;




&lt;h2&gt;
  
  
  Metadata goes deeper than identity
&lt;/h2&gt;

&lt;p&gt;Even if you hide your name and email, Git still leaks signals.&lt;/p&gt;

&lt;p&gt;Things like:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Time patterns (when you commit)&lt;/li&gt;
&lt;li&gt;Writing style in commit messages&lt;/li&gt;
&lt;li&gt;Code style and structure&lt;/li&gt;
&lt;li&gt;File naming conventions&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;This is where &lt;strong&gt;stylometry&lt;/strong&gt; comes in — analyzing patterns to identify authors.&lt;/p&gt;

&lt;p&gt;You don’t need your real name attached to be recognizable.&lt;/p&gt;




&lt;h2&gt;
  
  
  🍴 Forks make everything traceable
&lt;/h2&gt;

&lt;p&gt;GitHub’s model is built around forks.&lt;/p&gt;

&lt;p&gt;When you:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Fork a repository&lt;/li&gt;
&lt;li&gt;Create a branch&lt;/li&gt;
&lt;li&gt;Open a Pull Request&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;You’re creating a &lt;strong&gt;public, traceable graph&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;Anyone can see:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Where the fork came from&lt;/li&gt;
&lt;li&gt;When it was created&lt;/li&gt;
&lt;li&gt;How it evolved&lt;/li&gt;
&lt;li&gt;Who contributed&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Even if you delete your fork later, traces often remain:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Cached data&lt;/li&gt;
&lt;li&gt;PR references&lt;/li&gt;
&lt;li&gt;External mirrors&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;In short:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;Git is immutable by design. And GitHub builds visibility on top of that.&lt;/p&gt;
&lt;/blockquote&gt;




&lt;h2&gt;
  
  
  So… what’s the actual threat model?
&lt;/h2&gt;

&lt;p&gt;Let’s be realistic.&lt;/p&gt;

&lt;p&gt;GitHub doesn’t exist to deanonymize you — but it also doesn’t protect your anonymity.&lt;/p&gt;

&lt;h3&gt;
  
  
  It &lt;em&gt;does&lt;/em&gt; expose you to:
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;Recruiters / HR scanning your history&lt;/li&gt;
&lt;li&gt;Maintainers judging your contributions&lt;/li&gt;
&lt;li&gt;Email scrapers and bots&lt;/li&gt;
&lt;li&gt;Casual observers correlating activity&lt;/li&gt;
&lt;/ul&gt;

&lt;h3&gt;
  
  
  It &lt;em&gt;does not&lt;/em&gt; protect against:
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;Identity linking via email reuse&lt;/li&gt;
&lt;li&gt;Behavioral analysis (timing, style)&lt;/li&gt;
&lt;li&gt;Public metadata aggregation&lt;/li&gt;
&lt;/ul&gt;

&lt;h3&gt;
  
  
  And it definitely doesn’t hide:
&lt;/h3&gt;

&lt;ul&gt;
&lt;li&gt;Your IP (when interacting via the web)&lt;/li&gt;
&lt;li&gt;Your activity patterns over time&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;GitHub is built for &lt;strong&gt;transparency and attribution&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;Not privacy.&lt;/p&gt;




&lt;h2&gt;
  
  
  “But I use a different username…”
&lt;/h2&gt;

&lt;p&gt;That helps.&lt;/p&gt;

&lt;p&gt;But it’s not enough.&lt;/p&gt;

&lt;p&gt;If any of these are true:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;You reused an email somewhere else&lt;/li&gt;
&lt;li&gt;You linked your account to social profiles&lt;/li&gt;
&lt;li&gt;You commit in consistent time windows&lt;/li&gt;
&lt;li&gt;You write in a recognizable way&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Then your “anonymous” identity becomes… linkable.&lt;/p&gt;

&lt;p&gt;Not instantly.&lt;/p&gt;

&lt;p&gt;But gradually.&lt;/p&gt;




&lt;h2&gt;
  
  
  👻 A different model: anonymous contributions
&lt;/h2&gt;

&lt;p&gt;What if you could contribute &lt;strong&gt;without attaching identity at all&lt;/strong&gt;?&lt;/p&gt;

&lt;p&gt;No name.&lt;br&gt;
No email.&lt;br&gt;
No account.&lt;/p&gt;

&lt;p&gt;That’s where &lt;strong&gt;gitGost&lt;/strong&gt; comes in.&lt;/p&gt;


&lt;h2&gt;
  
  
  How gitGost changes the flow
&lt;/h2&gt;

&lt;p&gt;Instead of pushing directly to GitHub, you push through gitGost:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;git remote add gost https://gitgost.leapcell.app/v1/gh/owner/repo
git push gost my-branch:main
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;What happens next:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Your commit is stripped of identifying metadata&lt;/li&gt;
&lt;li&gt;A Pull Request is created via a neutral bot&lt;/li&gt;
&lt;li&gt;Your message becomes the PR description&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Result:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;The contribution is visible&lt;/li&gt;
&lt;li&gt;The code is reviewable&lt;/li&gt;
&lt;li&gt;&lt;strong&gt;You are not&lt;/strong&gt;&lt;/li&gt;
&lt;/ul&gt;




&lt;h2&gt;
  
  
  What about IP tracking?
&lt;/h2&gt;

&lt;p&gt;Important detail:&lt;/p&gt;

&lt;p&gt;gitGost removes &lt;strong&gt;Git-level identity&lt;/strong&gt;, but your IP can still be visible to the server.&lt;/p&gt;

&lt;p&gt;If you want stronger anonymity, you can route your connection through &lt;strong&gt;Tor&lt;/strong&gt;.&lt;/p&gt;




&lt;h2&gt;
  
  
  🧅 Using Tor for network-level privacy
&lt;/h2&gt;

&lt;p&gt;Example (Linux/macOS):&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;torsocks git push gost my-branch:main
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;This routes your traffic through the Tor network.&lt;/p&gt;

&lt;p&gt;So instead of your real IP, the server sees:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;A Tor exit node&lt;/li&gt;
&lt;li&gt;Not your actual location&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Now you have:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;No name&lt;/li&gt;
&lt;li&gt;No email&lt;/li&gt;
&lt;li&gt;No direct IP&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;That’s a much stronger anonymity model.&lt;/p&gt;




&lt;h2&gt;
  
  
  ⚠️ Let’s be honest: perfect anonymity doesn’t exist
&lt;/h2&gt;

&lt;p&gt;Even with tools like gitGost + Tor, some risks remain:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Advanced stylometry&lt;/li&gt;
&lt;li&gt;Correlating timing across platforms&lt;/li&gt;
&lt;li&gt;Reusing unique phrases&lt;/li&gt;
&lt;li&gt;Mixing anonymous and identified contributions&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Anonymity is not a switch.&lt;/p&gt;

&lt;p&gt;It’s a spectrum.&lt;/p&gt;




&lt;h2&gt;
  
  
  When does this actually matter?
&lt;/h2&gt;

&lt;p&gt;Not every contribution needs anonymity.&lt;/p&gt;

&lt;p&gt;But in some cases, it really does:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Contributing to controversial projects&lt;/li&gt;
&lt;li&gt;Avoiding employer conflicts&lt;/li&gt;
&lt;li&gt;Reducing spam and scraping exposure&lt;/li&gt;
&lt;li&gt;Making small contributions without permanent identity linkage&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Or simply:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;You don’t want every typo fix tied to your name forever.&lt;/p&gt;
&lt;/blockquote&gt;




&lt;h2&gt;
  
  
  Final thought
&lt;/h2&gt;

&lt;p&gt;GitHub is excellent at what it was designed for:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Collaboration through transparency.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;But transparency comes with trade-offs.&lt;/p&gt;

&lt;p&gt;If you’ve ever assumed you were “kind of anonymous”…&lt;/p&gt;

&lt;p&gt;Now you know the truth.&lt;/p&gt;

&lt;p&gt;You’re not.&lt;/p&gt;

&lt;p&gt;Unless you choose to be.&lt;/p&gt;

</description>
      <category>github</category>
      <category>git</category>
      <category>privacy</category>
      <category>cybersecurity</category>
    </item>
    <item>
      <title>The hidden cost of contributing to open source</title>
      <dc:creator>Livrädo Sandoval</dc:creator>
      <pubDate>Sun, 05 Apr 2026 14:05:53 +0000</pubDate>
      <link>https://forem.com/livrasand/the-hidden-cost-of-contributing-to-open-source-491a</link>
      <guid>https://forem.com/livrasand/the-hidden-cost-of-contributing-to-open-source-491a</guid>
      <description>&lt;p&gt;Open source is supposed to be liberating.&lt;/p&gt;

&lt;p&gt;You learn in public, collaborate with strangers, and build a reputation that compounds over time. At least, that’s the narrative.&lt;/p&gt;

&lt;p&gt;But there’s a quieter side that almost nobody talks about.&lt;/p&gt;

&lt;p&gt;A cost that doesn’t show up in GitHub stats.&lt;/p&gt;

&lt;p&gt;A cost that lives in your head.&lt;/p&gt;




&lt;h2&gt;
  
  
  The pressure of “build in public”
&lt;/h2&gt;

&lt;p&gt;“Build in public” started as a healthy movement.&lt;/p&gt;

&lt;p&gt;Share your progress. Be transparent. Help others learn.&lt;/p&gt;

&lt;p&gt;But somewhere along the way, it turned into performance.&lt;/p&gt;

&lt;p&gt;Every commit becomes a statement.&lt;br&gt;
Every PR becomes a reflection of your skill.&lt;br&gt;
Every comment feels like it's being judged.&lt;/p&gt;

&lt;p&gt;You’re no longer just fixing a bug — you’re being watched while doing it.&lt;/p&gt;

&lt;p&gt;And even if nobody is actually watching… it feels like they are.&lt;/p&gt;

&lt;p&gt;That subtle shift changes everything.&lt;/p&gt;


&lt;h2&gt;
  
  
  Fear of being wrong — in public
&lt;/h2&gt;

&lt;p&gt;Making mistakes is part of engineering.&lt;/p&gt;

&lt;p&gt;But making mistakes &lt;strong&gt;in front of everyone&lt;/strong&gt; is something else.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;What if the maintainer thinks this is dumb?&lt;/li&gt;
&lt;li&gt;What if someone points out something obvious I missed?&lt;/li&gt;
&lt;li&gt;What if this PR exposes that I’m not as good as I think?&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;So instead of contributing, you hesitate.&lt;/p&gt;

&lt;p&gt;You rewrite the same commit five times.&lt;br&gt;
You over-explain.&lt;br&gt;
Or worse — you don’t open the PR at all.&lt;/p&gt;

&lt;p&gt;Not because you can’t.&lt;/p&gt;

&lt;p&gt;Because you don’t want to be wrong &lt;em&gt;in public&lt;/em&gt;.&lt;/p&gt;


&lt;h2&gt;
  
  
  The quiet impostor syndrome in PRs
&lt;/h2&gt;

&lt;p&gt;Impostor syndrome hits differently in open source.&lt;/p&gt;

&lt;p&gt;At work, your mistakes are contained.&lt;br&gt;
In open source, they’re permanent. Indexed. Searchable.&lt;/p&gt;

&lt;p&gt;Attached to your name.&lt;/p&gt;

&lt;p&gt;That creates a strange internal dialogue:&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;“Do I really belong contributing here?”&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;Even experienced developers feel it when contributing to unfamiliar repos.&lt;/p&gt;

&lt;p&gt;You’re stepping into someone else’s codebase, their standards, their expectations.&lt;/p&gt;

&lt;p&gt;And your name is right there, attached to whatever you submit.&lt;/p&gt;


&lt;h2&gt;
  
  
  Exposure anxiety is real
&lt;/h2&gt;

&lt;p&gt;There’s also a more practical layer: exposure.&lt;/p&gt;

&lt;p&gt;Public commits reveal:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Your name&lt;/li&gt;
&lt;li&gt;Your email&lt;/li&gt;
&lt;li&gt;Your activity patterns&lt;/li&gt;
&lt;li&gt;Your interests&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Over time, this builds a detailed profile.&lt;/p&gt;

&lt;p&gt;For some, that’s fine.&lt;/p&gt;

&lt;p&gt;For others, it’s uncomfortable — or even risky.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Maybe your employer wouldn’t approve of certain contributions&lt;/li&gt;
&lt;li&gt;Maybe you don’t want your activity permanently tied to your identity&lt;/li&gt;
&lt;li&gt;Maybe you’ve experienced spam, scraping, or worse&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Open source assumes visibility is harmless.&lt;/p&gt;

&lt;p&gt;That’s not always true.&lt;/p&gt;


&lt;h2&gt;
  
  
  So what happens?
&lt;/h2&gt;

&lt;p&gt;A lot of developers silently opt out.&lt;/p&gt;

&lt;p&gt;Not because they don’t care.&lt;br&gt;
Not because they’re not capable.&lt;/p&gt;

&lt;p&gt;But because the psychological cost is too high.&lt;/p&gt;

&lt;p&gt;They:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Avoid contributing to larger projects&lt;/li&gt;
&lt;li&gt;Stick to private repos&lt;/li&gt;
&lt;li&gt;Or only engage where they feel “safe enough”&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Open source loses contributions it never even knew existed.&lt;/p&gt;


&lt;h2&gt;
  
  
  A different approach: contribution without exposure
&lt;/h2&gt;

&lt;p&gt;What if contributing didn’t require attaching your identity?&lt;/p&gt;

&lt;p&gt;What if you could:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Fix a bug&lt;/li&gt;
&lt;li&gt;Improve documentation&lt;/li&gt;
&lt;li&gt;Participate in discussions&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;…without turning it into a permanent public record tied to your name?&lt;/p&gt;

&lt;p&gt;That’s the idea behind &lt;strong&gt;gitGost&lt;/strong&gt;.&lt;/p&gt;


&lt;h2&gt;
  
  
  👻 Contribute like a ghost
&lt;/h2&gt;

&lt;p&gt;With gitGost, you can contribute to any GitHub repository:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;No account&lt;/li&gt;
&lt;li&gt;No tokens&lt;/li&gt;
&lt;li&gt;No personal metadata&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Just:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;git remote add gost https://gitgost.leapcell.app/v1/gh/owner/repo
git push gost my-branch:main
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Your contribution still goes through the same process:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;A Pull Request is created&lt;/li&gt;
&lt;li&gt;Maintainers review it&lt;/li&gt;
&lt;li&gt;Feedback happens as usual&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;But your identity isn’t part of the equation.&lt;/p&gt;




&lt;h2&gt;
  
  
  Why this matters
&lt;/h2&gt;

&lt;p&gt;This isn’t about removing accountability.&lt;/p&gt;

&lt;p&gt;Maintainers still review every PR.&lt;br&gt;
Code still needs to be correct.&lt;br&gt;
Discussion still happens.&lt;/p&gt;

&lt;p&gt;What changes is &lt;strong&gt;who you have to be while contributing&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;You’re no longer:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Protecting your reputation&lt;/li&gt;
&lt;li&gt;Managing your public image&lt;/li&gt;
&lt;li&gt;Second-guessing every small mistake&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;You’re just solving the problem.&lt;/p&gt;




&lt;h2&gt;
  
  
  Not everything needs your name attached
&lt;/h2&gt;

&lt;p&gt;Some contributions are meaningful milestones.&lt;/p&gt;

&lt;p&gt;Others are:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Fixing a typo&lt;/li&gt;
&lt;li&gt;Refactoring a small function&lt;/li&gt;
&lt;li&gt;Suggesting a minor improvement&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Do those really need to live forever under your identity?&lt;/p&gt;

&lt;p&gt;Maybe.&lt;/p&gt;

&lt;p&gt;But maybe not.&lt;/p&gt;




&lt;h2&gt;
  
  
  Final thought
&lt;/h2&gt;

&lt;p&gt;Open source should lower barriers — not introduce new invisible ones.&lt;/p&gt;

&lt;p&gt;Skill shouldn’t be blocked by fear.&lt;br&gt;
Contribution shouldn’t require exposure.&lt;/p&gt;

&lt;p&gt;And sometimes…&lt;/p&gt;

&lt;p&gt;The best way to contribute&lt;br&gt;
is to disappear.&lt;/p&gt;

</description>
      <category>opensource</category>
      <category>privacy</category>
      <category>github</category>
    </item>
    <item>
      <title>Launching CodeTrackr 0.2.0 🚀</title>
      <dc:creator>Livrädo Sandoval</dc:creator>
      <pubDate>Sun, 05 Apr 2026 13:56:26 +0000</pubDate>
      <link>https://forem.com/livrasand/launching-codetrackr-020-51i4</link>
      <guid>https://forem.com/livrasand/launching-codetrackr-020-51i4</guid>
      <description>&lt;p&gt;I am excited to announce the next evolution of &lt;strong&gt;CodeTrackr&lt;/strong&gt; — a privacy-first, real-time developer analytics platform built for those who want full control over their data.&lt;/p&gt;

&lt;p&gt;CodeTrackr automatically tracks your coding activity, generates live insights, and gives you powerful tools to understand and improve your workflow — without sacrificing your privacy.&lt;/p&gt;

&lt;p&gt;We’ve shipped a ton of new features designed to help you code smarter, build faster, and stay in control.&lt;/p&gt;

&lt;p&gt;So, how can you use CodeTrackr to level up as a developer?&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;This is an experimental project still in the BETA phase.&lt;/p&gt;
&lt;/blockquote&gt;

&lt;p&gt;Web: &lt;a href="https://codetrackr.leapcell.app" rel="noopener noreferrer"&gt;https://codetrackr.leapcell.app&lt;/a&gt;&lt;br&gt;
Repo: &lt;a href="https://github.com/livrasand/CodeTrackr" rel="noopener noreferrer"&gt;https://github.com/livrasand/CodeTrackr&lt;/a&gt;&lt;/p&gt;


&lt;h2&gt;
  
  
  🚀 Level up faster
&lt;/h2&gt;

&lt;p&gt;Here’s what you can do with CodeTrackr:&lt;/p&gt;

&lt;p&gt;💪 &lt;strong&gt;Track everything automatically&lt;/strong&gt;&lt;br&gt;
No setup friction. Just install the extension, add your API key, and start sending heartbeats instantly. Every coding session is tracked in real time — across any editor.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fd26haeqnnpcpgxs1kltz.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fd26haeqnnpcpgxs1kltz.png" alt=" " width="800" height="631"&gt;&lt;/a&gt;&lt;/p&gt;



&lt;p&gt;💻 &lt;strong&gt;See your coding activity live&lt;/strong&gt;&lt;br&gt;
Watch your stats update as you type. CodeTrackr provides real-time analytics, including total coding time, languages used, and project breakdowns — all from a clean dashboard.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F445u23354ut36f5cxug0.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2F445u23354ut36f5cxug0.png" alt=" " width="800" height="231"&gt;&lt;/a&gt;&lt;/p&gt;



&lt;p&gt;📊 &lt;strong&gt;Own your data&lt;/strong&gt;&lt;br&gt;
Export your full history anytime in JSON or CSV. No paywalls. No lock-in. Your data belongs to you — always.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fnc190jdi4x8z5yxw0rf0.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fnc190jdi4x8z5yxw0rf0.png" alt=" " width="800" height="161"&gt;&lt;/a&gt;&lt;/p&gt;



&lt;p&gt;📈 &lt;strong&gt;Compete and explore with leaderboards&lt;/strong&gt;&lt;br&gt;
See how you rank globally by language, editor, or total time. Discover other developers and track your progress over time with live leaderboards powered by real-time infrastructure.&lt;/p&gt;



&lt;p&gt;🔌 &lt;strong&gt;Build your own plugins&lt;/strong&gt;&lt;br&gt;
Extend CodeTrackr your way. Create dashboard plugins using simple JavaScript — no backend required. Publish once, and every user can install it instantly.&lt;/p&gt;

&lt;p&gt;&lt;a href="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fp80yvooag442u39r3wwg.png" class="article-body-image-wrapper"&gt;&lt;img src="https://media2.dev.to/dynamic/image/width=800%2Cheight=%2Cfit=scale-down%2Cgravity=auto%2Cformat=auto/https%3A%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Farticles%2Fp80yvooag442u39r3wwg.png" alt=" " width="800" height="669"&gt;&lt;/a&gt;&lt;/p&gt;



&lt;p&gt;🧠 &lt;strong&gt;Works with any editor&lt;/strong&gt;&lt;br&gt;
VS Code, Neovim, IntelliJ, Emacs, Zed — anything that can send an HTTP request can integrate with CodeTrackr. One endpoint. Full tracking.&lt;/p&gt;



&lt;p&gt;&lt;strong&gt;Drop-in API&lt;/strong&gt;&lt;br&gt;
Already using another tracking tool? CodeTrackr offers a compatible heartbeat API:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight http"&gt;&lt;code&gt;&lt;span class="err"&gt;POST /api/v1/heartbeat
X-API-Key: ct_your_key
{ "project": "my-app", "lang": "rust" }
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Switching takes minutes.&lt;/p&gt;




&lt;p&gt;🔐 &lt;strong&gt;Privacy-first by design&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;No tracking scripts&lt;/li&gt;
&lt;li&gt;No data selling&lt;/li&gt;
&lt;li&gt;Anonymous accounts supported&lt;/li&gt;
&lt;li&gt;Self-hostable with full control&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;You can even run everything locally using Docker.&lt;/p&gt;




&lt;h2&gt;
  
  
  🧰 Build with CodeTrackr
&lt;/h2&gt;

&lt;p&gt;CodeTrackr isn’t just a tool — it’s a platform.&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Create custom charts, streak systems, or team dashboards&lt;/li&gt;
&lt;li&gt;Publish IDE extensions for any environment&lt;/li&gt;
&lt;li&gt;Ship plugins that run directly in the browser&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;All without managing infrastructure.&lt;/p&gt;




&lt;h2&gt;
  
  
  ⚙️ Getting started
&lt;/h2&gt;

&lt;p&gt;Getting started is simple:&lt;/p&gt;

&lt;ol&gt;
&lt;li&gt;Sign in (or create an anonymous account)&lt;/li&gt;
&lt;li&gt;Generate your API key&lt;/li&gt;
&lt;li&gt;Install the extension in your editor&lt;/li&gt;
&lt;li&gt;Paste your key — done&lt;/li&gt;
&lt;/ol&gt;

&lt;p&gt;That’s it. You’re now tracking your coding activity in real time.&lt;/p&gt;




&lt;h2&gt;
  
  
  💸 Pricing
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Free&lt;/strong&gt; — full-featured for individual developers&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Pro Cloud ($2/mo)&lt;/strong&gt; — unlimited history + extra features&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Self-hosted&lt;/strong&gt; — run everything yourself with zero telemetry&lt;/li&gt;
&lt;/ul&gt;




&lt;h2&gt;
  
  
  🌍 The vision
&lt;/h2&gt;

&lt;p&gt;CodeTrackr is built on a simple idea:&lt;br&gt;
&lt;strong&gt;developer metrics should be transparent, local-first, and owned by you.&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;No black boxes. No hidden tracking. No compromises.&lt;/p&gt;




&lt;h2&gt;
  
  
  🔥 Try it now
&lt;/h2&gt;

&lt;p&gt;Install the extension, start tracking, and take control of your coding data.&lt;/p&gt;




&lt;p&gt;Have ideas for the next version?&lt;br&gt;
We’re building this in the open — your feedback shapes what comes next.&lt;/p&gt;

</description>
      <category>vscode</category>
      <category>productivity</category>
      <category>showdev</category>
    </item>
    <item>
      <title>Your GitHub history is being used against you</title>
      <dc:creator>Livrädo Sandoval</dc:creator>
      <pubDate>Tue, 31 Mar 2026 13:50:02 +0000</pubDate>
      <link>https://forem.com/livrasand/your-github-history-is-being-used-against-you-4n73</link>
      <guid>https://forem.com/livrasand/your-github-history-is-being-used-against-you-4n73</guid>
      <description>&lt;p&gt;For years we were told that building publicly was the best way to grow as a developer. “Share your code”, “document your process”, “make constant commits”. And yes… all of that works. Until he stops doing it.&lt;/p&gt;

&lt;p&gt;Hoy, tu historial en GitHub no solo muestra lo que sabes hacer. It also shows &lt;em&gt;who you were&lt;/em&gt;, &lt;em&gt;what you thought&lt;/em&gt; and &lt;em&gt;what you believed in&lt;/em&gt;… and that can work against you.&lt;/p&gt;

&lt;p&gt;Web: &lt;a href="https://gitgost.leapcell.app" rel="noopener noreferrer"&gt;https://gitgost.leapcell.app&lt;/a&gt;&lt;br&gt;
Repo: &lt;a href="https://github.com/livrasand/gitGost" rel="noopener noreferrer"&gt;https://github.com/livrasand/gitGost&lt;/a&gt;&lt;/p&gt;




&lt;h2&gt;
  
  
  The uncomfortable side of commits
&lt;/h2&gt;

&lt;p&gt;Every commit you make tells a story. Not only technical, but personal.&lt;/p&gt;

&lt;p&gt;Recruiters and companies no longer limit themselves to seeing your CV. They review:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;What projects have you touched&lt;/li&gt;
&lt;li&gt;How you write your commit messages&lt;/li&gt;
&lt;li&gt;What technical decisions did you make&lt;/li&gt;
&lt;li&gt;How you interact in issues and pull requests&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;This may seem fair… until it isn't.&lt;/p&gt;

&lt;p&gt;Because that context is almost never complete. A commit does not explain:&lt;/p&gt;

&lt;p&gt;*if you were learning&lt;br&gt;
*if it was an experiment&lt;br&gt;
*if it was a temporary bad decision&lt;br&gt;
*or if you simply changed your mind later&lt;/p&gt;

&lt;p&gt;However, it remains there. Permanent.&lt;/p&gt;




&lt;h2&gt;
  
  
  Your opinions are also recorded
&lt;/h2&gt;

&lt;p&gt;GitHub is not just code. It's discussion.&lt;/p&gt;

&lt;p&gt;Every comment on an issue, every technical debate, every position on architecture... everything is associated with your identity.&lt;/p&gt;

&lt;p&gt;And here the problem begins.&lt;/p&gt;

&lt;p&gt;Technical opinions evolve. What you defended 2 years ago may seem like a mistake to you today. But on GitHub there is no “emotional context” or “personal evolution.” There are only records.&lt;/p&gt;

&lt;p&gt;Even worse:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;You may be perceived as conflictive due to a specific debate&lt;/li&gt;
&lt;li&gt;As inexperienced by old decisions&lt;/li&gt;
&lt;li&gt;Or as rigid for defending something you no longer think about&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Your history does not distinguish between growth and contradiction. It only shows traces.&lt;/p&gt;




&lt;h2&gt;
  
  
  Contribute to the “wrong”
&lt;/h2&gt;

&lt;p&gt;Open source has an idealistic narrative… but the reality is more complex.&lt;/p&gt;

&lt;p&gt;What happens if you contribute to:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;a project with a controversial philosophy?&lt;/li&gt;
&lt;li&gt;a tool that later becomes controversial?&lt;/li&gt;
&lt;li&gt;a repository associated with questionable decisions?&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Even if your contribution has been technical, neutral or even minimal... your name remains there.&lt;/p&gt;

&lt;p&gt;And someone, at some point, can interpret that without context.&lt;/p&gt;

&lt;p&gt;It doesn't matter if it was years ago. It doesn't matter if you no longer agree.&lt;/p&gt;

&lt;p&gt;It's in your history.&lt;/p&gt;




&lt;h2&gt;
  
  
  The permanent digital identity
&lt;/h2&gt;

&lt;p&gt;This is where everything converges.&lt;/p&gt;

&lt;p&gt;Your GitHub profile becomes a kind of “permanent digital identity”:&lt;/p&gt;

&lt;p&gt;*Does not expire&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Does not restart
*Does not forget&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Unlike real life, where you can change, learn and redefine yourself... on the internet everything is indexed, accessible and evaluable.&lt;/p&gt;

&lt;p&gt;And that creates a real tension:&lt;/p&gt;

&lt;p&gt;*Build in public or protect your privacy?&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Be transparent or be cautious?&lt;/li&gt;
&lt;li&gt;Experiment freely or take care of your reputation?&lt;/li&gt;
&lt;/ul&gt;




&lt;h2&gt;
  
  
  So... do we stop contributing?
&lt;/h2&gt;

&lt;p&gt;Not necessarily.&lt;/p&gt;

&lt;p&gt;But it is worth questioning the idea that everything must be done publicly and permanently.&lt;/p&gt;

&lt;p&gt;There is space for:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;experiment without pressure
*contribute without full exposure&lt;/li&gt;
&lt;li&gt;explore ideas without them defining your long-term identity&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;In this context, different approaches are beginning to emerge. Tools that allow the contribution to be separated from the personal trace, or at least give the developer more control over what is associated with their identity.&lt;/p&gt;

&lt;p&gt;It's not about hiding bad intentions.&lt;br&gt;
It is about recovering something basic: &lt;strong&gt;the right to evolve without your technical past haunting you forever&lt;/strong&gt;.&lt;/p&gt;




&lt;h2&gt;
  
  
  An uncomfortable reflection
&lt;/h2&gt;

&lt;p&gt;Quizá la pregunta no es si debes construir en público.&lt;/p&gt;

&lt;p&gt;Otherwise:&lt;br&gt;
&lt;strong&gt;how much of yourself are you willing to leave permanently recorded?&lt;/strong&gt;&lt;/p&gt;

&lt;p&gt;Because in the end, not everything you create today represents who you will be tomorrow.&lt;/p&gt;

</description>
      <category>github</category>
      <category>privacy</category>
      <category>opensource</category>
      <category>career</category>
    </item>
    <item>
      <title>How to protect your submissions on gitGost using Tor for complete anonymity</title>
      <dc:creator>Livrädo Sandoval</dc:creator>
      <pubDate>Sun, 29 Mar 2026 14:51:15 +0000</pubDate>
      <link>https://forem.com/livrasand/how-to-protect-your-submissions-on-gitgost-using-tor-for-complete-anonymity-2eok</link>
      <guid>https://forem.com/livrasand/how-to-protect-your-submissions-on-gitgost-using-tor-for-complete-anonymity-2eok</guid>
      <description>&lt;p&gt;Hello again!&lt;/p&gt;

&lt;p&gt;Thank you again for taking the time to read this. When contributing to open source projects, maintaining your privacy can be essential, especially if your contributions cover sensitive topics or you prefer not to expose your identity or location. &lt;strong&gt;gitGost already removes your name, email and metadata in your commits&lt;/strong&gt;, but there is still one important piece of information: &lt;em&gt;your IP address&lt;/em&gt;. How to prevent this last clue from giving you away? The answer is simple and effective: &lt;em&gt;use Tor&lt;/em&gt;.&lt;/p&gt;

&lt;h2&gt;
  
  
  Why use Tor together with gitGost?
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;gitGost hides who you are at the Git level&lt;/strong&gt;, but it &lt;em&gt;can't hide where you are on the network&lt;/em&gt;. When you connect over the &lt;strong&gt;Tor&lt;/strong&gt; network, your traffic is routed through multiple nodes before reaching the server, which &lt;strong&gt;prevents even the gitGost server from identifying your real IP&lt;/strong&gt;.&lt;/p&gt;

&lt;p&gt;This means that your anonymity is reinforced with a double layer: gitGost protects your identity in the repository; Tor protects your footprint on the Internet.&lt;/p&gt;

&lt;blockquote&gt;
&lt;p&gt;gitGost hides who you are in Git, Tor hides where you are on the network.&lt;/p&gt;
&lt;/blockquote&gt;

&lt;h2&gt;
  
  
  Importance of hiding your IP
&lt;/h2&gt;

&lt;p&gt;Even if a system keeps no logs or little data, &lt;em&gt;your IP address is exposed&lt;/em&gt; momentarily at the network layer when sending the request. This information may be enough to link you to a contribution, especially if it is a sensitive action.&lt;/p&gt;

&lt;p&gt;With Tor, your connection is camouflaged behind a globally distributed chain of nodes, making tracing the true origin virtually impossible.&lt;/p&gt;

&lt;h2&gt;
  
  
  How to configure Tor to send anonymous commits
&lt;/h2&gt;

&lt;h3&gt;
  
  
  On Linux and macOS
&lt;/h3&gt;

&lt;p&gt;Install the Tor package and torsocks to redirect git traffic over the Tor network:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="c"&gt;# Install tor + torsocks&lt;/span&gt;
&lt;span class="nv"&gt;$ &lt;/span&gt;&lt;span class="nb"&gt;sudo &lt;/span&gt;apt &lt;span class="nb"&gt;install &lt;/span&gt;tor torsocks &lt;span class="c"&gt;# Debian/Ubuntu&lt;/span&gt;
&lt;span class="nv"&gt;$ &lt;/span&gt;&lt;span class="nb"&gt;sudo &lt;/span&gt;pacman &lt;span class="nt"&gt;-S&lt;/span&gt; tor torsocks &lt;span class="c"&gt;# Arch&lt;/span&gt;
&lt;span class="nv"&gt;$ &lt;/span&gt;brew &lt;span class="nb"&gt;install &lt;/span&gt;tor torsocks &lt;span class="c"&gt;# macOS&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Start the Tor daemon:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="nv"&gt;$ &lt;/span&gt;&lt;span class="nb"&gt;sudo &lt;/span&gt;systemctl start tor &lt;span class="c"&gt;# Linux&lt;/span&gt;
&lt;span class="nv"&gt;$ &lt;/span&gt;brew services start tor &lt;span class="c"&gt;# macOS&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Verify that your IP is correctly masked:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight console"&gt;&lt;code&gt;&lt;span class="gp"&gt;$&lt;/span&gt;torsocks curl https://check.torproject.org/api/ip
&lt;span class="go"&gt;→ {"IsTor": true, "IP": "185.220.101.x"}
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Finally, push your changes through Tor using git with gitGost:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight console"&gt;&lt;code&gt;&lt;span class="gp"&gt;$&lt;/span&gt;torsocks git&lt;span class="se"&gt;\&lt;/span&gt;
&lt;span class="go"&gt;    -c http.extraHeader="X-Gost-Authorship-Confirmed: 1" \
    push gost my-branch:main
→ PR opened as @gitgost-anonymous — server sees Tor exit node, not you
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h3&gt;
  
  
  On Windows without WSL
&lt;/h3&gt;

&lt;p&gt;It uses the Tor browser, which runs a local SOCKS5 proxy at 127.0.0.1:9150. Then configure Git to use that proxy:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="nv"&gt;$git&lt;/span&gt; config http.proxy socks5h://127.0.0.1:9150
&lt;span class="nv"&gt;$git&lt;/span&gt; config http.extraHeader &lt;span class="s2"&gt;"X-Gost-Authorship-Confirmed: 1"&lt;/span&gt;
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;p&gt;Do the push normally:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight console"&gt;&lt;code&gt;&lt;span class="gp"&gt;$&lt;/span&gt;&lt;span class="w"&gt; &lt;/span&gt;git push gost my-branch:main
&lt;span class="go"&gt;→ PR opened as @gitgost-anonymous — server sees Tor exit node, not you
&lt;/span&gt;&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h3&gt;
  
  
  On Windows with WSL2
&lt;/h3&gt;

&lt;p&gt;Here you can follow the same steps as in Linux:&lt;br&gt;
&lt;/p&gt;

&lt;div class="highlight js-code-highlight"&gt;
&lt;pre class="highlight shell"&gt;&lt;code&gt;&lt;span class="nv"&gt;$ &lt;/span&gt;&lt;span class="nb"&gt;sudo &lt;/span&gt;apt &lt;span class="nb"&gt;install &lt;/span&gt;tor torsocks
&lt;span class="nv"&gt;$ &lt;/span&gt;&lt;span class="nb"&gt;sudo &lt;/span&gt;service tor start

&lt;span class="nv"&gt;$torsocks&lt;/span&gt; git&lt;span class="se"&gt;\&lt;/span&gt;
    &lt;span class="nt"&gt;-c&lt;/span&gt; http.extraHeader&lt;span class="o"&gt;=&lt;/span&gt;&lt;span class="s2"&gt;"X-Gost-Authorship-Confirmed: 1"&lt;/span&gt; &lt;span class="se"&gt;\&lt;/span&gt;
    push gost my-branch:main
→ PR opened as @gitgost-anonymous
&lt;/code&gt;&lt;/pre&gt;

&lt;/div&gt;



&lt;h2&gt;
  
  
  Considerations and limitations
&lt;/h2&gt;

&lt;p&gt;While Tor extends your anonymity, it also comes with some compromises you should keep in mind:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Slower connection:&lt;/strong&gt; Routing through multiple nodes introduces latency.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Trust in exit nodes:&lt;/strong&gt; although the content travels encrypted (HTTPS) to the server, the node where your traffic leaves is public.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Operational consistency:&lt;/strong&gt; Privacy depends on using these tools in a disciplined way, without mixing identities or direct connections.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;gitGost does not replace Tor, but complements it perfectly:&lt;/strong&gt; one protects your identity within the code, the other protects your footprint on the network.&lt;/p&gt;

&lt;h2&gt;
  
  
  Final reflection on privacy in open source
&lt;/h2&gt;

&lt;p&gt;True privacy is built by adding layers and measurements. Only gitGost reduces personal traces in your commits, but combining it with Tor takes that protection to the next level, hiding both visible identity and location.&lt;/p&gt;

&lt;p&gt;For some this level of anonymity may be unnecessary, but for others it means the difference between not participating and being able to do so safely and freely.&lt;/p&gt;

&lt;p&gt;In essence, it is about making the world of open source truly accessible to those who prefer to contribute without leaving traces that expose them. &lt;em&gt;Because open source is also for those who choose to remain invisible&lt;/em&gt;.&lt;/p&gt;

</description>
      <category>programming</category>
      <category>security</category>
      <category>privacy</category>
      <category>git</category>
    </item>
    <item>
      <title>Contribute to open source projects without leaving a trace: a new way to collaborate on GitHub</title>
      <dc:creator>Livrädo Sandoval</dc:creator>
      <pubDate>Fri, 27 Mar 2026 17:30:53 +0000</pubDate>
      <link>https://forem.com/livrasand/contribute-to-open-source-projects-without-leaving-a-trace-a-new-way-to-collaborate-on-github-1oj</link>
      <guid>https://forem.com/livrasand/contribute-to-open-source-projects-without-leaving-a-trace-a-new-way-to-collaborate-on-github-1oj</guid>
      <description>&lt;p&gt;Hello everyone!&lt;/p&gt;

&lt;p&gt;Due to conflicts of interest, I had to delete the previous posts, but these days, I will start publishing again some posts related to privacy and security, and how some of my tools can help in that aspect. Also, I would love to receive feedback from you on this software you made, and areas for improvement. &lt;/p&gt;

&lt;p&gt;Also, I want to say that for the translation of my posts I use ChatGPT, I do not use it to create my posts, but to translate, the posts are written entirely by me.&lt;/p&gt;




&lt;blockquote&gt;
&lt;p&gt;Thank you very much in advance for taking the time to visit this post, if you want to see the gitGost website visit this link: &lt;a href="https://gitgost.leapcell.app" rel="noopener noreferrer"&gt;https://gitgost.leapcell.app&lt;/a&gt;&lt;br&gt;
If you want to see the code, visit this link: &lt;a href="https://github.com/livrasand/gitGost" rel="noopener noreferrer"&gt;https://github.com/livrasand/gitGost&lt;/a&gt;&lt;/p&gt;
&lt;/blockquote&gt;




&lt;p&gt;In the world of development, collaboration is key. But what happens when contributing to a project means revealing our identity, exposing us to immutable public history or possible privacy risks? This is where gitGost comes in, a tool that rethinks how we interact with repositories on GitHub, offering a layer of anonymity and privacy that we haven't seen before.&lt;/p&gt;

&lt;h2&gt;
  
  
  What is gitGost?
&lt;/h2&gt;

&lt;p&gt;gitGost allows any developer to contribute to GitHub repositories without leaving personal footprints. With a privacy-first approach, it requires no accounts or tokens – just a simple command is enough to connect your local repository to gitGost and start pushing your changes. Behind the simplicity, there is a robust system built in Go, which guarantees security, anonymity and ease of use.&lt;/p&gt;

&lt;h2&gt;
  
  
  Privacy in the foreground
&lt;/h2&gt;

&lt;p&gt;Contributions made through gitGost remove all personal metadata — names, emails, dates, and even IPs if combined with Tor. Pull Requests are automatically created from a generic anonymous identity (@gitgost-anonymous), and all communications are stored minimally, with no personal data, just a counter, the repository name and the URL of the PR.&lt;/p&gt;

&lt;p&gt;In addition, gitGost offers the possibility of receiving anonymous notifications about the status of your PRs through the ntfy.sh service, without needing to register or provide an email. This way, you can stay up to date with comments, reviews, and merges without exposing your identity or compromising your privacy.&lt;/p&gt;

&lt;h2&gt;
  
  
  Simple and flexible collaboration
&lt;/h2&gt;

&lt;p&gt;The workflow boils down to three clear steps: add gitGost as a remote, commit your changes, and push to the remote anonymously. For those who receive feedback, they can update the same anonymous PR using a unique hash provided by gitGost, without storing data or requiring accounts. This makes the contribution as seamless and practical as in the traditional flow, but without the cost of exposition.&lt;/p&gt;

&lt;h2&gt;
  
  
  Security and transparency
&lt;/h2&gt;

&lt;p&gt;gitGost is built on secure, auditable practices, with built-in validations, contribution size limits, and no unnecessary dependencies. It is licensed under AGPL-3.0 and its code is available for anyone who wants to review it, promoting trust and transparency around how it handles information.&lt;/p&gt;

&lt;h2&gt;
  
  
  Who is gitGost for?
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Developers who value their privacy:&lt;/strong&gt; Those who prefer not to leave a permanent public history tied to their name.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Collaborators in sensitive contexts:&lt;/strong&gt; People who need to contribute to possibly controversial or restricted projects without exposing themselves.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Those who want to avoid spam or doxxing:&lt;/strong&gt; gitGost removes common traces that bots use to collect data.&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Those who make minor or quick changes:&lt;/strong&gt; Sometimes a small correction shouldn't be etched with your identity forever.&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Live the gitGost experience
&lt;/h2&gt;

&lt;p&gt;From a simple text correction in a README to opening an anonymous discussion in an issue, gitGost opens a new chapter in open source collaboration: one where your security and anonymity come first, without giving up the convenience and effectiveness of git.&lt;/p&gt;

&lt;p&gt;If there is one thing that characterizes the open source community, it is the diversity of voices working together. gitGost expands that diversity by allowing more people to participate, even if they prefer to be just a whisper in the conversation.&lt;/p&gt;

&lt;p&gt;Exploring this tool is as easy as adding a remote and pushing. In a world where we increasingly look with concern at how to protect our digital privacy, gitGost represents a ray of hope to contribute freely, without chains.&lt;/p&gt;




&lt;p&gt;I will try to publish a post every day to present &lt;strong&gt;gitGost&lt;/strong&gt;, &lt;em&gt;EthicalMetrics&lt;/em&gt;, &lt;em&gt;Hushlink&lt;/em&gt;, &lt;em&gt;CodeTrackr&lt;/em&gt;, &lt;em&gt;pipq&lt;/em&gt; and &lt;em&gt;PythonICO&lt;/em&gt;, again, your feedback will help me a lot&lt;/p&gt;

</description>
      <category>opensource</category>
      <category>privacy</category>
      <category>git</category>
      <category>security</category>
    </item>
  </channel>
</rss>
