Hi,

noticed a package had analytics on by default and can only be turned off in advanced settings (or via env) in an GUI music player for subsonic and other music backends.
Advanced settings are reachable after first login that already loads the tracker.

I searched in wiki and forum for anything about guidelines for (extra) packages.

Package
https://archlinux.org/packages/extra/any/feishin/

https://github.com/jeffvli/feishin/blob … ml#L13-L22
- Domain is private  (can easily change to anything)
- Loads remote script into electron and runs it
- Currently down (Bad Gateway Cloudflare)

I can build it without the tracker, would prefer if packages avoid/disable trackers (opt-in is OK).

My question
Should the package build add a patch or is loading remote script and running in clients fine without consent OK?

xv

(I hope the category in forum is correct, section at least is fitting)