I clicked on the openfront repo, and...
Having a .claude folder, which also contains full publicly-accessible postgres credentials, does not instill confidence I'm afraid.
10 minutes after your comment I checked and I don’t see any pgsql credentials, but I do see that they have committed their local settings instead, including their local file paths now.
I feel safer always running him in dangerous mode now.
10 minutes after your comment I checked and I don’t see any pgsql credentials, but I do see that they have committed their local settings instead, including their local file paths now.