Data collection

How is the data collected for Omlet?

Omlet never collects, stores or upload your code. The scanning process is always done locally using the Omlet CLI available for download via NPM. Only metadata is collected.

As a user, you have full control over what code Omlet will scan by choosing which repository it should scan. You also have the option to limit scanning to certain files or directories.

What data is collected for Omlet?

Regarding metadata, Omlet collects:

• Function names related to frontend code

• File paths of where the functions are defined

• Where the functions are called from

For troubleshooting purposes, other metadata we collect are:

• IP address of the user who uploads the data

• Node.js version

• OS type/version

• URL to the git repository and current branch name

Omlet CLI has an option to generate the output locally which you can use to inspect the data. You can do this by running:

npm

npx @omlet/cli analyze --dry-run 

yarn

pnpm

This will generate a local file omlet.out.json with the scanned output that is normally uploaded to Omlet's Web app. When using --dry-run, the results are never uploaded.

Where is the data stored for Omlet?

The metadata collected is uploaded to Omlet's backend hosted on AWS (S3) and MongoDB. We only use this data to provide the service directly to you.

If you have further questions, please contact us.