A developer discovers that a third-party TypeScript library used in production secretly collects user telemetry without disclosure. What is the most ethical course of action?
-
A
Continue using it since it's open source
-
B
Remove the library and report the issue to the team and stakeholders
-
C
Disable telemetry via config and keep using it
-
D
Ignore it if the app performance is fine