
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
evidence-connector-posthog
Advanced tools
Install this plugin in an Evidence app with
npm install evidence-connector-posthog
Register the plugin in your project in your evidence.plugins.yaml file with
datasources:
evidence-connector-posthog: {}
Launch the development server with npm run dev and navigate to the settings menu (localhost:3000/settings) to add a data source using this plugin.
| Option | Description |
|---|---|
| appHost | Base URL of your PostHog instance for private endpoints. |
| projectId | ID of the PostHog project you're trying to query data from. |
| apiKey | API key with access to the project and Read access to Insight/Query scope. |
Source queries can be configured in two formats: .sql and .insight.
Create a .sql file using HogQL syntax:
my_source_query_with_hogql.sql
SELECT toDate(timestamp) AS timestamp, count() AS event_count
FROM events
GROUP BY timestamp
LIMIT 100
Create a .insight file containing either a numeric id or alphanumeric short_id. Numeric IDs are preferred for cleaner API responses. Note: Only SQL-type insights are supported.
The file can contain either format:
my_source_query_with_insight_id.insight
1234567
or
my_source_query_with_insight_short_id.insight
AbcdE0FG
Each insight has both types of ID, which can be found in different ways:
short_id appears in the URL when viewing the insight in PostHog (e.g. AbcdE0FG in https://us.posthog.com/project/00000/insights/AbcdE0FG)id can only be retrieved through the API using the short_id:export POSTHOG_PERSONAL_API_KEY=<POSTHOG_PERSONAL_API_KEY>
export POSTHOG_PROJECT_ID=<POSTHOG_PROJECT_ID>
curl \
-H "Authorization: Bearer $POSTHOG_PERSONAL_API_KEY" \
<ph_app_host>/api/projects/$POSTHOG_PROJECT_ID/insights/?short_id=<YOUR_INSIGHT_SHORT_ID>
You will need to create a personal API key to access the Query and/or Insights endpoints.
You can create one in Settings > User > Personal API keys.
Make sure to include the project specified in your data source config under Organization & project access, and choose the query:read and/or insight:read scopes for the API key.
To learn more, see PostHog's API documentation.
FAQs
Evidence data source connector for PostHog
We found that evidence-connector-posthog demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.