It depends on what you need to track. For my startup the thing is that open-source developers are sensitive about data and do now want to share them with you.
As pointed there:
https://news.ycombinator.com/item?id=35358384
For the website you can create a cookie cosent or use a privacy focused alternative like https://matomo.org/