Actually, the only part that's proxied through a server side app is authentication. GitHub's v3 API supports CORS to the extent Prose uses it.