Close Open Privacy Scan

link https://github.com/milvus-io/milvus
bolt Snapshot: commit 42f6bcb
science engine v1.21
schedule 2026-07-19T04:12:16.521516+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

App Privacy Score

97 /100
Low privacy risk

Low risk · 170 finding(s)

Dependency score: 57 (Medium risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 170 low
First-party packages: 1
Dependency packages: 17
Ecosystem: rust

swap_horiz External domains

100.100.100.200access.line.meaccount.health.nokia.comaccount.withings.comaccounts.google.comaccounts.spotify.comacme-staging-v02.api.letsencrypt.orgacme-v02.api.letsencrypt.orgacs.amazonaws.comaka.msamazonaws.comapi.amazon.comapi.badgr.ioapi.cohere.comapi.dropboxapi.comapi.ebay.comapi.fitbit.comapi.github.comapi.hipchat.comapi.instagram.comapi.line.meapi.login.yahoo.comapi.mediamath.comapi.odnoklassniki.ruapi.openai.comapi.paypal.comapi.pinterest.comapi.sandbox.paypal.comapi.siliconflow.cnapi.voyageai.comapi.x.comapp.asana.comapp.rakuten.co.jpappleid.apple.comauth.ebay.combadgr.combattle.netbitbucket.orgcloud.google.comdashscope.aliyuncs.comdiscord.comdocs.aws.amazon.comdocs.microsoft.comen.wikipedia.orgencoding.spec.whatwg.orgfakestorage.blob.core.windows.netfoursquare.comgenerativelanguage.googleapis.comgit.k8s.iogithub.comgitlab.comgo.devgolang.orggoogle-styleguide.googlecode.comgoogle.github.iograph.facebook.comgraph.qq.comgrpc.iohg.mozilla.orghttpbin.orghyper.rsid.heroku.comid.twitch.tvjson.orgkauth.kakao.comkubernetes.iolearn.microsoft.comllm.api.cloud.yandex.netlogin.chinacloudapi.cnlogin.coinbase.comlogin.live.comlogin.mailchimp.comlogin.microsoftonline.comlogin.microsoftonline.uslogin.uber.commanagement.azure.commanagement.chinacloudapi.cnmanagement.core.chinacloudapi.cnmanagement.core.usgovcloudapi.netmanagement.core.windows.netmanagement.usgovcloudapi.netmetadata.tencentyun.commilvus.ionid.naver.como2.mail.ruoauth.pipedrive.comoauth.vk.comoauth.web.cern.choauth.yandex.comoauth2.googleapis.comoauth2.mtls.googleapis.comopentelemetry.iopkg.go.devprotobuf.devpublicsuffix.orgpulsar.apache.orgpyroscope.ioraw.githubusercontent.comrouter.huggingface.cos3.amazonaws.comslack.comsnowballstem.orgstackoverflow.comstorage.azure.comstorage.googleapis.comstorage.mtls.googleapis.comstorage.universe_domainsts.amazonaws.comsts.universe_domaint1sandbox.mediamath.comtext-embeddings-service.milvus-ci.svc.cluster.localtext-rerank-service.milvus-ci.svc.cluster.localtools.ietf.orgwikipedia.orgwww.alibabacloud.comwww.amazon.comwww.apache.orgwww.dropbox.comwww.facebook.comwww.fitbit.comwww.googleapis.comwww.hipchat.comwww.iana.orgwww.ibm.comwww.linkedin.comwww.odnoklassniki.ruwww.openstreetmap.orgwww.patreon.comwww.paypal.comwww.pinterest.comwww.sandbox.paypal.comwww.splitwise.comwww.strava.comwww.unicode.orgwww.w3.orgx.comzoom.us

</> First-Party Code

first-party (rust): internal/core/thirdparty/tantivy/tantivy-binding

rust first-party
expand_more 24 low-confidence finding(s)
low env_fs production #ad8caf2889bfcd71 — Environment-variable access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/build.rs:4 
    let crate_dir = env::var("CARGO_MANIFEST_DIR").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83a90e14f8f9fd47 — Environment-variable access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/build.rs:5 
    let package_name = env::var("CARGO_PKG_NAME").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34775fedc2063471 — Environment-variable access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/build.rs:14 
    let tokenizer_proto_path = env::var("TOKENIZER_PROTO").unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd52c85ebc644adb — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/dict/lindera/fetch.rs:38 
        let flock = fs::File::create(&path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e764f492146821c9 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/dict/lindera/fetch.rs:201 
    let mut dest = fs::File::create(tmp_path.as_path())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8400e4328c21f79 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/dict/lindera/fetch.rs:220 
    let mut tar_gz = fs::File::open(source_path_for_build)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3443769156ecf608 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/dict/lindera/fetch.rs:335 
    let da_data = fs::read(dict_dir.join(common::DA_DATA))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ddd8c5d64493606 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/dict/lindera/fetch.rs:336 
    let vals_data = fs::read(dict_dir.join(common::VALS_DATA))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #245d548bff18b2f1 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/dict/lindera/fetch.rs:337 
    let words_idx_data = fs::read(dict_dir.join(common::WORDS_IDX_DATA))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e512618a9f97f11 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/dict/lindera/fetch.rs:338 
    let words_data = fs::read(dict_dir.join(common::WORDS_DATA))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c20d600960c99a5 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/dict/lindera/fetch.rs:339 
    let connection_data = fs::read(dict_dir.join(common::CONNECTION_DATA))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff06ea77a0912129 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/dict/lindera/fetch.rs:340 
    let char_definition_data = fs::read(dict_dir.join(common::CHAR_DEFINITION_DATA))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1224c676fde02121 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/dict/lindera/fetch.rs:341 
    let unknown_data = fs::read(dict_dir.join(common::UNKNOWN_DATA))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #760a0451cdb95a52 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/filter/stop_word_filter.rs:107 
        std::fs::write(&stop_words_path, b"\xEF\xBB\xBFthe\r\nand\r\n").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cea2418cb2ab554b — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/filter/synonym_filter.rs:236 
            let file = std::fs::File::open(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9198c8293ee1824 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/filter/util.rs:36 
    let file = std::fs::File::open(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #045e6fd08b695d94 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/filter/util.rs:68 
        std::fs::write(&file_path, b"\xEF\xBB\xBFthe\r\nand\r\n").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b72a391c7871881 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/tokenizers/grpc_tokenizer.rs:188 
                                let ca_cert = std::fs::read(ca_cert_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2ddba7b2e5a970b — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/tokenizers/grpc_tokenizer.rs:205 
                            let cert = std::fs::read(client_cert_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05beab31250b1e09 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/tokenizers/grpc_tokenizer.rs:210 
                            let key = std::fs::read(client_key_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a3215fe5ea7677ad — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/tokenizers/jieba_tokenizer.rs:189 
            let file = fs::File::open(user_dict.unwrap())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2b3b6e40c433fd1 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/tokenizers/lindera_tokenizer.rs:642 
            let mut f = std::fs::File::create(&path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12cf72ea26ad4fba — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/analyzer/tokenizers/lindera_tokenizer.rs:692 
        std::fs::write(&path, "ignored").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf8312604327c876 — Filesystem access.
repo/internal/core/thirdparty/tantivy/tantivy-binding/src/util.rs:108 
        fs::write(path.join("dummy.txt"), "test").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

env_logger

rust dependency
expand_more 3 low-confidence finding(s)
low telemetry tooling Excluded from app score unknown #b73bd73c37928bff — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/examples/custom_format.rs:49 
    log::info!("a log from `MyLogger`");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs tooling Excluded from app score unknown #ff1d96f0396a09bd — Environment-variable access.
pkgs/rust/[email protected]/examples/syslog_friendly_format.rs:4 
    match std::env::var("RUST_LOG_STYLE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ea4b5d0ac43ed1f — Environment-variable access.
pkgs/rust/[email protected]/src/logger.rs:872 
        env::var(&*self.name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

flate2

rust dependency
expand_more 9 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #d46394ac7b30a36d — Filesystem access.
pkgs/rust/[email protected]/examples/compress_file.rs:14 
    let mut input = BufReader::new(File::open(args().nth(1).unwrap()).unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2745047b9e765cf5 — Filesystem access.
pkgs/rust/[email protected]/examples/compress_file.rs:15 
    let output = File::create(args().nth(2).unwrap()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2b6ef6feb94e7403 — Filesystem access.
pkgs/rust/[email protected]/examples/decompress_file.rs:14 
    let input = BufReader::new(File::open(args().nth(1).unwrap()).unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #3116ec89450916ed — Filesystem access.
pkgs/rust/[email protected]/examples/decompress_file.rs:15 
    let mut output = File::create(args().nth(2).unwrap()).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b2862fa6062e9ac2 — Filesystem access.
pkgs/rust/[email protected]/examples/deflateencoder-bufread.rs:16 
    let f = File::open("examples/hello_world.txt")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #a181e2fab9c6cfd5 — Filesystem access.
pkgs/rust/[email protected]/examples/gzbuilder.rs:14 
    let f = File::create("examples/hello_world.txt.gz")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #648b6308f9eafac5 — Filesystem access.
pkgs/rust/[email protected]/examples/gzencoder-bufread.rs:16 
    let f = File::open("examples/hello_world.txt")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #595b319736a81ba9 — Filesystem access.
pkgs/rust/[email protected]/examples/zlibencoder-bufread.rs:16 
    let f = File::open("examples/hello_world.txt")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2bb559d10b01f7ad — Filesystem access.
pkgs/rust/[email protected]/examples/zlibencoder-read.rs:14 
    let f = File::open("examples/hello_world.txt")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

jieba-rs

rust dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #034a0c9fef341cb7 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:9 
    let path = Path::new(&env::var("OUT_DIR").unwrap()).join("hmm_prob.rs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #639a264da1390093 — Filesystem access.
pkgs/rust/[email protected]/build.rs:10 
    let hmm_file = File::open("src/data/hmm.model").expect("cannot open hmm.model");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #884f221c3e8e4a3c — Filesystem access.
pkgs/rust/[email protected]/build.rs:11 
    let mut file = BufWriter::new(File::create(&path).unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

libc

rust dependency
expand_more 13 low-confidence finding(s)
low env_fs dependency Excluded from app score #25da6c8572c24435 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:50 
    let rustc_dep_of_std = env::var("CARGO_FEATURE_RUSTC_DEP_OF_STD").is_ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ad3d76a0e599c60 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:51 
    let libc_ci = env::var("LIBC_CI").is_ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #066859cbf4aae03c — Environment-variable access.
pkgs/rust/[email protected]/build.rs:52 
    let target_env = env::var("CARGO_CFG_TARGET_ENV").unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89ced21ff792c561 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:53 
    let target_os = env::var("CARGO_CFG_TARGET_OS").unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba25e84f7c1802e0 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:54 
    let target_ptr_width = env::var("CARGO_CFG_TARGET_POINTER_WIDTH").unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abc36aec65961a5d — Environment-variable access.
pkgs/rust/[email protected]/build.rs:55 
    let target_arch = env::var("CARGO_CFG_TARGET_ARCH").unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02059a21bf09025b — Environment-variable access.
pkgs/rust/[email protected]/build.rs:64 
    let which_freebsd = if let Ok(version) = env::var("RUST_LIBC_UNSTABLE_FREEBSD_VERSION") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a5cb138ee74845f — Environment-variable access.
pkgs/rust/[email protected]/build.rs:90 
    let musl_v1_2_3 = env::var("RUST_LIBC_UNSTABLE_MUSL_V1_2_3").is_ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47ed4ad4fa2952fa — Environment-variable access.
pkgs/rust/[email protected]/build.rs:97 
    let linux_time_bits64 = env::var("RUST_LIBC_UNSTABLE_LINUX_TIME_BITS64").is_ok();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca4cb3c9bd4038ba — Environment-variable access.
pkgs/rust/[email protected]/build.rs:112 
            env::var("RUST_LIBC_UNSTABLE_GNU_TIME_BITS"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a72caeefae16800 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:113 
            env::var("RUST_LIBC_UNSTABLE_GNU_FILE_OFFSET_BITS"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7190782372510918 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:175 
    let rustc = env::var_os("RUSTC").expect("Failed to get rustc version: missing RUSTC env");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9c8c428acd7be05 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:177 
    let mut cmd = match env::var_os("RUSTC_WRAPPER") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

lindera

rust dependency
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #2253769a41f60434 — Filesystem access.
pkgs/rust/[email protected]/benches/bench.rs:475 
            File::open(
                PathBuf::from(env!("CARGO_MANIFEST_DIR"))
                    .join("../resources")
                    .join("bocchan.txt"),
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6a2bf44e92f1a19 — Filesystem access.
pkgs/rust/[email protected]/benches/bench.rs:517 
            File::open(
                PathBuf::from(env!("CARGO_MANIFEST_DIR"))
                    .join("../resources")
                    .join("bocchan.txt"),
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0893f179488ad9c6 — Filesystem access.
pkgs/rust/[email protected]/benches/bench.rs:562 
            File::open(
                PathBuf::from(env!("CARGO_MANIFEST_DIR"))
                    .join("../resources")
                    .join("bocchan.txt"),
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf57d79dd3a07ca7 — Filesystem access.
pkgs/rust/[email protected]/benches/bench.rs:609 
            File::open(
                PathBuf::from(env!("CARGO_MANIFEST_DIR"))
                    .join("../resources")
                    .join("bocchan.txt"),
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5feb29d3a41ac3a2 — Filesystem access.
pkgs/rust/[email protected]/src/segmenter.rs:3018 
            File::open(
                PathBuf::from(env!("CARGO_MANIFEST_DIR"))
                    .join("../resources")
                    .join("bocchan.txt"),
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #801d608f388f1777 — Filesystem access.
pkgs/rust/[email protected]/src/tokenizer.rs:21 
    let mut input_read = File::open(file_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85f040bd213401ab — Environment-variable access.
pkgs/rust/[email protected]/src/tokenizer.rs:78 
        if let Ok(config_path) = env::var("LINDERA_CONFIG_PATH") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

lindera-dictionary

rust dependency
expand_more 21 low-confidence finding(s)
low env_fs dependency Excluded from app score #1b932076a7584aaf — Environment-variable access.
pkgs/rust/[email protected]/src/assets.rs:162 
    let (build_dir, is_cache) = if let Some(lindera_cache_dir) = env::var_os("LINDERA_CACHE") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee9166689d7dd62f — Environment-variable access.
pkgs/rust/[email protected]/src/assets.rs:164 
            PathBuf::from(lindera_cache_dir).join(env::var_os("CARGO_PKG_VERSION").unwrap()),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2186c9c2491e8037 — Environment-variable access.
pkgs/rust/[email protected]/src/assets.rs:169 
            PathBuf::from(env::var_os("OUT_DIR").unwrap()), /* ex) target/debug/build/<pkg>/out */

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df2621684ba74e09 — Environment-variable access.
pkgs/rust/[email protected]/src/assets.rs:188 
    if std::env::var("DOCS_RS").is_ok() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04cd55c2f9992972 — Filesystem access.
pkgs/rust/[email protected]/src/assets.rs:193 
        let mut dummy_char_def = File::create(input_dir.join("char.def"))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a11ce4de4fdac487 — Filesystem access.
pkgs/rust/[email protected]/src/assets.rs:197 
        let mut dummy_dict_csv = File::create(input_dir.join("dummy_dict.csv"))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7ab30038fce469b — Filesystem access.
pkgs/rust/[email protected]/src/assets.rs:205 
        File::create(input_dir.join("unk.def"))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #954fca565044898f — Filesystem access.
pkgs/rust/[email protected]/src/assets.rs:206 
        let mut dummy_matrix_def = File::create(input_dir.join("matrix.def"))?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa5d9c58bf862700 — Filesystem access.
pkgs/rust/[email protected]/src/assets.rs:221 
        let mut dest = File::create(tmp_path.as_path())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5a0d4ac49ba46a6 — Filesystem access.
pkgs/rust/[email protected]/src/assets.rs:244 
        let mut tar_gz = File::open(source_path_for_build)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e23a28827ca2ba0f — Filesystem access.
pkgs/rust/[email protected]/src/dictionary_builder/character_definition.rs:215 
            File::create(wtr_chardef_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b37d791bfbbfe7c5 — Filesystem access.
pkgs/rust/[email protected]/src/dictionary_builder/connection_cost_matrix.rs:60 
            File::create(wtr_matrix_mtx_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d7b02bf351af9d3 — Filesystem access.
pkgs/rust/[email protected]/src/dictionary_builder/prefix_dictionary.rs:78 
            let file = File::open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9701d186ff2cd422 — Filesystem access.
pkgs/rust/[email protected]/src/dictionary_builder/prefix_dictionary.rs:109 
            File::create(dict_vals_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0874edbf41df1f33 — Filesystem access.
pkgs/rust/[email protected]/src/dictionary_builder/prefix_dictionary.rs:114 
            File::create(dict_da_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32d02ca75f2f1e80 — Filesystem access.
pkgs/rust/[email protected]/src/dictionary_builder/prefix_dictionary.rs:175 
            File::create(dict_words_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #821dd7124d7f9c58 — Filesystem access.
pkgs/rust/[email protected]/src/dictionary_builder/prefix_dictionary.rs:180 
            File::create(dict_wordsidx_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f70b9dc5bb1f62d3 — Filesystem access.
pkgs/rust/[email protected]/src/dictionary_builder/unknown_dictionary.rs:46 
            File::create(wtr_unk_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b61bb2b9f06d020 — Filesystem access.
pkgs/rust/[email protected]/src/dictionary_builder/user_dictionary.rs:173 
        File::create(output_file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5d7b9e0cdcd597a — Filesystem access.
pkgs/rust/[email protected]/src/util.rs:47 
    let mut input_read = File::open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7eb89e9d31e32274 — Filesystem access.
pkgs/rust/[email protected]/src/util.rs:58 
    let file = File::open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

lingua

rust dependency
expand_more 11 low-confidence finding(s)
low env_fs dependency Excluded from app score #bdce7d2a6132cd42 — Filesystem access.
pkgs/rust/[email protected]/src/bin/accuracy_reports.rs:454 
                fs::write(report_file_path, report).expect("Reports file could not be written");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #547cfbd1e76cfd0f — Filesystem access.
pkgs/rust/[email protected]/src/bin/accuracy_reports.rs:941 
            fs::File::create(&report_file_path).expect("CSV file could not be created");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03bca50372795203 — Filesystem access.
pkgs/rust/[email protected]/src/writer.rs:140 
        let file = File::open(input_file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e18907d8183270f — Filesystem access.
pkgs/rust/[email protected]/src/writer.rs:165 
        let file = File::create(file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3462678fb50e186 — Filesystem access.
pkgs/rust/[email protected]/src/writer.rs:229 
        let input_file = File::open(input_file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a15273c589e6a7f7 — Filesystem access.
pkgs/rust/[email protected]/src/writer.rs:232 
        let sentences_file = File::create(sentences_file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0249fa522b030751 — Filesystem access.
pkgs/rust/[email protected]/src/writer.rs:267 
        let input_file = File::open(input_file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2008e7db08eeda16 — Filesystem access.
pkgs/rust/[email protected]/src/writer.rs:270 
        let single_words_file = File::create(single_words_file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfa0948d62512f0f — Filesystem access.
pkgs/rust/[email protected]/src/writer.rs:319 
        let word_pairs_file = File::create(word_pairs_file_path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b989157f50421e44 — Filesystem access.
pkgs/rust/[email protected]/src/writer.rs:532 
            let compressed_file = File::open(file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa4ba5be2840afc8 — Filesystem access.
pkgs/rust/[email protected]/src/writer.rs:624 
            let mut test_data_file = File::open(file_path).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pinyin

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #6e2e2588138b14db — Environment-variable access.
pkgs/rust/[email protected]/build.rs:331 
    let path = Path::new(&env::var("OUT_DIR").unwrap()).join(name);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2dcdb64ea53781f5 — Filesystem access.
pkgs/rust/[email protected]/build.rs:332 
    Ok(BufWriter::new(File::create(&path)?))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

reqwest

rust dependency
expand_more 42 low-confidence finding(s)
low telemetry dependency Excluded from app score #7c40f09f84d40140 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/async_impl/client.rs:699 
                                    log::debug!("rustls failed to parse DER certificate: {err:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #ef1079c6d2bfd025 — Filesystem access.
pkgs/rust/[email protected]/src/async_impl/multipart.rs:281 
        let file = File::open(path).await?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #858f3228e7fca9b0 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:676 
        let r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e481d85b8e9f4078 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:689 
        let r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #517c857c59acb5b7 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:707 
        let r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0b1496a38949a959 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:728 
        let r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6c4d4489dc8cfa4f — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:745 
        let req = client
            .get("https://hyper.rs")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #08b4a478da637e1f — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:767 
        let req = client
            .get(some_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c914d85ba2585a1a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:780 
        let builder = client
            .post("http://httpbin.org/post")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8562c132420efdff — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:797 
        let builder = client.get("http://httpbin.org/get");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #edbd190648ddd3c5 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:814 
        let builder = client
            .get("http://httpbin.org/get")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6c0c0001d8d2e14d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:826 
        let req = client.get(some_url).build().expect("request build");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #62bd006d1e289795 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/async_impl/request.rs:931 
            client.get("http://example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #ce29648ad2cf98f3 — Filesystem access.
pkgs/rust/[email protected]/src/blocking/multipart.rs:230 
        let file = File::open(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #0f981f8d4ffa8a9b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:699 
        let r = client.get(some_url).build().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0a0fc4682981a7b4 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:719 
        let r = client.post(some_url).build().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #dd017f6bdb6101a7 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:729 
        let r = client.put(some_url).build().unwrap();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3b7ce1035e071950 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:759 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6f42313876c80eb4 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:774 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ff08624d06d0d4fa — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:792 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4d309f171c452706 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:816 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fe6462d90acf1d82 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:831 
        let mut r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4221cf33bc83a4ad — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:844 
        let mut r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #44d208377d797924 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:862 
        let mut r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9066cce439238a28 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:883 
        let mut r = client.get(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bda2a4196b2a1ceb — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:895 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c64bfd5ab428a95d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:919 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7dead4e2fac0864a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:953 
        let r = client.post(some_url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #025ed0ee7f8a425d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:969 
        let req = client
            .get("https://hyper.rs")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9dccacfc65cf0f64 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:991 
        let req = client
            .get(some_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a0b91e6aed14f56a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/blocking/request.rs:1006 
        let req = client.get(some_url).build().expect("request build");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low telemetry dependency Excluded from app score #e16f7439f67dc63c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/connect.rs:746 
        log::debug!("proxy({proxy:?}) intercepts '{dst:?}'");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #9725892b061a5c74 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/connect.rs:882 
        log::debug!("starting new connection: {dst:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #1b1fd7c0b29bd896 — Environment-variable access.
pkgs/rust/[email protected]/src/proxy.rs:475 
        let raw = std::env::var("NO_PROXY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b4e95c1cf3456a6 — Environment-variable access.
pkgs/rust/[email protected]/src/proxy.rs:476 
            .or_else(|_| std::env::var("no_proxy"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #182d356cfa57cb94 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/retry.rs:243 
                    log::debug!("retryable but could not withdraw from budget");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #abe7b9ceb31981e4 — Filesystem access.
pkgs/rust/[email protected]/src/tls.rs:835 
        let pem_bundle = std::fs::read("tests/support/crl.pem").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #0ff065a3ff34bb22 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/wasm/client.rs:369 
        let mut req = client
            .get("https://www.example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #61cf525bbdf5e839 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/wasm/client.rs:394 
        let mut req = client
            .get("https://www.example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c5fe573cf0370c29 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/wasm/client.rs:410 
        let mut req2 = client
            .get("https://www.example.com/x")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #eb915c82b1574ec6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/wasm/client.rs:432 
        let mut req = client
            .get("https://www.example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3085042cc3e46f0c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/rust/[email protected]/src/wasm/client.rs:450 
        let mut req2 = client
            .get("https://www.example.com")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

scopeguard

rust dependency
expand_more 1 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #267afbd2df817982 — Filesystem access.
pkgs/rust/[email protected]/examples/readme.rs:17 
    let f = File::create("newfile.txt").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

serde_json

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #0ed5ddc166ac5ff9 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:10 
    let target_arch = env::var_os("CARGO_CFG_TARGET_ARCH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6c845adaf51c9cb — Environment-variable access.
pkgs/rust/[email protected]/build.rs:11 
    let target_pointer_width = env::var_os("CARGO_CFG_TARGET_POINTER_WIDTH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tantivy

rust dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #369657017d5102e7 — Filesystem access.
pkgs/rust/[email protected]/src/directory/file_watcher.rs:75 
        let reader = match fs::File::open(path) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d294ea9c9243d24c — Filesystem access.
pkgs/rust/[email protected]/src/directory/mmap_directory.rs:38 
    let file = File::open(full_path).map_err(|io_err| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbe890dd55012d22 — Filesystem access.
pkgs/rust/[email protected]/src/directory/mmap_directory.rs:458 
        match File::open(full_path) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e271be78bfe70242 — Filesystem access.
pkgs/rust/[email protected]/src/directory/ram_directory.rs:67 
        fs.write(self.path.clone(), self.data.get_ref());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e811911dcf7e84bf — Filesystem access.
pkgs/rust/[email protected]/src/directory/ram_directory.rs:210 
        let exists = fs.write(path_buf.clone(), &[]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65a35a75614c0386 — Environment-variable access.
pkgs/rust/[email protected]/src/functional_test.rs:60 
    std::env::var("NUM_FUNCTIONAL_TEST_ITERATIONS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tar

rust dependency
expand_more 4 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #c9d5f544b77f4d51 — Filesystem access.
pkgs/rust/[email protected]/examples/write.rs:7 
    let file = File::create("foo.tar").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #792bd94ab2693c8d — Filesystem access.
pkgs/rust/[email protected]/examples/write.rs:11 
    a.append_file("lib.rs", &mut File::open("src/lib.rs").unwrap())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #470be4f79263ba9f — Filesystem access.
pkgs/rust/[email protected]/src/builder.rs:625 
        append_file(dst, ar_name, &mut fs::File::open(path)?, options)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18dc995ff0979185 — Filesystem access.
pkgs/rust/[email protected]/src/builder.rs:903 
            append_file(dst, &dest, &mut fs::File::open(src)?, options)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tokio

rust dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #faec4e6a2d05558d — Filesystem access.
pkgs/rust/[email protected]/src/fs/file.rs:154 
        let std = asyncify(|| StdFile::open(path)).await?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbc6e28079d53852 — Filesystem access.
pkgs/rust/[email protected]/src/fs/file.rs:192 
        let std_file = asyncify(move || StdFile::create(path)).await?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a648b19d1ad0578c — Filesystem access.
pkgs/rust/[email protected]/src/fs/read.rs:48 
    asyncify(move || std::fs::read(path)).await

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29c1d80ffefa940b — Filesystem access.
pkgs/rust/[email protected]/src/fs/read_to_string.rs:29 
    asyncify(move || std::fs::read_to_string(path)).await

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f753bbe9cd0ad96a — Filesystem access.
pkgs/rust/[email protected]/src/fs/write.rs:30 
    asyncify(move || std::fs::write(path, contents)).await

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa600c40b9ed6312 — Environment-variable access.
pkgs/rust/[email protected]/src/loom/std/mod.rs:95 
        match std::env::var(ENV_WORKER_THREADS) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tonic

rust dependency
expand_more 6 low-confidence finding(s)
low telemetry dependency Excluded from app score #d939b5fc1d71b9c2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/transport/channel/service/connection.rs:202 
                        tracing::debug!("connection task error: {:?}", e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #d9349654c1e63376 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/transport/channel/service/reconnect.rs:104 
                                tracing::debug!("reconnect::poll_ready: {:?}", error);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b5e46e0138881c27 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/transport/channel/service/reconnect.rs:143 
            tracing::debug!("error: {}", error);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ae562d4811e5a404 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/transport/channel/service/tls.rs:66 
                tracing::debug!("errors occurred when loading native certs: {errors:?}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #3b9b61c7a9c85cc4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/transport/server/io_stream.rs:114 
                tracing::debug!(error = %e, "tls accept error");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #d941450d7ebb7848 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/transport/server/io_stream.rs:126 
    tracing::debug!(error = %e, "accept loop error");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

unicode-general-category

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #401e344fccb44178 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:17 
    let output_path = PathBuf::from(env::var("OUT_DIR").unwrap()).join("category.rs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #588764d7044c7406 — Filesystem access.
pkgs/rust/[email protected]/build.rs:76 
        File::create(path).unwrap_or_else(|_| panic!("unable to open {}", path.to_string_lossy()));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

zstd-sys

rust dependency
expand_more 8 low-confidence finding(s)
low env_fs dependency Excluded from app score #3738f31ad2481955 — Environment-variable access.
pkgs/rust/[email protected]+zstd.1.5.5/build.rs:33 
    let out_path = PathBuf::from(env::var_os("OUT_DIR").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd733d357202b8bc — Environment-variable access.
pkgs/rust/[email protected]+zstd.1.5.5/build.rs:126 
    if cfg!(feature = "no_asm") || std::env::var("CARGO_CFG_WINDOWS").is_ok() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77a6cbba99791fa6 — Environment-variable access.
pkgs/rust/[email protected]+zstd.1.5.5/build.rs:136 
    let need_wasm_shim = env::var("TARGET").map_or(false, |target| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2037da054527c99d — Environment-variable access.
pkgs/rust/[email protected]+zstd.1.5.5/build.rs:228 
    let dst = PathBuf::from(env::var_os("OUT_DIR").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9853c4ab9b81f61 — Environment-variable access.
pkgs/rust/[email protected]+zstd.1.5.5/build.rs:252 
        std::env::var("CARGO_CFG_TARGET_ARCH").unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35feb57d93b5ef23 — Environment-variable access.
pkgs/rust/[email protected]+zstd.1.5.5/build.rs:253 
    let target_os = std::env::var("CARGO_CFG_TARGET_OS").unwrap_or_default();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61371b7329f81b30 — Environment-variable access.
pkgs/rust/[email protected]+zstd.1.5.5/build.rs:261 
        || env::var_os("ZSTD_SYS_USE_PKG_CONFIG").is_some()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b38209c1b6d8254 — Environment-variable access.
pkgs/rust/[email protected]+zstd.1.5.5/build.rs:270 
            env::var_os("CARGO_MANIFEST_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • github.com/klauspost/compress prod — module zip exceeds byte cap
  • github.com/greatroar/blobloom prod — proxy 404
  • github.com/milvus-io/milvus/client/v3 prod — proxy 404
  • github.com/milvus-io/milvus/pkg/v3 prod — proxy 404
  • google.golang.org/api prod — module zip exceeds byte cap
  • github.com/milvus-io/milvus/client/v2 prod — proxy 404
  • github.com/huaweicloud/huaweicloud-sdk-go-v3 prod — module zip exceeds byte cap
  • tantivy-5 prod — no version pinned