Close Open Privacy Scan
App Privacy Score
Low risk · 2164 finding(s)
Based on: 1 first-party package(s) · 21/25 deps analyzed
Dependency score: 0 (High risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz Application data flows
No application data flows were found. See dependency data flows below.
hub Dependency data flows (12)
- 1source
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:186 - 2sink
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:318
- 1source
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:186 - 2sink
pkgs/python/[email protected]/src/harbor/agents/installed/openhands_sdk_runner.py:446
- 1source
pkgs/python/[email protected]/src/harbor/environments/novita.py:757 - 2sink
pkgs/python/[email protected]/src/harbor/environments/novita.py:779
- 1source
pkgs/python/[email protected]/openreward/cli.py:1269 - 2sink
pkgs/python/[email protected]/openreward/cli.py:1320
- 1source
pkgs/python/[email protected]/openreward/cli.py:1269 - 2sink
pkgs/python/[email protected]/openreward/cli.py:1328
- 1source
pkgs/python/[email protected]/openreward/cli.py:1269 - 2sink
pkgs/python/[email protected]/openreward/cli.py:1359
- 1source
pkgs/python/[email protected]/openreward/cli.py:1269 - 2sink
pkgs/python/[email protected]/openreward/cli.py:1380
- 1source
pkgs/python/[email protected]/openreward/cli.py:1269 - 2sink
pkgs/python/[email protected]/openreward/cli.py:1381
- 1source
pkgs/python/[email protected]/openreward/cli.py:1269 - 2sink
pkgs/python/[email protected]/openreward/cli.py:1402
- 1source
pkgs/python/[email protected]/openreward/cli.py:1269 - 2sink
pkgs/python/[email protected]/openreward/cli.py:1428
- 1source
pkgs/python/[email protected]/openreward/cli.py:1269 - 2sink
pkgs/python/[email protected]/openreward/cli.py:1429
- 1source
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 - 2sink
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514
</> First-Party Code
first-party (python)
python first-partyexpand_more 141 low-confidence finding(s)
low env_fs — Environment-variable access. 36 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 22 locations
low env_fs — Filesystem access. 83 locations
</> Dependencies
openreward
python dependency print(f" Name {_bold(f'{namespace}/{env_name}')}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
print(f" GitHub {github_repo} {_dim('(private)' if repo_private else '(public)')}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
print(f" {_dim(base_url + '/' + namespace + '/' + env_name)}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
print(f" gh repo create {github_repo} --source {target_dir} --push")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
print(f" orwd link {namespace}/{env_name} {github_repo}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
print(f" Run manually: orwd link {namespace}/{env_name} {github_repo}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
print(f" orwd deployments {namespace}/{env_name}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
print(f" {_dim(base_url + '/' + namespace + '/' + env_name)}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
from opentelemetry import metrics as otel_metricsA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
from opentelemetry.exporter.otlp.proto.grpc.metric_exporter import OTLPMetricExporterA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
from opentelemetry.metrics import CounterA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
from opentelemetry.sdk.metrics import MeterProviderA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
from opentelemetry.sdk.metrics.export import PeriodicExportingMetricReaderA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
from opentelemetry.sdk.resources import ResourceA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 45 low-confidence finding(s)
req = urllib.request.Request(_PYPI_URL, headers={"Accept": "application/json"})Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 11 locations
low env_fs — Environment-variable access. 29 locations
harbor
python dependency print(f"Captured system prompt ({len(system_prompt)} chars)")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
print(f"Total cost: ${metrics['cost_usd']:.4f}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
headers={
"X-API-KEY": self._api_key,
"Content-Type": "application/json",
},A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.
Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 579 low-confidence finding(s)
low env_fs — Filesystem access. 370 locations
low env_fs — Environment-variable access. 188 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 21 locations
accelerate
python dependency self.writer.track(value, name=key, step=step, **kwargs)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
self.writer.track(aim_image, name=key, step=step, **track_kw)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 226 low-confidence finding(s)
low env_fs — Filesystem access. 31 locations
low env_fs — Environment-variable access. 195 locations
transformers
python dependency logger.debug(f"[Kubeflow] Token file not found: {token_path}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 399 low-confidence finding(s)
low env_fs — Filesystem access. 249 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 13 locations
low env_fs — Environment-variable access. 136 locations
img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
aiohttp
python dependencyexpand_more 30 low-confidence finding(s)
low env_fs — Filesystem access. 10 locations
low env_fs — Environment-variable access. 9 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 6 locations
datasets
python dependencyexpand_more 77 low-confidence finding(s)
low env_fs — Filesystem access. 52 locations
low env_fs — Environment-variable access. 25 locations
deepspeed
python dependencyexpand_more 330 low-confidence finding(s)
low env_fs — Environment-variable access. 219 locations
low env_fs — Filesystem access. 111 locations
fastapi
python dependencyexpand_more 70 low-confidence finding(s)
low env_fs — Filesystem access. 55 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 12 locations
os.environ["DYLD_FALLBACK_LIBRARY_PATH"] = "/opt/homebrew/lib"Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
hf-doc-builder
python dependencyexpand_more 31 low-confidence finding(s)
low env_fs — Filesystem access. 26 locations
low env_fs — Environment-variable access. 4 locations
request = requests.get(url, stream=True)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
jinja2
python dependencyexpand_more 7 low-confidence finding(s)
low env_fs — Filesystem access. 6 locations
code = self.client.get(self.prefix + bucket.key)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
joblib
python dependencyexpand_more 30 low-confidence finding(s)
low env_fs — Environment-variable access. 16 locations
low env_fs — Filesystem access. 14 locations
liger-kernel
python dependencyexpand_more 29 low-confidence finding(s)
low env_fs — Environment-variable access. 23 locations
low env_fs — Filesystem access. 6 locations
num2words
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
packaging
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
peft
python dependencyexpand_more 12 low-confidence finding(s)
low env_fs — Filesystem access. 4 locations
low env_fs — Environment-variable access. 8 locations
pre-commit
python dependencyexpand_more 58 low-confidence finding(s)
low env_fs — Environment-variable access. 25 locations
low env_fs — Filesystem access. 31 locations
resp = urllib.request.urlopen('https://go.dev/dl/?mode=json')Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
resp = urllib.request.urlopen(_get_url(version))Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
pydantic
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 5 locations
requests
python dependencyexpand_more 8 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
scikit-learn
python dependencyexpand_more 52 low-confidence finding(s)
low env_fs — Environment-variable access. 25 locations
low env_fs — Filesystem access. 25 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations
uvicorn
python dependencyexpand_more 5 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 2 locations
Skipped dependencies
Production
- bitsandbytes prod — no sdist (wheels only)
- vllm prod — sdist exceeds byte cap
- Pillow prod — sdist exceeds byte cap
- torchvision prod — no sdist (wheels only)