Close Open Privacy Scan

bolt Snapshot: commit e0b7833
science engine v1.23
schedule 2026-07-25T10:14:19.538831+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code. Dependency data flows are listed separately and do not affect this verdict.

smart_toy MCP server detected: github.com/mark3labs/mcp-go — detected in dependencies, not a safety judgment.

App Privacy Score

72 /100
Medium privacy risk

Medium risk · 1984 finding(s)

Based on: 4 first-party package(s) · 107/112 deps analyzed

Dependency score: 26 (High risk)

bar_chart Score Breakdown

telemetry −25
env_fs −3

list Scan Summary

0 high 53 medium 1931 low
First-party packages: 1
Dependency packages: 64
Ecosystem: go

swap_horiz Application data flows

No application data flows were found. See dependency data flows below.

hub Dependency data flows (1)
medium google.golang.org/protobuf dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
  1. 1sourcepkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520
  2. 2sinkpkgs/go/[email protected]/internal/cmd/generate-protos/main.go:523

</> First-Party Code

first-party (python)

go first-party
medium telemetry production #bbb9d4b5e3b33a15 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
repo/adapters/handlers/rest/configure_api.go:272
		err := sentry.Init(sentry.ClientOptions{
			// Setup related config
			Dsn:         appState.ServerConfig.Config.Sentry.DSN,
			Debug:       appState.ServerConfig.Config.Sentry.Debug,
			Release:     "weaviate-core@" + build.Version,
			Environment: appState.ServerConfig.Config.Sentry.Environment,
			// Enable tracing if requested
			EnableTracing:    !appState.ServerConfig.Config.Sentry.TracingDisabled,
			AttachStacktrace: true,
			// Sample rates based on the config
			SampleRate:         appState.ServerConfig.Config.Sentry.ErrorSampleRate,
			ProfilesSampleRate: appState.ServerConfig.Config.Sentry.ProfileSampleRate,
			TracesSampler: sentry.TracesSampler(func(ctx sentry.SamplingContext) float64 {
				// Inherit decision from parent transaction (if any) if it is sampled or not
				if ctx.Parent != nil && ctx.Parent.Sampled != sentry.SampledUndefined {
					return 1.0
				}

				// Filter out uneeded traces
				switch ctx.Span.Name {
				// We are not interested in traces related to metrics endpoint
				case "GET /metrics":
				// These are some usual internet bot that will spam the server. Won't catch them all but we can reduce
				// the number a bit
				case "GET /favicon.ico":
				case "GET /t4":
				case "GET /ab2g":
				case "PRI *":
				case "GET /api/sonicos/tfa":
				case "GET /RDWeb/Pages/en-US/login.aspx":
				case "GET /_profiler/phpinfo":
				case "POST /wsman":
				case "POST /dns-query":
				case "GET /dns-query":
					return 0.0
				}

				// Filter out graphql queries, currently we have no context intrumentation around it and it's therefore
				// just a blank line with 0 info except graphql resolve -> do -> return.
				if ctx.Span.Name == "POST /v1/graphql" {
					return 0.0
				}

				// Return the configured sample rate otherwise
				return appState.ServerConfig.Config.Sentry.TracesSampleRate
			}),
		})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #16adc7290db84de2 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
repo/adapters/repos/db/shard_init.go:116
			entsentry.CaptureException(err)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #79506bc8e0f977f1 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
repo/adapters/repos/db/shard_read.go:682
						entsentry.CaptureException(err)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #fb479e295ca7a941 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
repo/adapters/repos/db/shard_read.go:693
						entsentry.CaptureException(err)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #12a7a6539e8775cb capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
repo/adapters/repos/db/shard_read.go:709
						entsentry.CaptureException(fmt.Errorf("collection %q shard %q: %w",
							s.index.Config.ClassName, s.name, err))

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #2e5b6101c298ff4f capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
repo/adapters/repos/db/shard_read.go:721
						entsentry.CaptureException(fmt.Errorf("collection %q shard %q: %w",
							s.index.Config.ClassName, s.name, err))

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #23d6d725c7f9044a capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
repo/entities/sentry/errors.go:31
	libsentry.CaptureException(err)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 554 low-confidence finding(s)
low env_fs Environment-variable access. 396 locations
low env_fs Filesystem access. 158 locations

</> Dependencies

github.com/getsentry/sentry-go

go dependency
medium telemetry dependency Excluded from app score #fdec790c787e11de capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/basic/main.go:37
	err := sentry.Init(sentry.ClientOptions{
		// Either set your DSN here or set the SENTRY_DSN environment variable.
		Dsn: "",
		// Enable printing of SDK debug messages.
		// Useful when getting started or trying to figure something out.
		Debug:   true,
		Release: release,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9b0b859dc535bc4d capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/basic/main.go:54
		sentry.CaptureException(err)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b4388065d09a01aa capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/crons/main.go:46
	_ = sentry.Init(sentry.ClientOptions{
		Dsn:   "",
		Debug: true,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #6123edf154408391 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/echo/main.go:15
	_ = sentry.Init(sentry.ClientOptions{
		Dsn: "",
		BeforeSend: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event {
			if hint.Context != nil {
				if req, ok := hint.Context.Value(sentry.RequestContextKey).(*http.Request); ok {
					// You have access to the original Request
					fmt.Println(req)
				}
			}
			fmt.Println(event)
			return event
		},
		Debug:            true,
		AttachStacktrace: true,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ec290d0c53b31958 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/fasthttp/main.go:32
			sentry.CaptureException(err)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #af5088a4e342aabd capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/fasthttp/main.go:40
	_ = sentry.Init(sentry.ClientOptions{
		Dsn: "",
		BeforeSend: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event {
			if hint.Context != nil {
				if ctx, ok := hint.Context.Value(sentry.RequestContextKey).(*fasthttp.RequestCtx); ok {
					// You have access to the original Context if it panicked
					fmt.Println(string(ctx.Request.Host()))
				}
			}
			fmt.Println(event)
			return event
		},
		Debug:            true,
		AttachStacktrace: true,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c4a083dc3040868f capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/feature-showcase/main.go:41
	sentry.CaptureMessage("Drop me!")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #27d1e1f313967db1 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/feature-showcase/main.go:45
	sentry.CaptureMessage("say what again. SAY WHAT again")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9fbd81336ebdb02d capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/feature-showcase/main.go:62
		sentry.CaptureException(errors.New("say what again. SAY WHAT again"))

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ecdd73ac1d6489b1 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/feature-showcase/main.go:95
		sentry.CaptureEvent(event)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4dbd3788876250ee capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/feature-showcase/main.go:113
	sentry.CaptureException(CustomComplexError{Message: "Captured", AnswerToLife: 42})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0bbc13de16325b8f capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/feature-showcase/main.go:117
	if err := sentry.Init(sentry.ClientOptions{
		Debug:        true,
		Dsn:          "https://[email protected]/1337",
		IgnoreErrors: []string{"^(?i)drop me"},
		BeforeSend: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event {
			if ex, ok := hint.OriginalException.(CustomComplexError); ok {
				event.Message = event.Message + " - " + ex.GimmeMoreData()
			}

			fmt.Printf("%s\n\n", prettyPrint(event))

			return event
		},
		BeforeBreadcrumb: func(breadcrumb *sentry.Breadcrumb, _ *sentry.BreadcrumbHint) *sentry.Breadcrumb {
			if breadcrumb.Message == "Random breadcrumb 3" {
				breadcrumb.Message = "Not so random breadcrumb 3"
			}

			fmt.Printf("%s\n\n", prettyPrint(breadcrumb))

			return breadcrumb
		},
		SampleRate: 1,
		Transport:  &devNullTransport{},
		Integrations: func(integrations []sentry.Integration) []sentry.Integration {
			return append(integrations, integrations[1])
		},
	}); err != nil {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1bc7db8f2b844bf2 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/fiber/main.go:13
	_ = sentry.Init(sentry.ClientOptions{
		Dsn: "",
		BeforeSend: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event {
			if hint.Context != nil {
				if ctx, ok := hint.Context.Value(sentry.RequestContextKey).(*fiber.Ctx); ok {
					// You have access to the original Context if it panicked
					fmt.Println(utils.CopyString(ctx.Hostname()))
				}
			}
			fmt.Println(event)
			return event
		},
		Debug:            true,
		AttachStacktrace: true,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #abb3db8ee1de3e3d capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/flush/main.go:11
	_ = sentry.Init(sentry.ClientOptions{
		Dsn:   "https://[email protected]/1337",
		Debug: true,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9f0737fd385e4868 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/flush/main.go:16
	sentry.CaptureMessage("Event #1")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7d132a7069016858 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/flush/main.go:17
	sentry.CaptureMessage("Event #2")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #5cd175180f27f831 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/flush/main.go:18
	sentry.CaptureMessage("Event #3")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b0a644eed3b25c74 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/flush/main.go:21
		sentry.CaptureMessage("Event #4")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #345890503511c2ce capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/flush/main.go:22
		sentry.CaptureMessage("Event #5")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #754f04880e6d006e capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/gin/main.go:13
	_ = sentry.Init(sentry.ClientOptions{
		Dsn: "",
		BeforeSend: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event {
			if hint.Context != nil {
				if req, ok := hint.Context.Value(sentry.RequestContextKey).(*http.Request); ok {
					// You have access to the original Request
					fmt.Println(req)
				}
			}
			fmt.Println(event)
			return event
		},
		Debug:            true,
		AttachStacktrace: true,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #006f8f1eb5327610 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/http/main.go:44
	err := sentry.Init(sentry.ClientOptions{
		// Either set your DSN here or set the SENTRY_DSN environment variable.
		Dsn: "",
		// Enable printing of SDK debug messages.
		// Useful when getting started or trying to figure something out.
		Debug: true,
		BeforeSend: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event {
			// Here you can inspect/modify non-transaction events (for example, errors) before they are sent.
			// Returning nil drops the event.
			log.Printf("BeforeSend event [%s]", event.EventID)
			return event
		},
		BeforeSendTransaction: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event {
			// Here you can inspect/modify transaction events before they are sent.
			// Returning nil drops the event.
			if strings.Contains(event.Message, "test-transaction") {
				// Drop the transaction
				return nil
			}
			event.Message += " [example]"
			log.Printf("BeforeSendTransaction event [%s]", event.EventID)
			return event
		},
		// Enable tracing
		EnableTracing: true,
		// Specify either a TracesSampleRate...
		TracesSampleRate: 1.0,
		// ... or a TracesSampler
		TracesSampler: sentry.TracesSampler(func(ctx sentry.SamplingContext) float64 {
			// Don't sample health checks.
			if ctx.Span.Name == "GET /health" {
				return 0.0
			}

			return 1.0
		}),
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #86751441a8959349 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/iris/main.go:17
	_ = sentry.Init(sentry.ClientOptions{
		Dsn: "",
		BeforeSend: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event {
			if hint.Context != nil {
				if req, ok := hint.Context.Value(sentry.RequestContextKey).(*http.Request); ok {
					// You have access to the original Request
					fmt.Println(req)
				}
			}
			fmt.Println(event)
			return event
		},
		Debug:            true,
		AttachStacktrace: true,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #98088bbd1a99f3e3 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/negroni/main.go:14
	_ = sentry.Init(sentry.ClientOptions{
		Dsn: "",
		BeforeSend: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event {
			if hint.Context != nil {
				if req, ok := hint.Context.Value(sentry.RequestContextKey).(*http.Request); ok {
					// You have access to the original Request
					fmt.Println(req)
				}
			}
			fmt.Println(event)
			return event
		},
		Debug:            true,
		AttachStacktrace: true,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3adbe2e0eb70ebac capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/profiling/main.go:20
	err := sentry.Init(sentry.ClientOptions{
		// Either set your DSN here or set the SENTRY_DSN environment variable.
		Dsn: "",
		// Enable printing of SDK debug messages.
		// Useful when getting started or trying to figure something out.
		Debug:              true,
		EnableTracing:      true,
		TracesSampleRate:   1.0,
		ProfilesSampleRate: 1.0,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0ce40e1692648e5f capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/recover-repanic/main.go:27
	err := sentry.Init(sentry.ClientOptions{
		// Either set your DSN here or set the SENTRY_DSN environment variable.
		Dsn: "",
		// Enable printing of SDK debug messages.
		// Useful when getting started or trying to figure something out.
		Debug: true,
		// This is an optional function with access to the event before it is
		// sent to Sentry. The event can be mutated, or sending can be aborted
		// by returning nil.
		BeforeSend: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event { return event },
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8200ca450e8820a6 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/recover/main.go:42
	_ = sentry.Init(sentry.ClientOptions{
		Debug:            true,
		Dsn:              "https://[email protected]/1337",
		AttachStacktrace: true,
		BeforeSend: func(e *sentry.Event, h *sentry.EventHint) *sentry.Event {
			fmt.Println(prettyPrint(e))
			return e
		},
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #144c00558cb207a9 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/slog/main.go:15
	err := sentry.Init(sentry.ClientOptions{
		Dsn:           "",
		EnableTracing: false,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a89e3210be275761 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/synctransport/main.go:14
	_ = sentry.Init(sentry.ClientOptions{
		Dsn:       "https://[email protected]/1337",
		Debug:     true,
		Transport: sentrySyncTransport,
	})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d3c1b7b4552e1af2 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/synctransport/main.go:21
		sentry.CaptureMessage("Event #1")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #94871f5d30b58106 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/synctransport/main.go:23
		sentry.CaptureMessage("Event #2")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #dd619cb144894ee0 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/synctransport/main.go:27
	sentry.CaptureMessage("Event #3")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #8047a4cf95a51bbc capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/synctransport/main.go:29
	sentry.CaptureMessage("Event #4")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0eb64c256ace67f2 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/synctransport/main.go:31
	sentry.CaptureMessage("Event #5")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0615453d80bb7a1b capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/synctransport/main.go:35
		sentry.CaptureMessage("Event #6")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #13a7b3bf2dfef40f capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/synctransport/main.go:37
		sentry.CaptureMessage("Event #7")

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #fe9b5ef22afdb57e capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/with_extra/main.go:65
	if err := sentry.Init(sentry.ClientOptions{
		Debug: true,
		Dsn:   "https://[email protected]/1337",
		BeforeSend: func(event *sentry.Event, hint *sentry.EventHint) *sentry.Event {
			// Solution 1 (use beforeSend, which will be applied to
			// error events and is usually application specific):
			if ex, ok := hint.OriginalException.(CustomComplexError); ok {
				for key, val := range ex.GimmeMoreData() {
					event.Extra[key] = val
				}
			}

			fmt.Printf("%s\n\n", prettyPrint(event.Extra))

			return event
		},
		Transport: &devNullTransport{},

		// Solution 2 (use custom integration, which will be
		// applied to all events, can be extracted as a
		// separate utility, and reused across projects):
		Integrations: func(integrations []sentry.Integration) []sentry.Integration {
			return append(integrations, new(ExtractExtra))
		},
	}); err != nil {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a86f99250b0b9a8a capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/_examples/with_extra/main.go:115
	sentry.CaptureException(errWithExtra)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 7 low-confidence finding(s)
low env_fs Environment-variable access. 6 locations
low env_fs dependency Excluded from app score #1e12763dc18df1af capability detected · no path traced Filesystem access.
pkgs/go/[email protected]/sourcereader.go:27
		data, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/weaviate/weaviate

go dependency
medium telemetry dependency Excluded from app score #c97551bd3c230443 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/adapters/handlers/rest/configure_api.go:296
		err := sentry.Init(sentry.ClientOptions{
			// Setup related config
			Dsn:         appState.ServerConfig.Config.Sentry.DSN,
			Debug:       appState.ServerConfig.Config.Sentry.Debug,
			Release:     "weaviate-core@" + build.Version,
			Environment: appState.ServerConfig.Config.Sentry.Environment,
			// Enable tracing if requested
			EnableTracing:    !appState.ServerConfig.Config.Sentry.TracingDisabled,
			AttachStacktrace: true,
			// Sample rates based on the config
			SampleRate:         appState.ServerConfig.Config.Sentry.ErrorSampleRate,
			ProfilesSampleRate: appState.ServerConfig.Config.Sentry.ProfileSampleRate,
			TracesSampler: sentry.TracesSampler(func(ctx sentry.SamplingContext) float64 {
				// Inherit decision from parent transaction (if any) if it is sampled or not
				if ctx.Parent != nil && ctx.Parent.Sampled != sentry.SampledUndefined {
					return 1.0
				}

				// Filter out uneeded traces
				switch ctx.Span.Name {
				// We are not interested in traces related to metrics endpoint
				case "GET /metrics":
				// These are some usual internet bot that will spam the server. Won't catch them all but we can reduce
				// the number a bit
				case "GET /favicon.ico":
				case "GET /t4":
				case "GET /ab2g":
				case "PRI *":
				case "GET /api/sonicos/tfa":
				case "GET /RDWeb/Pages/en-US/login.aspx":
				case "GET /_profiler/phpinfo":
				case "POST /wsman":
				case "POST /dns-query":
				case "GET /dns-query":
					return 0.0
				}

				// Filter out graphql queries, currently we have no context intrumentation around it and it's therefore
				// just a blank line with 0 info except graphql resolve -> do -> return.
				if ctx.Span.Name == "POST /v1/graphql" {
					return 0.0
				}

				// Return the configured sample rate otherwise
				return appState.ServerConfig.Config.Sentry.TracesSampleRate
			}),
		})

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c69059e5c3af86cb capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/adapters/repos/db/shard_init.go:109
			entsentry.CaptureException(err)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #d44d84b19cc7aa2f capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/adapters/repos/db/shard_read.go:483
						entsentry.CaptureException(err)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #88012d669b4cdcce capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/adapters/repos/db/shard_read.go:494
						entsentry.CaptureException(err)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b6598c8820a6f818 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/adapters/repos/db/shard_read.go:510
						entsentry.CaptureException(fmt.Errorf("collection %q shard %q: %w",
							s.index.Config.ClassName, s.name, err))

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #48153eb57b971d25 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/adapters/repos/db/shard_read.go:522
						entsentry.CaptureException(fmt.Errorf("collection %q shard %q: %w",
							s.index.Config.ClassName, s.name, err))

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #70658a0c50f02d78 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/entities/sentry/errors.go:31
	libsentry.CaptureException(err)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 476 low-confidence finding(s)
low env_fs Environment-variable access. 368 locations
low env_fs Filesystem access. 108 locations

github.com/armon/go-metrics

go dependency
medium telemetry dependency Excluded from app score #7941b3c9b324da23 capability detected · no path traced Telemetry/analytics SDK call. This library transmits usage or event data to a third-party service.
pkgs/go/[email protected]/datadog/dogstatsd.go:21
	client, err := statsd.New(addr)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

google.golang.org/protobuf

go dependency
medium pii_flow dependency Excluded from app score #8bfe0a05d5e1d397 PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:523 · flow /tmp/closeopen-meuxzd8a/pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 → /tmp/closeopen-meuxzd8a/pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:523
		fmt.Printf("executing: %v\n%s\n", strings.Join(cmd.Args, " "), out)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 22 low-confidence finding(s)
low env_fs Filesystem access. 16 locations
low env_fs Environment-variable access. 6 locations

cloud.google.com/go/compute/metadata

go dependency
expand_more 3 low-confidence finding(s)
low env_fs Environment-variable access. 2 locations
low env_fs dependency Excluded from app score #98c1982a6c63fd26 capability detected · no path traced Filesystem access.
pkgs/go/[email protected]/syscheck_linux.go:26
	b, _ := os.ReadFile("/sys/class/dmi/id/product_name")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

cloud.google.com/go/storage

go dependency
expand_more 11 low-confidence finding(s)
low env_fs Environment-variable access. 10 locations
low env_fs dependency Excluded from app score #02be0807c655833e capability detected · no path traced Filesystem access.
pkgs/go/[email protected]/transfermanager/downloader.go:221
		f, fErr := os.Create(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/Azure/azure-sdk-for-go/sdk/azcore

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #e08a88dd0cf0ee5c capability detected · no path traced Environment-variable access.
pkgs/go/[email protected]/runtime/policy_telemetry.go:75
		operatingSystem = os.Getenv("OS") // Get more specific OS information

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/Azure/azure-sdk-for-go/sdk/storage/azblob

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #cceed715e566c95c capability detected · no path traced Environment-variable access.
pkgs/go/[email protected]/internal/testcommon/common.go:178
	env, ok := os.LookupEnv(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aws/aws-sdk-go-v2/config

go dependency
expand_more 37 low-confidence finding(s)
low env_fs Filesystem access. 4 locations
low env_fs Environment-variable access. 33 locations

github.com/aws/aws-sdk-go-v2/credentials

go dependency
expand_more 6 low-confidence finding(s)
low env_fs Filesystem access. 5 locations
low env_fs dependency Excluded from app score #08fc2657c5b71149 capability detected · no path traced Environment-variable access.
pkgs/go/[email protected]/processcreds/provider.go:107
	cmd.Env = os.Environ()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/aws/aws-sdk-go-v2/service/bedrockruntime

go dependency
expand_more 3 low-confidence finding(s)

github.com/aws/aws-sdk-go-v2/service/s3

go dependency
expand_more 2 low-confidence finding(s)
low env_fs Environment-variable access. 2 locations

github.com/aws/aws-sdk-go-v2/service/sagemakerruntime

go dependency
expand_more 2 low-confidence finding(s)
low env_fs Environment-variable access. 2 locations

github.com/bmatcuk/doublestar

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #67d51f15041a5f8b capability detected · no path traced Filesystem access.
pkgs/go/[email protected]/doublestar.go:30
func (standardOS) Open(name string) (*os.File, error)     { return os.Open(name) }

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/cespare/xxhash/v2

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #6dfeb913bb104452 capability detected · no path traced Filesystem access.
pkgs/go/[email protected]/xxhsum/xxhsum.go:24
		f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/coreos/go-oidc/v3

go dependency

github.com/docker/docker

go dependency
expand_more 314 low-confidence finding(s)
low env_fs Environment-variable access. 96 locations
low env_fs Filesystem access. 218 locations

github.com/felixge/httpsnoop

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #afdc3333e347f884 capability detected · no path traced Filesystem access.
pkgs/go/[email protected]/codegen/main.go:278
	} else if err := ioutil.WriteFile(name, src, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/go-jose/go-jose/v4

go dependency

github.com/go-openapi/runtime

go dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #3472c59a9eab62f9 capability detected · no path traced Filesystem access.
pkgs/go/[email protected]/client/runtime.go:166
		caCert, err := os.ReadFile(opts.CA)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs Environment-variable access. 2 locations

github.com/go-openapi/spec

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #9fc03cb2ae011759 capability detected · no path traced Environment-variable access.
pkgs/go/[email protected]/debug.go:17
var Debug = os.Getenv("SWAGGER_DEBUG") != "" //nolint:gochecknoglobals // public toggle for debug logging

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/go-openapi/swag

go dependency
expand_more 2 low-confidence finding(s)
low env_fs Environment-variable access. 2 locations

github.com/go-openapi/validate

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #faf7fc2f1eb915a9 capability detected · no path traced Environment-variable access.
pkgs/go/[email protected]/debug.go:17
	Debug = os.Getenv("SWAGGER_DEBUG") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/golang-jwt/jwt/v4

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #cea6e410d1aea4b2 capability detected · no path traced Filesystem access.
pkgs/go/[email protected]/cmd/jwt/main.go:87
		if f, err := os.Open(p); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/golang-jwt/jwt/v5

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #2985d40b1459b0dd capability detected · no path traced Filesystem access.
pkgs/go/[email protected]/cmd/jwt/main.go:89
		f, err := os.Open(p)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/jessevdk/go-flags

go dependency
expand_more 5 low-confidence finding(s)

github.com/launchdarkly/go-server-sdk/v7

go dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #5b512317a2e6de78 capability detected · no path traced Environment-variable access.
pkgs/go/[email protected]/ldcomponents/http_configuration_builder.go:216
	if os.Getenv("HTTP_PROXY") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs Filesystem access. 3 locations

github.com/mark3labs/mcp-go

go dependency
expand_more 9 low-confidence finding(s)
low env_fs Environment-variable access. 4 locations
low egress tooling Excluded from app score unreachable #7a4cecb1f7e6b7f7 capability detected · no path traced Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/github.com_mark3labs_mcp-go@v0.37.1-0.20250812151906-9f16336f83e1/examples/custom_context/main.go:54
	req, err := http.NewRequestWithContext(ctx, "GET", "https://httpbin.org/anything", nil)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime. 2 locations
low env_fs Filesystem access. 2 locations

github.com/maypok86/otter/v2

go dependency

github.com/minio/minio-go/v7

go dependency
expand_more 72 low-confidence finding(s)
low env_fs Filesystem access. 20 locations
low env_fs Environment-variable access. 52 locations

github.com/nyaruka/phonenumbers

go dependency
expand_more 2 low-confidence finding(s)

github.com/parquet-go/parquet-go

go dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #530253e0b5185633 capability detected · no path traced Environment-variable access.
pkgs/go/[email protected]/internal/debug/debug.go:76
	for arg := range strings.SplitSeq(os.Getenv("PARQUETGODEBUG"), ",") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs Filesystem access. 2 locations

github.com/sirupsen/logrus

go dependency
expand_more 2 low-confidence finding(s)

github.com/tailor-platform/graphql

go dependency
expand_more 2 low-confidence finding(s)

github.com/weaviate/tiktoken-go

go dependency

go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #5d3c0e3c7da7ac00 capability detected · no path traced Environment-variable access.
pkgs/go/go.opentelemetry.io_otel_exporters_otlp_otlptrace_otlptracegrpc@v1.44.0/internal/x/x.go:46
		vRaw := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #33029a7123f642bc capability detected · no path traced Environment-variable access.
pkgs/go/go.opentelemetry.io_otel_exporters_otlp_otlptrace_otlptracehttp@v1.43.0/internal/x/x.go:46
		vRaw := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.opentelemetry.io/otel/trace

go dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #2c521fd5507ca20f capability detected · no path traced Environment-variable access.
pkgs/go/[email protected]/auto.go:665
		strV := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.uber.org/automaxprocs

go dependency
expand_more 5 low-confidence finding(s)
low env_fs Filesystem access. 4 locations
low env_fs dependency Excluded from app score #61d9bcaa7ac6c807 capability detected · no path traced Environment-variable access.
pkgs/go/[email protected]/maxprocs/maxprocs.go:109
	if max, exists := os.LookupEnv(_maxProcsKey); exists {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/net

go dependency
expand_more 28 low-confidence finding(s)
low env_fs Filesystem access. 18 locations
low env_fs Environment-variable access. 9 locations
low egress dependency Excluded from app score #ca0b43468939a6fc capability detected · no path traced Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/go/[email protected]/publicsuffix/gen.go:279
	res, err := http.Get(gitCommitURL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

golang.org/x/sys

go dependency
expand_more 59 low-confidence finding(s)
low env_fs Environment-variable access. 28 locations
low env_fs Filesystem access. 31 locations

golang.org/x/text

go dependency
expand_more 31 low-confidence finding(s)
low env_fs Filesystem access. 24 locations
low egress Hardcoded external endpoint. Review what data is sent to this destination. 4 locations
low env_fs Environment-variable access. 3 locations

gonum.org/v1/gonum

go dependency

google.golang.org/grpc

go dependency
expand_more 50 low-confidence finding(s)
low env_fs Filesystem access. 35 locations
low env_fs Environment-variable access. 15 locations

Skipped dependencies

Production

  • github.com/danaugrs/go-tsne prod — module zip exceeds byte cap
  • github.com/ikawaha/kagome-dict-ko prod — module zip exceeds byte cap
  • github.com/ikawaha/kagome/v2 prod — module zip exceeds byte cap
  • github.com/klauspost/compress prod — module zip exceeds byte cap
  • google.golang.org/api prod — module zip exceeds byte cap