Close Open Privacy Scan

link https://github.com/danny-avila/LibreChat
bolt Snapshot: commit cf9a426
science engine v3
schedule 2026-07-10T20:11:51.763460+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code. Dependency data flows are listed separately and do not affect this verdict.

App Privacy Score

97 /100
Low privacy risk

Low risk · 49 finding(s)

Dependency score: 82 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 1 medium 48 low
First-party packages: 2
Dependency packages: 2
Ecosystem: go

swap_horiz Application data flows

No application data flows were found. See dependency data flows below.

hub Dependency data flows (1)
medium google.golang.org/protobuf dependency PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:517 → pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520

</> First-Party Code

first-party (go): otel/langfuse-fanout

go first-party
expand_more 11 low-confidence finding(s)
low env_fs production #5abc0792ba9f73b8 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:163 
	centralBaseURL := normalizeBaseURL(os.Getenv("LANGFUSE_FANOUT_CENTRAL_BASE_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b5ba61480b3b08a — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:164 
	centralAuth := strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_CENTRAL_AUTH_HEADER"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2aef52a55c0c5d0c — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:173 
	for _, item := range strings.Split(os.Getenv("LANGFUSE_FANOUT_TENANT_DESTINATIONS"), ",") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d13d59d3e76f9ec1 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:190 
	traceDestinationKeys := parseDestinationKeys(os.Getenv("LANGFUSE_FANOUT_TRACE_DESTINATION_KEYS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22ce27fcd17c10a2 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:199 
	rawPublicURL := strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_PUBLIC_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c34ccf98a935637b — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:204 
	redisURI := strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_REDIS_URI"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a9b0b1ce47a8677 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:223 
			username:  strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_REDIS_USERNAME")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #226d40e1fd6304d5 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:224 
			password:  strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_REDIS_PASSWORD")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28a184dd55edd2c9 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:1147 
	if value := strings.TrimSpace(os.Getenv(key)); value != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #922047c04e3117b6 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:1155 
		if value := strings.TrimSpace(os.Getenv(key)); value != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b079d7fea03658ba — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:1163 
	value := strings.TrimSpace(os.Getenv(key))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm)

go first-party
expand_more 11 low-confidence finding(s)
low env_fs production #5abc0792ba9f73b8 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:163 
	centralBaseURL := normalizeBaseURL(os.Getenv("LANGFUSE_FANOUT_CENTRAL_BASE_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b5ba61480b3b08a — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:164 
	centralAuth := strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_CENTRAL_AUTH_HEADER"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2aef52a55c0c5d0c — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:173 
	for _, item := range strings.Split(os.Getenv("LANGFUSE_FANOUT_TENANT_DESTINATIONS"), ",") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d13d59d3e76f9ec1 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:190 
	traceDestinationKeys := parseDestinationKeys(os.Getenv("LANGFUSE_FANOUT_TRACE_DESTINATION_KEYS"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22ce27fcd17c10a2 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:199 
	rawPublicURL := strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_PUBLIC_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c34ccf98a935637b — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:204 
	redisURI := strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_REDIS_URI"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a9b0b1ce47a8677 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:223 
			username:  strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_REDIS_USERNAME")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #226d40e1fd6304d5 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:224 
			password:  strings.TrimSpace(os.Getenv("LANGFUSE_FANOUT_REDIS_PASSWORD")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28a184dd55edd2c9 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:1147 
	if value := strings.TrimSpace(os.Getenv(key)); value != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #922047c04e3117b6 — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:1155 
		if value := strings.TrimSpace(os.Getenv(key)); value != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b079d7fea03658ba — Environment-variable access.
repo/otel/langfuse-fanout/cmd/langfuse-fanout/main.go:1163 
	value := strings.TrimSpace(os.Getenv(key))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

google.golang.org/protobuf

go dependency
medium pii_flow dependency Excluded from app score #4e139de18a6314d3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 · flow /tmp/closeopen-7yx40lmj/pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:517 → /tmp/closeopen-7yx40lmj/pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:520 
		fmt.Printf("executing: %v\n%s\n", strings.Join(cmd.Args, " "), out)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 22 low-confidence finding(s)
low env_fs dependency Excluded from app score #2c43e0decc1a1c91 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:117 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/wirefuzz/corpus/%x", sha1.Sum(wire)), wire, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc926c7b0842e9cb — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:125 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/textfuzz/corpus/%x", sha1.Sum(text)), text, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e58e7cde3f088d61 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-corpus/main.go:133 
		if err := os.WriteFile(fmt.Sprintf("internal/fuzz/jsonfuzz/corpus/%x", sha1.Sum(json)), json, 0777); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fdff5defd585aaf — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:46 
	if plugin := os.Getenv("RUN_AS_PROTOC_PLUGIN"); plugin != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa70f0267a06c4f1 — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:85 
	flag.StringVar(&protoRoot, "protoroot", os.Getenv("PROTOBUF_ROOT"), "The root of the protobuf source tree.")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc9623dad289fe89 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:119 
	out, err := os.Create(outFn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abcc22b7f145381e — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:124 
	b, err := os.ReadFile(inFn)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03472390d165f012 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:424 
			check(os.WriteFile(filepath.Join(tmpDir, filepath.FromSlash(d.path+"/gen_test.go")), b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f667074cbf62a7cf — Environment-variable access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:517 
	cmd.Env = append(os.Environ(), "RUN_AS_PROTOC_PLUGIN=1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #863b6d994e88992a — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:718 
	src, err := os.ReadFile(srcPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f4237c9c98f0a31 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:721 
	dst, _ := os.ReadFile(dstPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb49c91c31439076 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-protos/main.go:725 
	check(os.WriteFile(dstPath, src, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c7cdb3061b7e01d — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:263 
		prev, _ := os.ReadFile(absFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c87d19bcb2aa474f — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:266 
			check(os.WriteFile(absFile, b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6aeee483a4735d7f — Filesystem access.
pkgs/go/[email protected]/internal/cmd/generate-types/main.go:269 
		check(os.WriteFile(absFile+".tmp", b, 0664))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3a77b77d65d7ec8 — Filesystem access.
pkgs/go/[email protected]/internal/cmd/pbdump/pbdump.go:121 
		b, err := os.ReadFile(f)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb10a5b8589b1445 — Filesystem access.
pkgs/go/[email protected]/internal/detrand/rand.go:46 
	f, err := os.Open(s)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4076d7e48c4ed25 — Filesystem access.
pkgs/go/[email protected]/internal/fuzztest/fuzztest.go:20 
	dir, err := os.Open(*corpus)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25e45714d8188a8c — Filesystem access.
pkgs/go/[email protected]/internal/fuzztest/fuzztest.go:36 
			b, err := os.ReadFile(filepath.Join(*corpus, name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16336ceed6c48144 — Environment-variable access.
pkgs/go/[email protected]/internal/impl/lazy.go:24 
	if os.Getenv("GOPROTODEBUG") == "nolazy" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e52574add1100a8 — Environment-variable access.
pkgs/go/[email protected]/reflect/protoregistry/registry.go:51 
	if v := os.Getenv(env); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9dc1b7fca0aef747 — Environment-variable access.
pkgs/go/[email protected]/reflect/protoregistry/registry.go:63 
		panic("invalid " + env + " value: " + os.Getenv(env))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/prometheus/client_golang

go dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #fdb1a31fe340c552 — Filesystem access.
pkgs/go/[email protected]/prometheus/collectors/gen_go_collector_set.go:136 
	if err := os.WriteFile(fname, result, 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af1e55c95569c899 — Filesystem access.
pkgs/go/[email protected]/prometheus/gen_go_collector_metrics_set.go:102 
	if err := os.WriteFile(fname, result, 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42ce2eb04de06354 — Filesystem access.
pkgs/go/[email protected]/prometheus/process_collector.go:169 
		content, err := os.ReadFile(pidFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #017a8662d2aa3ae9 — Filesystem access.
pkgs/go/[email protected]/prometheus/process_collector_darwin.go:57 
	if dir, err := os.Open("/dev/fd"); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • @azure/identity prod — dist-only: no readable source
  • @azure/search-documents prod — dist-only: no readable source
  • @azure/storage-blob prod — dist-only: no readable source
  • @google/genai prod — dist-only: no readable source
  • @keyv/redis prod — dist-only: no readable source
  • @librechat/api prod — registry 404
  • @librechat/data-schemas prod — dist-only: no readable source
  • @modelcontextprotocol/sdk prod — dist-only: no readable source
  • ai-tokenizer prod — dist-only: no readable source
  • cookie prod — dist-only: no readable source
  • express-rate-limit prod — dist-only: no readable source
  • https-proxy-agent prod — dist-only: no readable source
  • keyv prod — dist-only: no readable source
  • librechat-data-provider prod — dist-only: no readable source
  • rate-limit-redis prod — dist-only: no readable source
  • @codesandbox/sandpack-react prod — dist-only: no readable source
  • @headlessui/react prod — dist-only: no readable source
  • @librechat/client prod — dist-only: no readable source
  • @marsidev/react-turnstile prod — dist-only: no readable source
  • @mcp-ui/client prod — dist-only: no readable source
  • @radix-ui/react-accordion prod — dist-only: no readable source
  • @radix-ui/react-checkbox prod — dist-only: no readable source
  • @radix-ui/react-collapsible prod — dist-only: no readable source
  • @radix-ui/react-dialog prod — dist-only: no readable source
  • @radix-ui/react-dropdown-menu prod — dist-only: no readable source
  • @radix-ui/react-hover-card prod — dist-only: no readable source
  • @radix-ui/react-label prod — dist-only: no readable source
  • @radix-ui/react-popover prod — dist-only: no readable source
  • @radix-ui/react-progress prod — dist-only: no readable source
  • @radix-ui/react-radio-group prod — dist-only: no readable source
  • @radix-ui/react-select prod — dist-only: no readable source
  • @radix-ui/react-separator prod — dist-only: no readable source
  • @radix-ui/react-slider prod — dist-only: no readable source
  • @radix-ui/react-switch prod — dist-only: no readable source
  • @radix-ui/react-tabs prod — dist-only: no readable source
  • @radix-ui/react-toast prod — dist-only: no readable source
  • @react-spring/web prod — dist-only: no readable source
  • class-variance-authority prod — dist-only: no readable source
  • copy-to-clipboard prod — dist-only: no readable source
  • framer-motion prod — dist-only: no readable source
  • input-otp prod — dist-only: no readable source
  • match-sorter prod — dist-only: no readable source
  • mermaid prod — dist-only: no readable source
  • react-hook-form prod — dist-only: no readable source
  • react-resizable-panels prod — dist-only: no readable source
  • react-router-dom prod — dist-only: no readable source
  • react-speech-recognition prod — dist-only: no readable source
  • react-textarea-autosize prod — dist-only: no readable source
  • react-virtualized prod — dist-only: no readable source
  • react-vtree prod — dist-only: no readable source
  • swr prod — dist-only: no readable source
  • tailwindcss-radix prod — dist-only: no readable source
  • @langchain/langgraph-checkpoint prod — dist-only: no readable source
  • @langchain/langgraph-checkpoint-mongodb prod — dist-only: no readable source