Close Open Privacy Scan

link https://github.com/cline/cline
bolt Snapshot: commit c564045
science engine v1.21
schedule 2026-07-17T19:20:47.735927+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

smart_toy MCP server detected: @ai-sdk/anthropic, @ai-sdk/openai, @anthropic-ai/sdk, @modelcontextprotocol/sdk +2 more — detected in dependencies, not a safety judgment.

App Privacy Score

100 /100
Low privacy risk

Low risk · 61 finding(s)

Dependency score: 72 (Medium risk)

bar_chart Score Breakdown

No category deductions recorded.

list Scan Summary

0 high 0 medium 61 low
First-party packages: 1
Dependency packages: 4
Ecosystem: rust

swap_horiz External domains

100.82.5.118agentskills.ioai-gateway.vercel.shai-sdk.devai.google.devaihubmix.comaiplatform.googleapis.comaistudio.google.comapexsurveys.oracle.comapi.aiapi.aihubmix.comapi.anthropic.comapi.asksage.aiapi.cerebras.aiapi.cline.botapi.deepseek.comapi.dify.aiapi.exa.aiapi.fireworks.aiapi.getdial.aiapi.github.comapi.groq.comapi.hicap.aiapi.inference.wandb.aiapi.kilo.aiapi.minimax.ioapi.mistral.aiapi.moonshot.aiapi.novu.coapi.openai.comapi.sambanova.aiapi.studio.nebius.aiapi.telegram.orgapi.together.aiapi.together.xyzapi.v0.devapi.workos.comapi.x.aiapi.xiaomimimo.comapi.z.aiapp.baseten.coapp.cline.botapp.example.botapp.posthog.comapp.requestly.ioark.cn-beijing.volces.comauth.openai.comauth.tokenfactory.nebius.comautopush-generativelanguage.sandbox.googleapis.comavatars.githubusercontent.combailian.console.aliyun.combase-ui.combedrock-agent-runtime.us-west-2.amazonaws.combedrock-mantle.us-east-1.api.awsbedrock-runtime.us-east-1.amazonaws.combitcoin.orgchatgpt.comclaude.aicline.botcline.github.iocloud.cerebras.aicloud.google.comcloud.langfuse.comcloud.tencent.comcode-internal.aiservice.us-chicago-1.oci.oraclecloud.comcode.aiservice.us-chicago-1.oci.oraclecloud.comcommunity.cline.botconfluence.oraclecorp.comconsole.aihubmix.comconsole.anthropic.comconsole.groq.comconsole.mistral.aiconsole.volcengine.comcore-api.staging.int.cline.botcursor.comcustomersurveys.oracle.comdashboard.hicap.aidashscope.aliyuncs.comdata.cline.botdevelopers.openai.comdiscord.comdiscord.ggdocs.anthropic.comdocs.cline.botdocs.cloud.google.comdocs.expo.devdocs.litellm.aidocs.sambanova.aidummy.comejiidnob33g9ap1r.public.blob.vercel-storage.comexample.ngrok-free.appfirebaseinstallations.googleapis.comfirebaselogging.googleapis.comfireworks.aifonts.googleapis.comgemini-api-demos.uc.r.appspot.comgenerativelanguage.googleapis.comgithub.comgoo.glgoogle.aip.devhelp.openai.comhelp.sap.comheroui-assets.nyc3.cdn.digitaloceanspaces.comheroui.comhuggingface.coidcs-9dc693e80d9b469480d7afe00e743931.identity.oraclecloud.comimg.heroui.chatinfer-modelarts.cn-southwest-2.myhuaweicloud.cominference-api.nousresearch.cominference.baseten.coinference.poolside.aiinvalid-url-to-show-fallback.comjs-na2.hs-scripts.comjson-schema.orglmstudio.ailogin-ext.identity.oraclecloud.commanagement.azure.commarketplace.visualstudio.commodel-api.baseten.comodelcontextprotocol.iomodels.devnews.google.comnpm.imoauth2.googleapis.comontheline.trincoll.eduopen.bigmodel.cnopenrouter.aiplatform.claude.complatform.moonshot.aiplatform.moonshot.cnplatform.openai.compokeapi.coposthog.compptr.devpurl.oclc.orgpurl.orgraw.githubusercontent.comreact.devreactjs.orgregistry.npmjs.orgrouter.huggingface.corouter.requesty.aischemas.microsoft.comschemas.openxmlformats.orgschemas.zwobble.orgscira.aisentry.ioskills.shstaging-app.cline.botstorage.googleapis.comsupport.huaweicloud.comswapi.py4e.comt3.chattailwindcss.comtokenhub.tencentmaas.comus.i.posthog.comus.posthog.comv0.appvercel.comvia.placeholder.comwandb.aiwww.allrecipes.comwww.anthropic.comwww.apple.comwww.baseten.cowww.deepseek.comwww.foodnetwork.comwww.google.comwww.googleapis.comwww.gstatic.comwww.linkedin.comwww.minimax.iowww.reddit.comwww.w3.orgx.aix.comz.ai

</> First-Party Code

first-party (rust): apps/examples/desktop-app/src-tauri

rust first-party
expand_more 4 low-confidence finding(s)
low env_fs test-only Excluded from app score #4487865d575fcf65 — Environment-variable access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:200 
    let explicit = std::env::var("CLINE_CODE_SIDECAR_BIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #310112baf97ac923 — Environment-variable access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:364 
    if let Ok(value) = std::env::var("CLINE_MCP_SETTINGS_PATH") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d6a50f806947d23b — Environment-variable access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:370 
    let home = std::env::var("HOME").map_err(|_| "HOME is not set".to_string())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #db18758da4b1a833 — Filesystem access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:469 
        fs::write(&settings_path, body)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

rfd

rust dependency
expand_more 9 low-confidence finding(s)
low env_fs dependency Excluded from app score #b7f7e9200b4de147 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:2 
    let target_os = std::env::var("CARGO_CFG_TARGET_OS").expect("target OS not detected");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f523168b50cc3eb7 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:8 
            let gtk = std::env::var_os("CARGO_FEATURE_GTK3").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6441b60a99189b2 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:9 
            let xdg = std::env::var_os("CARGO_FEATURE_XDG_PORTAL").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #752d9527847c0911 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:18 
                let tokio = std::env::var_os("CARGO_FEATURE_TOKIO").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32073bd43af56c7c — Environment-variable access.
pkgs/rust/[email protected]/build.rs:19 
                let async_std = std::env::var_os("CARGO_FEATURE_ASYNC_STD").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #cbdca99ad0650357 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/backend/macos/utils/user_alert.rs:183 
            log::error!("UserAler result send error: {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #04273153d85103cd — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/backend/macos/utils/user_alert.rs:191 
                log::error!("UserAler error: {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #3631879391e9585c — Filesystem access.
pkgs/rust/[email protected]/src/file_handle/native.rs:29 
                    let res = std::fs::read(path);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a41765fafa1645a — Filesystem access.
pkgs/rust/[email protected]/src/file_handle/native.rs:82 
                    let res = std::fs::write(path, bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

serde

rust dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #88c18c0311897a2f — Environment-variable access.
pkgs/rust/[email protected]/build.rs:24 
    let out_dir = PathBuf::from(env::var_os("OUT_DIR").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd0c6d5e87d14eac — Environment-variable access.
pkgs/rust/[email protected]/build.rs:25 
    let patch_version = env::var("CARGO_PKG_VERSION_PATCH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c879c22bdf14839 — Filesystem access.
pkgs/rust/[email protected]/build.rs:27 
    fs::write(out_dir.join("private.rs"), module).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #80f9aa7e65e1214a — Environment-variable access.
pkgs/rust/[email protected]/build.rs:61 
    let rustc = env::var_os("RUSTC")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

serde_json

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #a3191f52e8951d1b — Environment-variable access.
pkgs/rust/[email protected]/build.rs:10 
    let target_arch = env::var_os("CARGO_CFG_TARGET_ARCH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfff66dc6de99496 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:11 
    let target_pointer_width = env::var_os("CARGO_CFG_TARGET_POINTER_WIDTH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tauri

rust dependency
expand_more 42 low-confidence finding(s)
low env_fs dependency Excluded from app score #4fe7e3feaed2da25 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:241 
  std::env::var(format!("CARGO_FEATURE_{}", AsShoutySnakeCase(feature)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #070f6596a7070bd8 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:263 
  let target_os = std::env::var("CARGO_CFG_TARGET_OS").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d607ab2ad06a35f — Environment-variable access.
pkgs/rust/[email protected]/build.rs:268 
  let out_dir = PathBuf::from(env::var("OUT_DIR").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9f614432f6c7dfd — Filesystem access.
pkgs/rust/[email protected]/build.rs:271 
  std::fs::write(
    checked_features_out_path,
    CHECKED_FEATURES.get().unwrap().lock().unwrap().join(","),
  )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2adfb2703412b2df — Environment-variable access.
pkgs/rust/[email protected]/build.rs:279 
  let target_env = std::env::var("CARGO_CFG_TARGET_ENV");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7de08af15c41cba7 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:280 
  let is_tauri_workspace = std::env::var("__TAURI_WORKSPACE__").is_ok_and(|v| v == "true");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d581eed0d3a354cb — Environment-variable access.
pkgs/rust/[email protected]/build.rs:287 
      std::env::var(var).unwrap_or_else(|_| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f784182c52d1dfa — Environment-variable access.
pkgs/rust/[email protected]/build.rs:292 
    if let Ok(kotlin_out_dir) = std::env::var("WRY_ANDROID_KOTLIN_FILES_OUT_DIR") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8662cc5a7f83bf2 — Filesystem access.
pkgs/rust/[email protected]/build.rs:311 
        let content = fs::read_to_string(file.path())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #122544205b412fa6 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:324 
    if let Some(project_dir) = env::var_os("TAURI_ANDROID_PROJECT_PATH").map(PathBuf::from) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f9aedb406d20b59 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:325 
      let package_unescaped = env::var("TAURI_ANDROID_PACKAGE_UNESCAPED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89c4a859b53ffb28 — Filesystem access.
pkgs/rust/[email protected]/build.rs:329 
      std::fs::write(
        project_dir.join("app").join("proguard-tauri.pro"),
        tauri_proguard,
      )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b70c36bb0ee65a4 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:337 
      PathBuf::from(std::env::var_os("CARGO_MANIFEST_DIR").unwrap()).join("mobile/android");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e50d124ced7e45b — Environment-variable access.
pkgs/rust/[email protected]/build.rs:345 
        PathBuf::from(std::env::var_os("CARGO_MANIFEST_DIR").unwrap()).join("mobile/ios-api");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a25ceb969a9b1d98 — Filesystem access.
pkgs/rust/[email protected]/src/app.rs:361 
        return std::fs::read(asset_path).ok().map(|bytes| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #fa6fd4aaac77ceda — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:576 
      log::error!("failed to exit: {}", e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #a9b7d575aba6e7e8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:590 
      log::debug!("restart triggered on the main thread");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #c611fedc3cdcd6a0 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:594 
      log::debug!("restart triggered from a separate thread");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #53c1372845c7306c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:606 
          log::error!("failed to request exit: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #34319083bd1bc799 — Filesystem access.
pkgs/rust/[email protected]/src/image/mod.rs:97 
    let bytes = std::fs::read(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #d6d1409f52985493 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:74 
            log::debug!("Unknown CspHash variant encountered: {:?}", _csp_hash);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #02fc83608869108e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:409 
        log::debug!("Asset `{path}` not found; fallback to {path}.html");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #c8de87d2b15b11f7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:416 
        log::debug!("Asset `{path}` not found; fallback to {path}/index.html",);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #07e542a70b28a6dc — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:423 
        log::debug!("Asset `{path}` not found; fallback to index.html");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #61cf21f7dfcf057d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:431 
        log::error!("{error}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #05a85d00764278d8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/path/android.rs:54 
          log::error!("failed to get file name from URI: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #fcf5f2814387ef48 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/process.rs:84 
      log::error!("failed to restart app: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #8de2d7f86c99567a — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/process.rs:122 
            log::error!("failed to restart app: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #aacc9f0c7cc515ea — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:42 
    log::error!("asset protocol path \"{}\" is not valid: {}", path, e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b18ac8809d5912eb — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:47 
    log::error!("asset protocol not configured to allow the path: {}", path);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #ac7d66361093f113 — Filesystem access.
pkgs/rust/[email protected]/src/protocol/asset.rs:52 
  let mut file = match File::open(path.clone()) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #c6c7f907788693d9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:58 
          log::error!("Failed to open Android external storage file '{}': {}. This may be due to missing storage permissions.", path, e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #3229845a93fd9b2c — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:62 
        log::error!("File does not exist at path: {}", path);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #61bf9585130204d1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:65 
        log::error!("Missing OS permission to access path \"{}\": {}", path, e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #6cf87ff803d6891f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:133 
          log::info!("adding dev server root certificate");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #8120f4e02367d547 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:145 
          log::warn!(
            "the dev root-certificate-path option was provided, but you must enable one of the following Tauri features in Cargo.toml: native-tls, native-tls-vendored, rustls-tls"
          );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #0d2179eec474d59e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:150 
        log::warn!(
          "loading HTTPS URL; you might need to provide a certificate via the `dev --root-certificate-path` option. You must enable one of the following Tauri features in Cargo.toml: native-tls, native-tls-vendored, rustls-tls"
        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #3bf0a14fdc995ed2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:206 
        log::error!("{error_message}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #86970bcac2bb12b2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:396 
          tracing::error!("failed to resolve data directory");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #571b88055f86a638 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:403 
              tracing::error!(
                "data_directory `{}` is not a safe path, ignoring config. Validation error was: {_err}",
                data_directory.display()
              );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ae7d234134ce1730 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:416 
              tracing::error!(
                "data_directory `{}` is not a relative path, ignoring config.",
                data_directory.display()
              );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #7c118fb73e7247e4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:1750 
      tracing::error!(
        "__TAURI_INVOKE_KEY__ expected {expected} but received {}",
        request.invoke_key
      );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

Skipped dependencies

Production

  • @cline/shared prod — dist-only: no readable source
  • @cline/llms prod — dist-only: no readable source
  • @cline/agents prod — dist-only: no readable source
  • @cline/core prod — dist-only: no readable source
  • @types/uuid prod — no javascript source
  • @chat-adapter/discord prod — dist-only: no readable source
  • @chat-adapter/gchat prod — dist-only: no readable source
  • @chat-adapter/linear prod — dist-only: no readable source
  • @chat-adapter/slack prod — dist-only: no readable source
  • @chat-adapter/telegram prod — dist-only: no readable source
  • @chat-adapter/whatsapp prod — dist-only: no readable source
  • @cline/cline-hub prod — registry 404
  • @clack/prompts prod — dist-only: no readable source
  • @fontsource/azeret-mono prod — no javascript source
  • @radix-ui/react-slider prod — dist-only: no readable source
  • @radix-ui/react-slot prod — dist-only: no readable source
  • @radix-ui/react-switch prod — dist-only: no readable source
  • @radix-ui/react-tooltip prod — dist-only: no readable source
  • class-variance-authority prod — dist-only: no readable source
  • framer-motion prod — dist-only: no readable source
  • fuse.js prod — dist-only: no readable source
  • magic-string prod — dist-only: no readable source
  • mermaid prod — dist-only: no readable source
  • react-textarea-autosize prod — dist-only: no readable source
  • react-virtuoso prod — dist-only: no readable source
  • @fontsource-variable/schibsted-grotesk prod — no javascript source
  • @radix-ui/react-use-controllable-state prod — dist-only: no readable source
  • @rive-app/react-webgl2 prod — dist-only: no readable source
  • @shikijs/langs prod — dist-only: no readable source
  • @shikijs/themes prod — dist-only: no readable source
  • @streamdown/cjk prod — dist-only: no readable source
  • @xyflow/react prod — dist-only: no readable source
  • cmdk prod — dist-only: no readable source
  • motion prod — dist-only: no readable source
  • next-themes prod — dist-only: no readable source
  • react-jsx-parser prod — dist-only: no readable source
  • shadcn prod — dist-only: no readable source
  • shiki prod — dist-only: no readable source
  • sonner prod — dist-only: no readable source
  • streamdown prod — dist-only: no readable source
  • tokenlens prod — dist-only: no readable source