Close Open Privacy Scan

link https://github.com/FlowiseAI/Flowise

bolt Snapshot: commit e816d26

science engine v1.22

schedule 2026-07-24T10:16:43.343169+00:00

smart_toy MCP server detected: @anthropic-ai/sdk, @google/generative-ai, @langchain/anthropic, @langchain/core +14 more — detected in dependencies, not a safety judgment.

Incomplete scan — only 103/200 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

42 /100

High privacy risk — application leak confirmed

High risk · 2284 finding(s)

Dependency score: 0 (High risk)

bar_chart Score Breakdown

pii_flow −30

egress −15

telemetry −10

env_fs −3

list Scan Summary

3 high 14 medium 2267 low

First-party packages: 5

Dependency packages: 39

Ecosystem: npm

swap_horiz Confirmed data exfiltration in application code

External domains: aaa.nonexistanturl.comaccounts.google.comai.google.devairtable.comapi.airtable.comapi.anthropic.comapi.astra.datastax.comapi.cerebras.aiapi.cloudflare.comapi.cohere.aiapi.cometapi.comapi.dev.cloud.datastax.comapi.dicebear.comapi.firecrawl.devapi.fireworks.aiapi.github.comapi.githubcopilot.comapi.hub.langchain.comapi.ipify.orgapi.jina.aiapi.lunary.aiapi.nodemailer.comapi.open-meteo.comapi.openai.comapi.pipedream.comapi.sambanova.aiapi.search.brave.comapi.smith.langchain.comapi.speak.comapi.spider.cloudapi.test.cloud.datastax.comapi.unstructuredapp.ioapi.vectara.ioapi.voyageai.comapify.comapp.langwatch.aiapp.mem0.aiapp.phoenix.arize.comarize.comarxiv.orgazure.microsoft.combit.lybrave.comcatalog.ngc.nvidia.comcdn.jsdelivr.netcloud.cerebras.aicloud.langfuse.comcommunity.atlassian.comconfluence.atlassian.comconsole.apify.comconsole.cloud.google.comconsole.groq.comconsole.mistral.aideveloper.wolframalpha.comdevelopers.notion.comdisk.compute.azure.comdocs.anthropic.comdocs.arize.comdocs.aws.amazon.comdocs.browserless.iodocs.bullmq.iodocs.cohere.comdocs.exa.aidocs.expo.devdocs.flowiseai.comdocs.getzep.comdocs.gitbook.comdocs.github.comdocs.google.comdocs.googleapis.comdocs.langwatch.aidocs.microsoft.comdocs.momentohq.comdocs.perplexity.aidocs.sambanova.aidocs.searxng.orgdocs.slack.devdocs.smith.langchain.comdocs.stripe.comdocs.teradata.comdocs.together.aidocs.unstructured.iodocs.vectara.comdocs.voyageai.comdrive.google.comdynamodb.amazonaws.comelevenlabs.ioethereal.emailexample.atlassian.netexport.arxiv.orgexpress-rate-limit.github.iofireworks.aiflowiseai.comgithub.comgmail.googleapis.comgraph.microsoft.comhandlebarsjs.comhelp.openai.comid.atlassian.comintegrate.api.nvidia.comip.nfriedly.comjina.aijs.langchain.comjson-schema.orglangfuse.comlangwatch.ailearn.microsoft.comlocalai.iologin.microsoftonline.comlunary.aimail.google.commakersuite.google.commcp-server-ab71a6b2-cd55-49d0-adba-562bc85956e3.supermachine.appmcp.browserless.iomcp.pipedream.commcp.slack.commeilisearch.commilvus.iomomentjs.comneo4j.comnodejs.orgnodemailer.comnpm.imnpms.ionts.ngc.nvidia.comoauth2.googleapis.comoctocorp.ghe.comopenidconnect.googleapis.comopenrouter.aiotlp.arize.comphoenix.arize.compipedream.complatform.claude.complatform.openai.composthog.comprogrammablesearchengine.google.compython.langchain.comqdrant.techraw.githubusercontent.comrealtime.oxylabs.ioremote.mcp.pipedream.netreplicate.coms3-fips.dualstacks3-fips.dualstack.us-east-1s3-fips.us-east-1s3.amazonaws.coms3.dualstacks3.dualstack.us-east-1sentry.iosetuptools.pypa.iosheets.googleapis.comsidorares.github.ioslack.comsmith.langchain.comsns.amazonaws.comsns.us-gov-east-1.amazonaws.comsns.us-gov-west-1.amazonaws.comspider.cloudstorage.azure.comstripe.comsts.amazonaws.comsupport.airtable.comsupport.atlassian.comts.llamaindex.aiunstructured-io.github.iounstructured.ioupstash.comus.i.posthog.comvectara.comwww.assemblyai.comwww.comet.comwww.elastic.cowww.figma.comwww.firecrawl.devwww.google.comwww.googleapis.comwww.notion.sowww.npmjs.comwww.searchapi.iowww.w3.orgwww.yahoo.comxyz.eu-west-1.aws.endpoints.huggingface.cloudyour-foundry-instance.services.ai.azure.com

high first-party (npm): packages/components A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.

repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:129 → repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:132

medium first-party (npm): packages/components A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:129 → repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:135

hub Dependency data flows (9)

high axios dependency A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.

pkgs/npm/[email protected]/lib/adapters/http.js:611 → pkgs/npm/[email protected]/lib/adapters/http.js:708

high flowise-components dependency A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.

pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:129 → pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:132

medium axios dependency Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/lib/adapters/http.js:616 → pkgs/npm/[email protected]/lib/adapters/http.js:708

medium winston dependency Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/lib/winston/transports/http.js:249 → pkgs/npm/[email protected]/lib/winston/transports/http.js:242

medium flowise-components dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:129 → pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:135

medium winston-azure-blob tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/[email protected]__reposrc/examples/index.ts:19 → pkgs/npm/[email protected]__reposrc/examples/index.ts:33

medium @brave/brave-search-mcp-server dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/src/config.ts:77 → pkgs/npm/@[email protected]__reposrc/src/config.ts:135

medium @brave/brave-search-mcp-server dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/src/config.ts:77 → pkgs/npm/@[email protected]__reposrc/src/config.ts:142

medium @brave/brave-search-mcp-server dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/src/config.ts:77 → pkgs/npm/@[email protected]__reposrc/src/config.ts:157

</> First-Party Code

first-party (npm): packages/components

npm first-party

high pii_flow production #fe2dd62481c80b20 — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.

repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:132 · flow /tmp/closeopen-n94bn249/repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:129 → /tmp/closeopen-n94bn249/repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:132

        const response = await fetch(this.apiUrl, {
            method: 'POST',
            body: formData,
            headers
        })

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

medium pii_flow production #09da2973e0a9ec2d — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:135 · flow /tmp/closeopen-n94bn249/repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:129 → /tmp/closeopen-n94bn249/repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:135

            headers

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 373 low-confidence finding(s)

low egress production #6c654df5189dace8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/evaluation/EvaluationRunner.ts:144

                let response = await axios.post(`${this.baseURL}/api/v1/prediction/${chatflowId}`, postData, axiosConfig)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a6d8a15ff35bb4de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/agentflow/utils.ts:534

        const response = await fetch(`https://api.openai.com/v1/containers/${containerId}/files/${fileId}/content`, {
            method: 'GET',
            headers: {
                Accept: '*/*',
                Authorization: `Bearer ${openAIApiKey}`
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #e723210be3479cac — Environment-variable access.

repo/packages/components/nodes/agents/ConversationalAgent/ConversationalAgent.ts:283

        verbose: process.env.DEBUG === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a788243080c897a7 — Environment-variable access.

repo/packages/components/nodes/agents/ConversationalRetrievalToolAgent/ConversationalRetrievalToolAgent.ts:360

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1c33dd07a94b857d — Environment-variable access.

repo/packages/components/nodes/agents/LlamaIndexAgents/AnthropicAgent/AnthropicAgent_LlamaIndex.ts:104

            verbose: process.env.DEBUG === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a4ca9e6920bb9de — Environment-variable access.

repo/packages/components/nodes/agents/LlamaIndexAgents/AnthropicAgent/AnthropicAgent_LlamaIndex.ts:113

        const response = await agent.chat({ message: input, chatHistory, verbose: process.env.DEBUG === 'true' ? true : false })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c7abde4f233a03d — Environment-variable access.

repo/packages/components/nodes/agents/LlamaIndexAgents/OpenAIToolAgent/OpenAIToolAgent_LlamaIndex.ts:115

            verbose: process.env.DEBUG === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8eed18512093a665 — Environment-variable access.

repo/packages/components/nodes/agents/LlamaIndexAgents/OpenAIToolAgent/OpenAIToolAgent_LlamaIndex.ts:130

                verbose: process.env.DEBUG === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5346b84d80d84d1c — Environment-variable access.

repo/packages/components/nodes/agents/LlamaIndexAgents/OpenAIToolAgent/OpenAIToolAgent_LlamaIndex.ts:157

            const response = await agent.chat({ message: input, chatHistory, verbose: process.env.DEBUG === 'true' ? true : false })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #69b67b0199a2cf0d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/agents/OpenAIAssistant/OpenAIAssistant.ts:974

        const response = await fetch(`https://api.openai.com/v1/files/${fileObj.id}/content`, {
            method: 'GET',
            headers: { Accept: '*/*', Authorization: `Bearer ${openAIApiKey}` }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #a5347349fe17fa97 — Environment-variable access.

repo/packages/components/nodes/agents/ReActAgentChat/ReActAgentChat.ts:132

            verbose: process.env.DEBUG === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0ad953846112b746 — Environment-variable access.

repo/packages/components/nodes/agents/ReActAgentLLM/ReActAgentLLM.ts:105

            verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #738607a16cc820f4 — Environment-variable access.

repo/packages/components/nodes/agents/ToolAgent/ToolAgent.ts:359

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3dce7cea6db8f491 — Environment-variable access.

repo/packages/components/nodes/agents/XMLAgent/XMLAgent.ts:284

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #df9cb0a36f65c7df — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/cache/RedisCache/RedisCache.ts:66

            let value = await client.get(key)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #1c86f8c95b000428 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/cache/RedisCache/RedisCache.ts:74

                value = await client.get(key)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #e1bc10e37d30c5bf — Environment-variable access.

repo/packages/components/nodes/cache/RedisCache/RedisCache.ts:130

                process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f151c546d919ff36 — Environment-variable access.

repo/packages/components/nodes/cache/RedisCache/RedisCache.ts:131

                    ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd958bdeeb7aceb6 — Environment-variable access.

repo/packages/components/nodes/cache/RedisCache/RedisCache.ts:138

                process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5aab4f202c98922c — Environment-variable access.

repo/packages/components/nodes/cache/RedisCache/RedisCache.ts:139

                    ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1cf5f8a000e9fca9 — Environment-variable access.

repo/packages/components/nodes/cache/RedisCache/RedisEmbeddingsCache.ts:87

                    process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7433f306eacfd391 — Environment-variable access.

repo/packages/components/nodes/cache/RedisCache/RedisEmbeddingsCache.ts:88

                        ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5451f7b48ab3ee58 — Environment-variable access.

repo/packages/components/nodes/cache/RedisCache/RedisEmbeddingsCache.ts:95

                    process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ee3564e5610c4172 — Environment-variable access.

repo/packages/components/nodes/cache/RedisCache/RedisEmbeddingsCache.ts:96

                        ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #80c7f86fe3eb6525 — Environment-variable access.

repo/packages/components/nodes/chains/ApiChain/GETApiChain.ts:134

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5608b5b30acb0b63 — Environment-variable access.

repo/packages/components/nodes/chains/ApiChain/OpenAPIChain.ts:134

        verbose: process.env.DEBUG === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3d80286bb4baafa — Environment-variable access.

repo/packages/components/nodes/chains/ApiChain/POSTApiChain.ts:124

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #98d24821fc17e43e — Environment-variable access.

repo/packages/components/nodes/chains/ConversationChain/ConversationChain.ts:139

        if (process.env.DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59f345419ecea967 — Environment-variable access.

repo/packages/components/nodes/chains/ConversationalRetrievalQAChain/ConversationalRetrievalQAChain.ts:229

        if (process.env.DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d46f1701b7e50e1 — Environment-variable access.

repo/packages/components/nodes/chains/GraphCypherQAChain/GraphCypherQAChain.ts:423

        if (process.env.DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a6859b881f3687a — Environment-variable access.

repo/packages/components/nodes/chains/LLMChain/LLMChain.ts:109

                verbose: process.env.DEBUG === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75341f4e7696ad14 — Environment-variable access.

repo/packages/components/nodes/chains/LLMChain/LLMChain.ts:117

                verbose: process.env.DEBUG === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #133888d79290f524 — Environment-variable access.

repo/packages/components/nodes/chains/MultiPromptChain/MultiPromptChain.ts:71

            llmChainOpts: { verbose: process.env.DEBUG === 'true' ? true : false }

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8535504b4f9e849 — Environment-variable access.

repo/packages/components/nodes/chains/MultiRetrievalQAChain/MultiRetrievalQAChain.ts:79

            retrievalQAChainOpts: { verbose: process.env.DEBUG === 'true' ? true : false, returnSourceDocuments }

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aba111ddc59eb2de — Environment-variable access.

repo/packages/components/nodes/chains/RetrievalQAChain/RetrievalQAChain.ts:58

        const chain = RetrievalQAChain.fromLLM(model, vectorStoreRetriever, { verbose: process.env.DEBUG === 'true' ? true : false })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b6328921daa7090 — Environment-variable access.

repo/packages/components/nodes/chains/SqlDatabaseChain/SqlDatabaseChain.ts:245

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #9df146b0b8924411 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/components/nodes/chains/VectaraChain/VectaraChain.ts:312

            const response = await fetch(`https://api.vectara.io/v1/query`, {
                method: 'POST',
                headers: headers?.headers,
                body: JSON.stringify(data)
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #de70351124171b34 — Environment-variable access.

repo/packages/components/nodes/chains/VectorDBQAChain/VectorDBQAChain.ts:60

            verbose: process.env.DEBUG === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9670f823187184ff — Filesystem access.

repo/packages/components/nodes/chatmodels/AWSBedrock/AWSBedrockCatalog.test.ts:1

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #237cb8760d2ce638 — Filesystem access.

repo/packages/components/nodes/chatmodels/AWSBedrock/AWSBedrockCatalog.test.ts:9

        const raw = JSON.parse(fs.readFileSync(modelsPath, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d89fb21962d8dd1 — Environment-variable access.

repo/packages/components/nodes/chatmodels/AzureChatOpenAI/AzureChatOpenAI.ts:10

    !!process.env.AZURE_OPENAI_API_KEY &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5560cd5072175cb — Environment-variable access.

repo/packages/components/nodes/chatmodels/AzureChatOpenAI/AzureChatOpenAI.ts:11

    !!process.env.AZURE_OPENAI_API_INSTANCE_NAME &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ddf4741665447338 — Environment-variable access.

repo/packages/components/nodes/chatmodels/AzureChatOpenAI/AzureChatOpenAI.ts:12

    !!process.env.AZURE_OPENAI_API_DEPLOYMENT_NAME &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef72cbeeb169220a — Environment-variable access.

repo/packages/components/nodes/chatmodels/AzureChatOpenAI/AzureChatOpenAI.ts:13

    !!process.env.AZURE_OPENAI_API_VERSION

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #bd21a772d79a12e1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/chatmodels/ChatNemoGuardrails/NemoClient.ts:66

        return await fetch(`${this.config.baseUrl}/v1/chat/completions`, requestOptions)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c27527259cd92b3c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/Airtable/Airtable.ts:318

            const response = await axios.post(url, data, { headers })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #9a44083ed407f09b — Environment-variable access.

repo/packages/components/nodes/documentloaders/Cheerio/Cheerio.ts:155

                    if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #157b1eba202bc643 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Cheerio/Cheerio.ts:177

                if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1750d23448be8922 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Cheerio/Cheerio.ts:186

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Start CheerioWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce02cda78d3a0a87 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Cheerio/Cheerio.ts:197

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e72072286ca642ff — Environment-variable access.

repo/packages/components/nodes/documentloaders/Cheerio/Cheerio.ts:203

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Finish CheerioWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13f493f95ae79b2c — Environment-variable access.

repo/packages/components/nodes/documentloaders/Cheerio/Cheerio.ts:205

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #03186f16f8fb887f — Filesystem access.

repo/packages/components/nodes/documentloaders/Epub/Epub.ts:7

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #49505a7684f76671 — Filesystem access.

repo/packages/components/nodes/documentloaders/Epub/Epub.ts:127

                    fs.writeFileSync(tempFilePath, fileData)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ea528977d9ba62b — Filesystem access.

repo/packages/components/nodes/documentloaders/Epub/Epub.ts:139

                    fs.writeFileSync(tempFilePath, fileBuffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aba8c946f4caf578 — Filesystem access.

repo/packages/components/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:15

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #9436758690920d23 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:227

                const url = new URL('https://www.googleapis.com/drive/v3/files')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ae6bfb5d8b406c3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:239

                const response = await fetch(url.toString(), {
                    headers: {
                        Authorization: `Bearer ${accessToken}`,
                        'Content-Type': 'application/json'
                    }
                })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #19ec7bd7f6c78db4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:412

        const response = await fetch(url.toString(), {
            headers: {
                Authorization: `Bearer ${accessToken}`,
                'Content-Type': 'application/json'
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ada8bd7e05533f72 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:454

            const url = new URL('https://www.googleapis.com/drive/v3/files')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f61ad77803e2cb5d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:472

            const response = await fetch(url.toString(), {
                headers: {
                    Authorization: `Bearer ${accessToken}`,
                    'Content-Type': 'application/json'
                }
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #3270015b9ade7e44 — Filesystem access.

repo/packages/components/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:702

        fs.writeFileSync(tempFilePath, buffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #a11a11da7b1a1263 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:709

        const response = await fetch(url, {
            headers: {
                Authorization: `Bearer ${accessToken}`
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #531d7c8da4ae3c63 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:726

        const response = await fetch(url, {
            headers: {
                Authorization: `Bearer ${accessToken}`
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b0bbf7dd38669e9c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:808

        const response = await fetch(url, {
            headers: {
                Authorization: `Bearer ${accessToken}`
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ac552e243409198f — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleSheets/GoogleSheets.ts:155

                const url = new URL('https://www.googleapis.com/drive/v3/files')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #40dfff48385d9b7f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleSheets/GoogleSheets.ts:161

                const response = await fetch(url.toString(), {
                    headers: {
                        Authorization: `Bearer ${accessToken}`,
                        'Content-Type': 'application/json'
                    }
                })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a4333d9377600e56 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleSheets/GoogleSheets.ts:316

        const response = await fetch(url, {
            headers: {
                Authorization: `Bearer ${accessToken}`,
                'Content-Type': 'application/json'
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #83762718a5fe231e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/GoogleSheets/GoogleSheets.ts:339

        const response = await fetch(`${url}?${params}`, {
            headers: {
                Authorization: `Bearer ${accessToken}`,
                'Content-Type': 'application/json'
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #eb9850b87993bd3c — Environment-variable access.

repo/packages/components/nodes/documentloaders/Playwright/Playwright.ts:196

                const executablePath = process.env.PLAYWRIGHT_EXECUTABLE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b5953949d19f3de — Environment-variable access.

repo/packages/components/nodes/documentloaders/Playwright/Playwright.ts:263

                if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abd28c91927f8caf — Environment-variable access.

repo/packages/components/nodes/documentloaders/Playwright/Playwright.ts:270

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Start PlaywrightWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #580988b7b93e1c59 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Playwright/Playwright.ts:281

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da0faffe61ab4f87 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Playwright/Playwright.ts:290

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Finish PlaywrightWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a221dccb3c101f40 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Playwright/Playwright.ts:292

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46aec1eef9c5b931 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Puppeteer/Puppeteer.ts:187

                const executablePath = process.env.PUPPETEER_EXECUTABLE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77bcb1665287ef05 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Puppeteer/Puppeteer.ts:257

                if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5fbd43c299b41679 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Puppeteer/Puppeteer.ts:264

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Start PuppeteerWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #845d3894258b3486 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Puppeteer/Puppeteer.ts:275

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a8f9d6a84a31ff3 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Puppeteer/Puppeteer.ts:284

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Finish PuppeteerWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #201aa3c4df544e9d — Environment-variable access.

repo/packages/components/nodes/documentloaders/Puppeteer/Puppeteer.ts:286

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12d7ccc738b1979a — Filesystem access.

repo/packages/components/nodes/documentloaders/S3Directory/S3Directory.ts:217

                        fsDefault.writeFileSync(filePath, objectData)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2c9802bcf5982ff9 — Environment-variable access.

repo/packages/components/nodes/documentloaders/S3File/S3File.ts:130

                placeholder: process.env.UNSTRUCTURED_API_URL || 'http://localhost:8000/general/v0/general',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65c0c37cf0ce6e13 — Environment-variable access.

repo/packages/components/nodes/documentloaders/S3File/S3File.ts:131

                optional: !!process.env.UNSTRUCTURED_API_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e0dcd301d5b971f — Filesystem access.

repo/packages/components/nodes/documentloaders/S3File/S3File.ts:784

                    fsDefault.writeFileSync(filePath, objectData)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f214138b6fbe7e3a — Filesystem access.

repo/packages/components/nodes/documentloaders/S3File/S3File.ts:1020

        fsDefault.writeFileSync(tempFilePath, buffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aced55a6209b0c31 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:30

    private apiUrl = process.env.UNSTRUCTURED_API_URL || 'https://api.unstructuredapp.io/general/v0/general'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b5fed35f49b19fc — Environment-variable access.

repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:32

    private apiKey: string | undefined = process.env.UNSTRUCTURED_API_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #675d02fa808b2874 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/documentloaders/Unstructured/Unstructured.ts:132

        const response = await fetch(this.apiUrl, {
            method: 'POST',
            body: formData,
            headers
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #6e81b4f288f8d628 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Unstructured/UnstructuredFile.ts:57

                placeholder: process.env.UNSTRUCTURED_API_URL || 'http://localhost:8000/general/v0/general',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b3a8fb83c1d7de8 — Environment-variable access.

repo/packages/components/nodes/documentloaders/Unstructured/UnstructuredFile.ts:58

                optional: !!process.env.UNSTRUCTURED_API_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cd15834507699a64 — Environment-variable access.

repo/packages/components/nodes/embeddings/AzureOpenAIEmbedding/AzureOpenAIEmbedding.ts:6

    !!process.env.AZURE_OPENAI_API_KEY &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff5a5940651bd78f — Environment-variable access.

repo/packages/components/nodes/embeddings/AzureOpenAIEmbedding/AzureOpenAIEmbedding.ts:7

    !!process.env.AZURE_OPENAI_API_INSTANCE_NAME &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4bea6bb0fb0d98ee — Environment-variable access.

repo/packages/components/nodes/embeddings/AzureOpenAIEmbedding/AzureOpenAIEmbedding.ts:8

    (!!process.env.AZURE_OPENAI_API_EMBEDDINGS_DEPLOYMENT_NAME || !!process.env.AZURE_OPENAI_API_DEPLOYMENT_NAME) &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a89402a71b8710e3 — Environment-variable access.

repo/packages/components/nodes/embeddings/AzureOpenAIEmbedding/AzureOpenAIEmbedding.ts:9

    !!process.env.AZURE_OPENAI_API_VERSION

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6572129e69641354 — Environment-variable access.

repo/packages/components/nodes/llms/Azure OpenAI/AzureOpenAI.ts:9

    !!process.env.AZURE_OPENAI_API_KEY &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0f412826691317c — Environment-variable access.

repo/packages/components/nodes/llms/Azure OpenAI/AzureOpenAI.ts:10

    !!process.env.AZURE_OPENAI_API_INSTANCE_NAME &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2d2e9ae32549ea6 — Environment-variable access.

repo/packages/components/nodes/llms/Azure OpenAI/AzureOpenAI.ts:11

    !!process.env.AZURE_OPENAI_API_DEPLOYMENT_NAME &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #69310e1ded5e87a0 — Environment-variable access.

repo/packages/components/nodes/llms/Azure OpenAI/AzureOpenAI.ts:12

    !!process.env.AZURE_OPENAI_API_VERSION

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #73867e2227dbf3cf — Environment-variable access.

repo/packages/components/nodes/memory/AgentMemory/AgentMemory.ts:138

                : path.join(process.env.DATABASE_PATH ?? path.join(getUserHome(), '.flowise'), 'database.sqlite')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2135f773c27cc49 — Environment-variable access.

repo/packages/components/nodes/memory/AgentMemory/SQLiteAgentMemory/SQLiteAgentMemory.ts:72

        const database = validateSQLitePath(path.join(process.env.DATABASE_PATH ?? path.join(getUserHome(), '.flowise'), 'database.sqlite'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f342bf90064235e7 — Environment-variable access.

repo/packages/components/nodes/memory/RedisBackedChatMemory/RedisBackedChatMemory.ts:144

                          process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8036042c57149ded — Environment-variable access.

repo/packages/components/nodes/memory/RedisBackedChatMemory/RedisBackedChatMemory.ts:145

                              ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f93ad05f75726d64 — Environment-variable access.

repo/packages/components/nodes/memory/RedisBackedChatMemory/RedisBackedChatMemory.ts:151

                          process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7aceb94932087f1c — Environment-variable access.

repo/packages/components/nodes/memory/RedisBackedChatMemory/RedisBackedChatMemory.ts:152

                              ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97db1d9f5505cded — Environment-variable access.

repo/packages/components/nodes/multiagents/Worker/Worker.ts:235

            verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa7c37a1bae1e0c4 — Environment-variable access.

repo/packages/components/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts:10

const serverCredentialsExists = !!process.env.POSTGRES_RECORDMANAGER_USER && !!process.env.POSTGRES_RECORDMANAGER_PASSWORD

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #64f846dbd40d9a0e — Environment-variable access.

repo/packages/components/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts:139

        const user = getCredentialParam('user', credentialData, nodeData, process.env.POSTGRES_RECORDMANAGER_USER)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a084c897f40ec71 — Environment-variable access.

repo/packages/components/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts:140

        const password = getCredentialParam('password', credentialData, nodeData, process.env.POSTGRES_RECORDMANAGER_PASSWORD)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eb3b5cd999a5ef36 — Environment-variable access.

repo/packages/components/nodes/recordmanager/PostgresRecordManager/utils.ts:4

    return defaultChain(nodeData?.inputs?.host, process.env.POSTGRES_RECORDMANAGER_HOST)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #535145dd06ac6221 — Environment-variable access.

repo/packages/components/nodes/recordmanager/PostgresRecordManager/utils.ts:8

    return defaultChain(nodeData?.inputs?.database, process.env.POSTGRES_RECORDMANAGER_DATABASE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c40823109dc8d753 — Environment-variable access.

repo/packages/components/nodes/recordmanager/PostgresRecordManager/utils.ts:12

    return defaultChain(nodeData?.inputs?.port, process.env.POSTGRES_RECORDMANAGER_PORT, '5432')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb1d7563828dc77f — Environment-variable access.

repo/packages/components/nodes/recordmanager/PostgresRecordManager/utils.ts:16

    return defaultChain(nodeData?.inputs?.ssl, process.env.POSTGRES_RECORDMANAGER_SSL, false)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b63635ce5a961ce0 — Environment-variable access.

repo/packages/components/nodes/recordmanager/PostgresRecordManager/utils.ts:20

    return defaultChain(nodeData?.inputs?.tableName, process.env.POSTGRES_RECORDMANAGER_TABLE_NAME, 'upsertion_records')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32d84d962efe5ef6 — Environment-variable access.

repo/packages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts:124

        const database = validateSQLitePath(path.join(process.env.DATABASE_PATH ?? path.join(getUserHome(), '.flowise'), 'database.sqlite'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #9762d00b88a7dfb4 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/components/nodes/retrievers/CohereRerankRetriever/CohereRerank.ts:44

            let returnedDocs = await axios.post(this.COHERE_API_URL, data, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2111cc84168295f3 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/components/nodes/retrievers/JinaRerankRetriever/JinaRerank.ts:39

            let returnedDocs = await axios.post(this.JINA_RERANK_API_URL, data, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #8d2407e7736430ef — Environment-variable access.

repo/packages/components/nodes/retrievers/MultiQueryRetriever/MultiQueryRetriever.ts:75

            verbose: process.env.DEBUG === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #445ce0bada7ee4e3 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/components/nodes/retrievers/VoyageAIRetriever/VoyageAIRerank.ts:40

            let returnedDocs = await axios.post(this.VOYAGEAI_RERANK_API_URL, data, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #66fea2313496384e — Environment-variable access.

repo/packages/components/nodes/sequentialagents/Agent/Agent.ts:690

            verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dccba82202d7dd34 — Environment-variable access.

repo/packages/components/nodes/tools/Arxiv/Arxiv.ts:119

        if (process.env.DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #d5b07509c2dea8af — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/Arxiv/core.ts:157

        const response = await fetch(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9d1aadf20a0d378b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/Arxiv/core.ts:173

        const response = await fetch(pdfUrl)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7b05668cbc011480 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/Gmail/core.ts:86

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b5eb4898bc173974 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/GoogleCalendar/core.ts:160

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #805c5e419f1781ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/GoogleDocs/core.ts:118

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ba59105fc010afa2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/GoogleDocs/core.ts:153

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #932b3f51829560be — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/GoogleDrive/core.ts:150

        const response = await fetch(url, {
            method,
            headers,
            body: body ? (typeof body === 'string' ? body : JSON.stringify(body)) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2b5a6230b99db48b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/GoogleDrive/core.ts:341

        const response = await fetch(url, {
            method: 'POST',
            headers,
            body: params.content
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #70691e772475d129 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/GoogleDrive/core.ts:386

            const response = await fetch(url, {
                method: 'POST',
                headers,
                body: body
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #cd47b250325a537d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/GoogleSheets/core.ts:147

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #8938023650831e1a — Environment-variable access.

repo/packages/components/nodes/tools/MCP/CustomMCP/CustomMCP.ts:77

                    process.env.CUSTOM_MCP_PROTOCOL === 'sse'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #277d53b586e5ef2e — Environment-variable access.

repo/packages/components/nodes/tools/MCP/CustomMCP/CustomMCP.ts:176

            if (process.env.CUSTOM_MCP_SECURITY_CHECK !== 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #073ffdbaf0d72ea0 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/CustomMCP/CustomMCP.ts:186

            if (process.env.CUSTOM_MCP_PROTOCOL === 'stdio' && serverParams!.command) toolkit = new MCPToolkit(serverParams, 'stdio')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #9039b1e24062a868 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/MCP/Pipedream/PipedreamMCP.ts:51

                const res = await client.request(req, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #06ba7f531d2df773 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/components/nodes/tools/MCP/Pipedream/PipedreamMCP.ts:212

            const response = await axios.post('https://api.pipedream.com/v1/oauth/token', body, {
                headers: {
                    'Content-Type': 'application/json'
                }
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #27246c5b6ecde0e7 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/Supergateway/SupergatewayMCP.ts:109

        if (process.env.CUSTOM_MCP_SECURITY_CHECK !== 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #82c165a8f9d93b0c — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:366

        const ORIGINAL_ENV = process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aecdecbf9aa15467 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:370

                delete process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #56d2f31257bc6b2f — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:372

                process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS = ORIGINAL_ENV

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5f46fc9b2ac95936 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:377

            delete process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f2c2359ed804ef18 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:385

            process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS = '/usr/local/lib/server.js'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf9783c3fabdc836 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:393

            process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS = '/usr/local/lib/server.js'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ef736d9912665854 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:402

        const originalAllowList = process.env.CUSTOM_MCP_ALLOWED_ENV_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bb6e67a452a8fbf7 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:406

                delete process.env.CUSTOM_MCP_ALLOWED_ENV_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8cf0bf66da0a9910 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:408

                process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = originalAllowList

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b6b6782013f20df9 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:413

            delete process.env.CUSTOM_MCP_ALLOWED_ENV_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0d4416495e9f94bf — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:421

            process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = 'API_KEY'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2032e44e5a43fc39 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:433

            process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = 'CUSTOM_VAR'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #410e536c73bddda4 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:441

            process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = 'CUSTOM_VAR,API_KEY'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e6856495c7528961 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:450

        const originalAllowedCommands = process.env.CUSTOM_MCP_ALLOWED_COMMANDS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6e204b658072c6e9 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:451

        const originalAllowedScriptPaths = process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d127cc34e4cf2701 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:456

            process.env.CUSTOM_MCP_ALLOWED_COMMANDS = 'node,npx,python,python3,docker'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #daa5b3a3f65cb3dd — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:458

            process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #07d9f4fd5d4cbd38 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:464

                delete process.env.CUSTOM_MCP_ALLOWED_COMMANDS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e651e4b496477097 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:466

                process.env.CUSTOM_MCP_ALLOWED_COMMANDS = originalAllowedCommands

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #43b40018900cea67 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:470

                delete process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b8d05ff4ae5ba391 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:472

                process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS = originalAllowedScriptPaths

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f17dd28c063ae7a2 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:523

            const original = process.env.CUSTOM_MCP_ALLOWED_ENV_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d9cefbf4f6be437b — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:524

            process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = 'API_TOKEN'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2f256b3bcc591824 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:536

                    delete process.env.CUSTOM_MCP_ALLOWED_ENV_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #132d0b2462b98ed0 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:538

                    process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = original

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #59386f6cddf0585c — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:564

                delete process.env.CUSTOM_MCP_ALLOWED_COMMANDS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c81c5f53f6b99722 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:575

                process.env.CUSTOM_MCP_ALLOWED_COMMANDS = 'python3'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #482e1ce29bb773f1 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:586

                process.env.CUSTOM_MCP_ALLOWED_COMMANDS = 'npx,docker'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #457e06a34f38a663 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.test.ts:597

                process.env.CUSTOM_MCP_ALLOWED_COMMANDS = ' node , npx '

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b42079240840d888 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.ts:48

                    PATH: process.env.PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #05ca8a00e86e9309 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/MCP/core.ts:110

            this._tools = await this.client.request({ method: 'tools/list' }, ListToolsResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #76fa01c55ccc5a47 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/MCP/core.ts:164

                const res = await client.request(req, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #12980a1bd3cc7450 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.ts:182

    const allowedScriptPaths = (process.env.CUSTOM_MCP_ALLOWED_ABSOLUTE_SCRIPT_PATHS ?? '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd60e79703cb5992 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.ts:226

        (process.env.CUSTOM_MCP_ALLOWED_ENV_VARS ?? '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a3de35f0bdbb2e53 — Environment-variable access.

repo/packages/components/nodes/tools/MCP/core.ts:358

    const allowedCommands = (process.env.CUSTOM_MCP_ALLOWED_COMMANDS ?? '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #e85293b185d92345 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/MicrosoftOutlook/core.ts:150

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b1a7e57a1225fb9f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/tools/MicrosoftTeams/core.ts:37

        const response = await fetch(`${BASE_URL}${endpoint}`, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4ece241967d04d5f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/nodes/vectorstores/Meilisearch/Meilisearch.ts:245

            const response = await fetch(experimentalEndpoint, experimentalOptions)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #2e372d9daa5741ad — Environment-variable access.

repo/packages/components/nodes/vectorstores/Pinecone/Pinecone_LlamaIndex.ts:238

        this.chunkSize = params?.chunkSize ?? Number.parseInt(process.env.PINECONE_CHUNK_SIZE ?? '100')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c36854c2abd35de4 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Postgres/Postgres.ts:13

const serverCredentialsExists = !!process.env.POSTGRES_VECTORSTORE_USER && !!process.env.POSTGRES_VECTORSTORE_PASSWORD

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33a7454ad9701356 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Postgres/driver/Base.ts:68

        const user = getCredentialParam('user', credentialData, this.nodeData, process.env.POSTGRES_VECTORSTORE_USER)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ed0049f71835ce71 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Postgres/driver/Base.ts:69

        const password = getCredentialParam('password', credentialData, this.nodeData, process.env.POSTGRES_VECTORSTORE_PASSWORD)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1245edb2d1bf6216 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Postgres/utils.ts:4

    return defaultChain(nodeData?.inputs?.host, process.env.POSTGRES_VECTORSTORE_HOST)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6d6d4a11faa649f — Environment-variable access.

repo/packages/components/nodes/vectorstores/Postgres/utils.ts:8

    return defaultChain(nodeData?.inputs?.database, process.env.POSTGRES_VECTORSTORE_DATABASE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48488653d596b4f7 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Postgres/utils.ts:12

    return defaultChain(nodeData?.inputs?.port, process.env.POSTGRES_VECTORSTORE_PORT, '5432')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7cbf56a09ba85ef3 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Postgres/utils.ts:16

    return defaultChain(nodeData?.inputs?.ssl, process.env.POSTGRES_VECTORSTORE_SSL, false)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b00f5a3ef2645ece — Environment-variable access.

repo/packages/components/nodes/vectorstores/Postgres/utils.ts:20

    return defaultChain(nodeData?.inputs?.tableName, process.env.POSTGRES_VECTORSTORE_TABLE_NAME, 'documents')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9237088bdadec9f7 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Postgres/utils.ts:24

    return defaultChain(nodeData?.inputs?.contentColumnName, process.env.POSTGRES_VECTORSTORE_CONTENT_COLUMN_NAME, 'pageContent')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e42f4ddb8a33feaa — Environment-variable access.

repo/packages/components/nodes/vectorstores/Postgres/utils.ts:28

    return defaultChain(nodeData?.inputs?.schemaName, process.env.POSTGRES_VECTORSTORE_SCHEMA_NAME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22c3d5c9078f3c0c — Environment-variable access.

repo/packages/components/nodes/vectorstores/Redis/Redis.ts:154

                            process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21fefec3375afce8 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Redis/Redis.ts:155

                                ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #41d9aa7be4bfb46e — Environment-variable access.

repo/packages/components/nodes/vectorstores/Redis/Redis.ts:159

                        process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea45548ba1406fbe — Environment-variable access.

repo/packages/components/nodes/vectorstores/Redis/Redis.ts:160

                            ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3e9989c289430cf6 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Redis/Redis.ts:172

                    if (process.env.DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #13193f3c65eb2768 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Redis/Redis.ts:231

                    process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36ec592f4ef58072 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Redis/Redis.ts:232

                        ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4799ce7042a055ce — Environment-variable access.

repo/packages/components/nodes/vectorstores/Redis/Redis.ts:236

                process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e0b4ab0eefe12ea8 — Environment-variable access.

repo/packages/components/nodes/vectorstores/Redis/Redis.ts:237

                    ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eb5a3355681848ce — Environment-variable access.

repo/packages/components/src/handler.test.ts:388

        for (const k of LANGSMITH_KEYS) envSnapshot[k] = process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b0bd3330289d1923 — Environment-variable access.

repo/packages/components/src/handler.test.ts:389

        for (const k of LANGSMITH_KEYS) delete process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0592974bfb3af4b7 — Environment-variable access.

repo/packages/components/src/handler.test.ts:390

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eb0fcf8dedf56637 — Environment-variable access.

repo/packages/components/src/handler.test.ts:391

        process.env.LANGSMITH_API_KEY = 'test-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0d2c0b5faabe72b4 — Environment-variable access.

repo/packages/components/src/handler.test.ts:397

        for (const k of LANGSMITH_KEYS) delete process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1bd39d5fd7f46492 — Environment-variable access.

repo/packages/components/src/handler.test.ts:400

            if (v !== undefined) process.env[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b796e2ec12dfe3a — Environment-variable access.

repo/packages/components/src/handler.ts:81

        if (process.env.DEBUG === 'true') console.error(`Error setting up Arize tracer: ${err.message}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #656c005a1763b7fe — Environment-variable access.

repo/packages/components/src/handler.ts:135

        if (process.env.DEBUG === 'true') console.error(`Error setting up Phoenix tracer: ${err.message}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #215d1d9c90f38cc7 — Environment-variable access.

repo/packages/components/src/handler.ts:179

        if (process.env.DEBUG === 'true') console.error(`Error setting up Opik tracer: ${err.message}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4520e85a1d5ebc71 — Environment-variable access.

repo/packages/components/src/httpSecurity.ts:36

    const securityCheckEnabled = process.env.HTTP_SECURITY_CHECK !== 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c7d2debfed9e74d — Environment-variable access.

repo/packages/components/src/httpSecurity.ts:37

    const httpDenyListString = process.env.HTTP_DENY_LIST

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #a32c15ace7314d3f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/src/httpSecurity.ts:249

        const response = await fetch(currentUrl, { ...currentInit, agent: () => agent })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #025cc6dfbb9a3fbf — Filesystem access.

repo/packages/components/src/modelLoader.ts:2

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #71e23add433e4cee — Environment-variable access.

repo/packages/components/src/modelLoader.ts:38

        process.env.MODEL_LIST_CONFIG_JSON ?? 'https://raw.githubusercontent.com/FlowiseAI/Flowise/main/packages/components/models.json'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #b1b475a97de7f8f3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/src/modelLoader.ts:41

            const resp = await axios.get(modelFile)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #03725aa31a8790a7 — Filesystem access.

repo/packages/components/src/modelLoader.ts:48

            const models = await fs.promises.readFile(modelFile, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #777c4e0b6bf8b171 — Filesystem access.

repo/packages/components/src/modelLoader.ts:55

        const models = await fs.promises.readFile(getModelsJSONPath(), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #08d49efad3db1716 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/src/speechToText.ts:96

                    const response = await axios.post(`${baseUrl}?api-version=${apiVersion}`, formData, {
                        headers: {
                            'Ocp-Apim-Subscription-Key': credentialData.azureSubscriptionKey,
                            Accept: 'application/json'
                        }
                    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #59adb12eeea99e08 — Environment-variable access.

repo/packages/components/src/storage/AzureBlobStorageProvider.ts:40

        const connectionString = process.env.AZURE_BLOB_STORAGE_CONNECTION_STRING

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3afae2217033b37f — Environment-variable access.

repo/packages/components/src/storage/AzureBlobStorageProvider.ts:41

        const accountName = process.env.AZURE_BLOB_STORAGE_ACCOUNT_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a8ae844b14720c5 — Environment-variable access.

repo/packages/components/src/storage/AzureBlobStorageProvider.ts:42

        const accountKey = process.env.AZURE_BLOB_STORAGE_ACCOUNT_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5067b336d6bd25d2 — Environment-variable access.

repo/packages/components/src/storage/AzureBlobStorageProvider.ts:43

        const containerName = process.env.AZURE_BLOB_STORAGE_CONTAINER_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b851894e5e0d7b9 — Environment-variable access.

repo/packages/components/src/storage/AzureBlobStorageProvider.ts:265

        const connectionString = process.env.AZURE_BLOB_STORAGE_CONNECTION_STRING

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a866fa98733e8583 — Environment-variable access.

repo/packages/components/src/storage/AzureBlobStorageProvider.ts:276

            storageConfig.accountName = process.env.AZURE_BLOB_STORAGE_ACCOUNT_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ddee1dcb8cee0f7 — Environment-variable access.

repo/packages/components/src/storage/AzureBlobStorageProvider.ts:277

            storageConfig.accessKey = process.env.AZURE_BLOB_STORAGE_ACCOUNT_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f16f1c57285c75a — Environment-variable access.

repo/packages/components/src/storage/AzureBlobStorageProvider.ts:285

        const connectionString = process.env.AZURE_BLOB_STORAGE_CONNECTION_STRING

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3af2b8643055cc3b — Environment-variable access.

repo/packages/components/src/storage/AzureBlobStorageProvider.ts:286

        const accountName = process.env.AZURE_BLOB_STORAGE_ACCOUNT_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fe24437a1880713d — Environment-variable access.

repo/packages/components/src/storage/AzureBlobStorageProvider.ts:287

        const accountKey = process.env.AZURE_BLOB_STORAGE_ACCOUNT_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b179b8d3344aaee — Environment-variable access.

repo/packages/components/src/storage/BaseStorageProvider.ts:63

        const storagePath = process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8d84f14712d1129 — Environment-variable access.

repo/packages/components/src/storage/BaseStorageProvider.ts:64

            ? path.join(process.env.BLOB_STORAGE_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #265c317f9443a0ba — Environment-variable access.

repo/packages/components/src/storage/GCSStorageProvider.ts:32

        const keyFilename = process.env.GOOGLE_CLOUD_STORAGE_CREDENTIAL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3c15d4d5ed626e46 — Environment-variable access.

repo/packages/components/src/storage/GCSStorageProvider.ts:33

        const projectId = process.env.GOOGLE_CLOUD_STORAGE_PROJ_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #163cf7b9f4c11ddb — Environment-variable access.

repo/packages/components/src/storage/GCSStorageProvider.ts:34

        const bucketName = process.env.GOOGLE_CLOUD_STORAGE_BUCKET_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #67b006247cd06f5b — Environment-variable access.

repo/packages/components/src/storage/GCSStorageProvider.ts:333

                uniformBucketLevelAccess: Boolean(process.env.GOOGLE_CLOUD_UNIFORM_BUCKET_ACCESS) ?? true,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fe0a9c7e2934504 — Filesystem access.

repo/packages/components/src/storage/LocalStorageProvider.ts:1

import fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e15c51a4cad9677f — Filesystem access.

repo/packages/components/src/storage/LocalStorageProvider.ts:40

        fs.writeFileSync(filePath, bf)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #abdacf7d3302f7a7 — Filesystem access.

repo/packages/components/src/storage/LocalStorageProvider.ts:60

        fs.writeFileSync(filePath, bf)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #527116424393e830 — Filesystem access.

repo/packages/components/src/storage/LocalStorageProvider.ts:74

        fs.writeFileSync(filePath, bf)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eb7089d03b097440 — Filesystem access.

repo/packages/components/src/storage/LocalStorageProvider.ts:81

        return fs.readFileSync(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4048daa9f15c7656 — Filesystem access.

repo/packages/components/src/storage/LocalStorageProvider.ts:88

            return fs.readFileSync(fileInStorage)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bdc0f9a2a3ca800e — Filesystem access.

repo/packages/components/src/storage/LocalStorageProvider.ts:114

                    return fs.readFileSync(targetPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30e4060f2dc87dc3 — Environment-variable access.

repo/packages/components/src/storage/LocalStorageProvider.ts:344

        return process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #433e559a0c8714a8 — Environment-variable access.

repo/packages/components/src/storage/LocalStorageProvider.ts:345

            ? path.join(process.env.BLOB_STORAGE_PATH, 'uploads')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd0593aaf13d2c88 — Environment-variable access.

repo/packages/components/src/storage/LocalStorageProvider.ts:350

        return process.env.HOME || process.env.USERPROFILE || process.env.HOMEPATH || ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2043d6d77fb24f7d — Environment-variable access.

repo/packages/components/src/storage/S3StorageProvider.ts:34

        const accessKeyId = process.env.S3_STORAGE_ACCESS_KEY_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eec56b3d50ce3f9b — Environment-variable access.

repo/packages/components/src/storage/S3StorageProvider.ts:35

        const secretAccessKey = process.env.S3_STORAGE_SECRET_ACCESS_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2fc683e57a885e84 — Environment-variable access.

repo/packages/components/src/storage/S3StorageProvider.ts:36

        const region = process.env.S3_STORAGE_REGION

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72359a1c4d11706b — Environment-variable access.

repo/packages/components/src/storage/S3StorageProvider.ts:37

        const bucket = process.env.S3_STORAGE_BUCKET_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5033b362b4185260 — Environment-variable access.

repo/packages/components/src/storage/S3StorageProvider.ts:38

        const customURL = process.env.S3_ENDPOINT_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ca1f8329b2185699 — Environment-variable access.

repo/packages/components/src/storage/S3StorageProvider.ts:39

        const forcePathStyle = process.env.S3_FORCE_PATH_STYLE === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2665288db20df7d2 — Environment-variable access.

repo/packages/components/src/storage/S3StorageProvider.ts:65

            region: process.env.S3_STORAGE_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8bc38ebdea3ac092 — Environment-variable access.

repo/packages/components/src/storage/S3StorageProvider.ts:66

            endpoint: process.env.S3_ENDPOINT_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d7647f6f5e747b4 — Environment-variable access.

repo/packages/components/src/storage/S3StorageProvider.ts:528

            const instance = process.env.HOSTNAME || process.env.POD_NAME || String(process.pid)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fc715c75a6d25d54 — Environment-variable access.

repo/packages/components/src/storage/StorageProviderFactory.ts:20

            const storageType = process.env.STORAGE_TYPE || 'local'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #843075528fa005b4 — Filesystem access.

repo/packages/components/src/storageUtils.ts:1

import fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #995ea0bc061c0e36 — Environment-variable access.

repo/packages/components/src/storageUtils.ts:51

    const storagePath = process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9133bb038caac999 — Environment-variable access.

repo/packages/components/src/storageUtils.ts:52

        ? path.join(process.env.BLOB_STORAGE_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f82c69cd13501d1e — Environment-variable access.

repo/packages/components/src/storageUtils.ts:64

    return process.env.STORAGE_TYPE ? process.env.STORAGE_TYPE : 'local'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #87e3af948266fd0c — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:21

    for (const k of ENV_KEYS) delete process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d4bd93c0a3677017 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:28

    for (const k of ENV_KEYS) envSnapshot[k] = process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #de22472766c839ef — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:37

        if (v !== undefined) process.env[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #640026ea270ea146 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:48

        process.env.LANGSMITH_TRACING = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b375faf68c22b9f5 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:49

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #951514c57e1ac62c — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:52

        process.env.LANGSMITH_TRACING = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #03f3cf4e92b85a56 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:55

        process.env.LANGSMITH_TRACING = 'TRUE'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f673dc534fbd2b7e — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:60

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ac989934a950b908 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:65

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #57ed0d670fb3ff53 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:66

        process.env.LANGSMITH_API_KEY = 'new-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b712c7e78d918d34 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:75

        process.env.LANGCHAIN_TRACING_V2 = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #44b8f3a868a4224f — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:76

        process.env.LANGCHAIN_API_KEY = 'legacy-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cab55737b539770e — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:77

        process.env.LANGCHAIN_ENDPOINT = 'https://legacy.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3c2a31052cdbf83a — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:78

        process.env.LANGCHAIN_PROJECT = 'legacy-proj'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #04ec034e1bf421ea — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:87

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4ab289a290986dfa — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:88

        process.env.LANGCHAIN_TRACING_V2 = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2cbf58de5da45309 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:89

        process.env.LANGSMITH_API_KEY = 'new-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d45120990028d596 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:90

        process.env.LANGCHAIN_API_KEY = 'legacy-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6dca9025d206ccc4 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:91

        process.env.LANGSMITH_ENDPOINT = 'https://new.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #910949ace0c88aa4 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:92

        process.env.LANGCHAIN_ENDPOINT = 'https://legacy.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ce0a37b26a56eb0e — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:93

        process.env.LANGSMITH_PROJECT = 'new-proj'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bc653e8acb545532 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:94

        process.env.LANGCHAIN_PROJECT = 'legacy-proj'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4783c0d5df01185f — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:103

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #99118eb2f2ffa789 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:104

        process.env.LANGCHAIN_API_KEY = 'legacy-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8b75975e7047eb44 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:113

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #447bea975783e8fe — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:114

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f7685b1494d04c70 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:115

        process.env.LANGSMITH_ENDPOINT = 'https://api.smith.langchain.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5cb3deec126e8d22 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:116

        process.env.LANGSMITH_PROJECT = 'my-proj'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b9cb14c1e254aae8 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:129

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #643f3cfb7368ef35 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:130

        process.env.LANGSMITH_API_KEY = 'k1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9d35e2c3de23663e — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:135

        process.env.LANGSMITH_API_KEY = 'k2'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8d8481c8145f828d — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:144

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6e9a5e3dbdf4fd60 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:145

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5e969359912ae909 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:152

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d975e9168beabe8f — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:153

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #88542af798a835f3 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:197

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a9b6fe1337fbc4e6 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:198

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7d23b28dbba3bed5 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:212

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e64cbbfd6d696307 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:213

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0f424898c7ba8a62 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:214

        process.env.LANGSMITH_ENDPOINT = 'https://e.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #92bf7f1197160935 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:215

        process.env.LANGSMITH_PROJECT = 'proj'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2cee500ba5da5f6a — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:233

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #692c985bcbc57fda — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:234

        process.env.LANGSMITH_API_KEY = 'env-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #213e89ab0471295f — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:245

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #98e8d1c927dca588 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:246

        process.env.LANGSMITH_API_KEY = 'env-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c5a5f74d91ed574a — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:259

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #460c1a3732d3bff7 — Environment-variable access.

repo/packages/components/src/tracingEnv.test.ts:260

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c16e85a3c09c5f2c — Environment-variable access.

repo/packages/components/src/tracingEnv.ts:71

    for (const k of LANGCHAIN_TRACING_FLAG_VARS) delete process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a7dff47f4a39454c — Environment-variable access.

repo/packages/components/src/utils.test.ts:245

        delete process.env.ALLOW_BUILTIN_DEP

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #95243b8ab8602c46 — Environment-variable access.

repo/packages/components/src/utils.test.ts:246

        delete process.env.TOOL_FUNCTION_EXTERNAL_DEP

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0aaa1a6b1f8d5d81 — Environment-variable access.

repo/packages/components/src/utils.test.ts:251

            process.env.ALLOW_BUILTIN_DEP = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #eb459ab095cbf4d3 — Environment-variable access.

repo/packages/components/src/utils.test.ts:278

        process.env.ALLOW_BUILTIN_DEP = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #65b82c7dc5cd2f49 — Environment-variable access.

repo/packages/components/src/utils.test.ts:284

        process.env.ALLOW_BUILTIN_DEP = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #52d051887effc383 — Environment-variable access.

repo/packages/components/src/utils.test.ts:285

        process.env.TOOL_FUNCTION_EXTERNAL_DEP = 'pg'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1206a01e10a244f — Filesystem access.

repo/packages/components/src/utils.ts:12

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e05890df8611510c — Environment-variable access.

repo/packages/components/src/utils.ts:32

const USE_AWS_SECRETS_MANAGER = process.env.SECRETKEY_STORAGE_TYPE === 'aws'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b53dfa00ca86fcdb — Environment-variable access.

repo/packages/components/src/utils.ts:34

    const region = process.env.SECRETKEY_AWS_REGION || 'us-east-1' // Default region if not provided

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33c60822279eb6bb — Environment-variable access.

repo/packages/components/src/utils.ts:35

    const accessKeyId = process.env.SECRETKEY_AWS_ACCESS_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ccfe64971603abb9 — Environment-variable access.

repo/packages/components/src/utils.ts:36

    const secretAccessKey = process.env.SECRETKEY_AWS_SECRET_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #9dee3a2d8eb68e75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/src/utils.ts:361

        const response = await axios.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #35a305678c0dc7da — Environment-variable access.

repo/packages/components/src/utils.ts:408

            if (process.env.DEBUG === 'true') console.error(`error with scraped URL: ${err.message}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87dc0b84c003a51a — Environment-variable access.

repo/packages/components/src/utils.ts:454

    if (process.env.DEBUG === 'true') console.info(`actively crawling ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #314eb9d57a555bb8 — Environment-variable access.

repo/packages/components/src/utils.ts:459

            if (process.env.DEBUG === 'true') console.error(`error in fetch with status code: ${resp.status}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c8a00eea1e547a5e — Environment-variable access.

repo/packages/components/src/utils.ts:465

            if (process.env.DEBUG === 'true') console.error(`non html response, content type: ${contentType}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f5504c4ad91b8ca — Environment-variable access.

repo/packages/components/src/utils.ts:475

        if (process.env.DEBUG === 'true') console.error(`error in fetch url: ${err.message}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e960bb7b0ac6214e — Environment-variable access.

repo/packages/components/src/utils.ts:510

    if (process.env.DEBUG === 'true') console.info(`actively scarping ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce874fec655c1319 — Environment-variable access.

repo/packages/components/src/utils.ts:515

            if (process.env.DEBUG === 'true') console.error(`error in fetch with status code: ${resp.status}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #92b58a0a3330f731 — Environment-variable access.

repo/packages/components/src/utils.ts:521

            if (process.env.DEBUG === 'true') console.error(`non xml response, content type: ${contentType}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33a510308fdaba7a — Environment-variable access.

repo/packages/components/src/utils.ts:528

        if (process.env.DEBUG === 'true') console.error(`error in fetch url: ${err.message}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01a690748877d8d6 — Environment-variable access.

repo/packages/components/src/utils.ts:540

        return typeof process !== 'undefined' ? process.env?.[name] : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b914caacaf94558e — Environment-variable access.

repo/packages/components/src/utils.ts:571

    return process.env.SECRETKEY_PATH ? path.join(process.env.SECRETKEY_PATH, 'encryption.key') : getEncryptionKeyFilePath()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #64754cbef3b7001f — Environment-variable access.

repo/packages/components/src/utils.ts:579

    if (process.env.FLOWISE_SECRETKEY_OVERWRITE !== undefined && process.env.FLOWISE_SECRETKEY_OVERWRITE !== '') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d5012f12da07995 — Environment-variable access.

repo/packages/components/src/utils.ts:580

        return process.env.FLOWISE_SECRETKEY_OVERWRITE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32fcb8da43eef940 — Environment-variable access.

repo/packages/components/src/utils.ts:584

            const secretId = process.env.SECRETKEY_AWS_NAME || 'FlowiseEncryptionKey'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8955f6970d11a619 — Filesystem access.

repo/packages/components/src/utils.ts:592

        return await fs.promises.readFile(getEncryptionKeyPath(), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #71a55b2dceef73a6 — Environment-variable access.

repo/packages/components/src/utils.ts:734

    if (process.env[variableName] === undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65ec4bea29474a53 — Environment-variable access.

repo/packages/components/src/utils.ts:738

    return process.env[variableName] as string

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44c435f3c9090a18 — Environment-variable access.

repo/packages/components/src/utils.ts:1021

                value = process.env[item.name] ?? ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bead459cffff9535 — Filesystem access.

repo/packages/components/src/utils.ts:1048

            const content = await fs.promises.readFile(checkPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #56ea1a1fd73a07ef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/components/src/utils.ts:1472

                const refreshResponse = await fetch(
                    `${options.baseURL || 'http://localhost:3000'}/api/v1/oauth2-credential/refresh/${credentialId}`,
                    {
                        method: 'POST',
                        headers: {
                            'Content-Type': 'application/json'
                        }
                    }
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #68bf5b9fe90b4810 — Environment-variable access.

repo/packages/components/src/utils.ts:1603

    const shouldUseE2BSandbox = useSandbox && process.env.E2B_APIKEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50777e740a65f05d — Environment-variable access.

repo/packages/components/src/utils.ts:1606

    if (process.env.SANDBOX_TIMEOUT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a821ab14f953140 — Environment-variable access.

repo/packages/components/src/utils.ts:1607

        timeoutMs = parseInt(process.env.SANDBOX_TIMEOUT, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd4fe7e65d398268 — Environment-variable access.

repo/packages/components/src/utils.ts:1665

            const sbx = await Sandbox.create({ apiKey: process.env.E2B_APIKEY, timeoutMs })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #612759a7837910b4 — Environment-variable access.

repo/packages/components/src/utils.ts:1729

        const builtinDeps = process.env.TOOL_FUNCTION_BUILTIN_DEP

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2437022891a6e346 — Environment-variable access.

repo/packages/components/src/utils.ts:1730

            ? defaultAllowBuiltInDep.concat(process.env.TOOL_FUNCTION_BUILTIN_DEP.split(','))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3ad129e0a45afd35 — Environment-variable access.

repo/packages/components/src/utils.ts:1732

        const externalDeps = process.env.TOOL_FUNCTION_EXTERNAL_DEP ? process.env.TOOL_FUNCTION_EXTERNAL_DEP.split(',') : []

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c4093720651f876 — Environment-variable access.

repo/packages/components/src/utils.ts:1733

        let deps = process.env.ALLOW_BUILTIN_DEP === 'true' ? availableDependencies.concat(externalDeps) : externalDeps

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #12153839c54e48e1 — Environment-variable access.

repo/packages/components/src/validator.test.ts:55

            process.env.PATH_TRAVERSAL_SAFETY = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be0f383c2f3a228b — Environment-variable access.

repo/packages/components/src/validator.test.ts:58

            delete process.env.PATH_TRAVERSAL_SAFETY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #96f805cae5f16c04 — Environment-variable access.

repo/packages/components/src/validator.test.ts:75

            process.env.PATH_TRAVERSAL_SAFETY = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #150ebea2ed21df51 — Environment-variable access.

repo/packages/components/src/validator.test.ts:78

            delete process.env.PATH_TRAVERSAL_SAFETY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bc8be1b0a3d2e315 — Environment-variable access.

repo/packages/components/src/validator.test.ts:365

            const originalEnv = process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #51556993c5b15aea — Environment-variable access.

repo/packages/components/src/validator.test.ts:366

            delete process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e128bd2809658e37 — Environment-variable access.

repo/packages/components/src/validator.test.ts:375

                    process.env.BLOB_STORAGE_PATH = originalEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #46a3a40dfca18022 — Environment-variable access.

repo/packages/components/src/validator.test.ts:396

        const originalEnv = process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aa6305688fedc6fb — Environment-variable access.

repo/packages/components/src/validator.test.ts:401

                process.env.BLOB_STORAGE_PATH = originalEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9a3ce35d0fa28d4a — Environment-variable access.

repo/packages/components/src/validator.test.ts:403

                delete process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #89d5ad63b04a0981 — Environment-variable access.

repo/packages/components/src/validator.test.ts:409

            process.env.BLOB_STORAGE_PATH = customStoragePath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d218b2b69287574a — Environment-variable access.

repo/packages/components/src/validator.test.ts:418

            process.env.BLOB_STORAGE_PATH = path.join(userHome, 'custom-storage')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #089d67b53caa9480 — Environment-variable access.

repo/packages/components/src/validator.test.ts:453

            process.env.PATH_TRAVERSAL_SAFETY = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a4e86f0f44946c6a — Environment-variable access.

repo/packages/components/src/validator.test.ts:456

            delete process.env.PATH_TRAVERSAL_SAFETY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fc8b7b9693710d3c — Environment-variable access.

repo/packages/components/src/validator.test.ts:591

        const originalDatabasePath = process.env.DATABASE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #47b419897cc561df — Environment-variable access.

repo/packages/components/src/validator.test.ts:595

                delete process.env.DATABASE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1ef3c6fdf17a2522 — Environment-variable access.

repo/packages/components/src/validator.test.ts:597

                process.env.DATABASE_PATH = originalDatabasePath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #60a921a81ed2be85 — Environment-variable access.

repo/packages/components/src/validator.test.ts:603

            process.env.DATABASE_PATH = customBase

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf52c7bb48a44650 — Environment-variable access.

repo/packages/components/src/validator.test.ts:609

            process.env.DATABASE_PATH = path.join(userHome, 'custom-flowise-data')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a602d3413b56898a — Environment-variable access.

repo/packages/components/src/validator.test.ts:616

            process.env.PATH_TRAVERSAL_SAFETY = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f50589ffe566e434 — Environment-variable access.

repo/packages/components/src/validator.test.ts:619

            delete process.env.PATH_TRAVERSAL_SAFETY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #23b3a8815aca5c78 — Environment-variable access.

repo/packages/components/src/validator.test.ts:788

            process.env.PATH_TRAVERSAL_SAFETY = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #31b94f359a2e47dc — Environment-variable access.

repo/packages/components/src/validator.test.ts:791

            delete process.env.PATH_TRAVERSAL_SAFETY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32fb414e548507a2 — Environment-variable access.

repo/packages/components/src/validator.ts:41

    if (process.env.PATH_TRAVERSAL_SAFETY === 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fe3238c64dfdf1cb — Environment-variable access.

repo/packages/components/src/validator.ts:70

    if (process.env.PATH_TRAVERSAL_SAFETY === 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ebdfce391687476 — Environment-variable access.

repo/packages/components/src/validator.ts:195

    if (process.env.BLOB_STORAGE_PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06356db70cc34766 — Environment-variable access.

repo/packages/components/src/validator.ts:196

        allowedDirs.push(path.resolve(process.env.BLOB_STORAGE_PATH))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac8fa15479cc9256 — Environment-variable access.

repo/packages/components/src/validator.ts:213

    if (process.env.PATH_TRAVERSAL_SAFETY === 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f82e6313808bd9f — Environment-variable access.

repo/packages/components/src/validator.ts:290

    if (process.env.DATABASE_PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0bc4d6002052f9de — Environment-variable access.

repo/packages/components/src/validator.ts:291

        dirs.push(path.resolve(process.env.DATABASE_PATH))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ee3dbb9929bbe31 — Environment-variable access.

repo/packages/components/src/validator.ts:324

    if (process.env.PATH_TRAVERSAL_SAFETY === 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d87c0b92aa460980 — Environment-variable access.

repo/packages/components/src/validator.ts:423

    if (process.env.PATH_TRAVERSAL_SAFETY === 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/server

npm first-party

medium telemetry test-only Excluded from app score #e42f6d7e29714961 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/server/src/utils/telemetry.test.ts:36

const posthogNode = require('posthog-node')

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #9d6adc16fd6d25cf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/packages/server/src/utils/telemetry.ts:2

import { PostHog } from 'posthog-node'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 470 low-confidence finding(s)

low env_fs production #1e2c91dd77df7d92 — Environment-variable access.

repo/packages/server/bin/dev:9

process.env.NODE_ENV = 'development'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cfb1d5b33a330419 — Environment-variable access.

repo/packages/server/src/AppConfig.ts:2

    showCommunityNodes: process.env.SHOW_COMMUNITY_NODES ? process.env.SHOW_COMMUNITY_NODES.toLowerCase() === 'true' : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a957103fc977a2c — Environment-variable access.

repo/packages/server/src/CachePool.ts:15

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #051077d6336bb27d — Environment-variable access.

repo/packages/server/src/CachePool.ts:16

            if (process.env.REDIS_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #42c2eb6b0141d723 — Environment-variable access.

repo/packages/server/src/CachePool.ts:17

                this.redisClient = new Redis(process.env.REDIS_URL, {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c69938b5076abd11 — Environment-variable access.

repo/packages/server/src/CachePool.ts:19

                        process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4516794901db24f7 — Environment-variable access.

repo/packages/server/src/CachePool.ts:20

                            ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bc97c2ad6b53df30 — Environment-variable access.

repo/packages/server/src/CachePool.ts:25

                    host: process.env.REDIS_HOST || 'localhost',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #917b9203af0c74df — Environment-variable access.

repo/packages/server/src/CachePool.ts:26

                    port: parseInt(process.env.REDIS_PORT || '6379'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6449412854a6958d — Environment-variable access.

repo/packages/server/src/CachePool.ts:27

                    username: process.env.REDIS_USERNAME || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1923c1db1145d1ac — Environment-variable access.

repo/packages/server/src/CachePool.ts:28

                    password: process.env.REDIS_PASSWORD || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7226567c1dcd3339 — Environment-variable access.

repo/packages/server/src/CachePool.ts:30

                        process.env.REDIS_TLS === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18774af063b13f80 — Environment-variable access.

repo/packages/server/src/CachePool.ts:32

                                  cert: process.env.REDIS_CERT ? Buffer.from(process.env.REDIS_CERT, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e92091fdf47fbacb — Environment-variable access.

repo/packages/server/src/CachePool.ts:33

                                  key: process.env.REDIS_KEY ? Buffer.from(process.env.REDIS_KEY, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8085f4d1a7cecef8 — Environment-variable access.

repo/packages/server/src/CachePool.ts:34

                                  ca: process.env.REDIS_CA ? Buffer.from(process.env.REDIS_CA, 'base64') : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90651fe5540f65dc — Environment-variable access.

repo/packages/server/src/CachePool.ts:38

                        process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eaa2eecce98a5ea1 — Environment-variable access.

repo/packages/server/src/CachePool.ts:39

                            ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6205a0318a35cea3 — Environment-variable access.

repo/packages/server/src/CachePool.ts:52

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f615f3f90273d75 — Environment-variable access.

repo/packages/server/src/CachePool.ts:63

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #040625daf02dceec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/server/src/CachePool.ts:65

                const serializedValue = await this.redisClient.get(`ssoTokenCache:${ssoToken}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #3a270218a47f28a7 — Environment-variable access.

repo/packages/server/src/CachePool.ts:77

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8885a6d2b4ca3b01 — Environment-variable access.

repo/packages/server/src/CachePool.ts:92

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #68bd9b3b87ece243 — Environment-variable access.

repo/packages/server/src/CachePool.ts:108

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7b99387dcb8e2a4 — Environment-variable access.

repo/packages/server/src/CachePool.ts:125

        if (process.env.MODE !== MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62c5b943151fb5e7 — Environment-variable access.

repo/packages/server/src/CachePool.ts:135

        if (process.env.MODE !== MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a663aecb122abb53 — Environment-variable access.

repo/packages/server/src/CachePool.ts:146

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #60fa2d5d3d32f664 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/server/src/CachePool.ts:148

                const serializedValue = await this.redisClient.get(`llmCache:${chatflowid}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #d3cccab9fa938430 — Environment-variable access.

repo/packages/server/src/CachePool.ts:164

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #c6aba5091e2d811d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/server/src/CachePool.ts:166

                const serializedValue = await this.redisClient.get(`embeddingCache:${chatflowid}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #bf9c4136a7a14101 — Filesystem access.

repo/packages/server/src/DataSource.ts:3

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ef0f03e99a60e7a0 — Environment-variable access.

repo/packages/server/src/DataSource.ts:21

    switch (process.env.DATABASE_TYPE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d41bb12cca526ff — Environment-variable access.

repo/packages/server/src/DataSource.ts:23

            homePath = process.env.DATABASE_PATH ?? flowisePath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3182b09b57ab973a — Environment-variable access.

repo/packages/server/src/DataSource.ts:36

                host: process.env.DATABASE_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55c07d9940cf7303 — Environment-variable access.

repo/packages/server/src/DataSource.ts:37

                port: parseInt(process.env.DATABASE_PORT || '3306'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d126d9bca3b91adb — Environment-variable access.

repo/packages/server/src/DataSource.ts:38

                username: process.env.DATABASE_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #78025f4269ad8070 — Environment-variable access.

repo/packages/server/src/DataSource.ts:39

                password: process.env.DATABASE_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #52f58c2cb48c87c7 — Environment-variable access.

repo/packages/server/src/DataSource.ts:40

                database: process.env.DATABASE_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #388996fce0c16695 — Environment-variable access.

repo/packages/server/src/DataSource.ts:52

                host: process.env.DATABASE_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b6e0a884802b365 — Environment-variable access.

repo/packages/server/src/DataSource.ts:53

                port: parseInt(process.env.DATABASE_PORT || '3306'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #373b6a59484bb1fc — Environment-variable access.

repo/packages/server/src/DataSource.ts:54

                username: process.env.DATABASE_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1ff907e8eb2afe9a — Environment-variable access.

repo/packages/server/src/DataSource.ts:55

                password: process.env.DATABASE_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1cbe535849fa793d — Environment-variable access.

repo/packages/server/src/DataSource.ts:56

                database: process.env.DATABASE_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8034730dc9672ed7 — Environment-variable access.

repo/packages/server/src/DataSource.ts:68

                host: process.env.DATABASE_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05abba91ac025fe0 — Environment-variable access.

repo/packages/server/src/DataSource.ts:69

                port: parseInt(process.env.DATABASE_PORT || '5432'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6ad9cd5fd23c57e2 — Environment-variable access.

repo/packages/server/src/DataSource.ts:70

                username: process.env.DATABASE_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6edc5c8b45a0bc12 — Environment-variable access.

repo/packages/server/src/DataSource.ts:71

                password: process.env.DATABASE_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d8a477c916cd7fef — Environment-variable access.

repo/packages/server/src/DataSource.ts:72

                database: process.env.DATABASE_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8addf871375cbd5b — Environment-variable access.

repo/packages/server/src/DataSource.ts:91

            homePath = process.env.DATABASE_PATH ?? flowisePath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #593211a4c8f6b19c — Environment-variable access.

repo/packages/server/src/DataSource.ts:112

    if (process.env.DATABASE_SSL_KEY_BASE64) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #48e3b7061c55b658 — Environment-variable access.

repo/packages/server/src/DataSource.ts:114

            rejectUnauthorized: process.env.DATABASE_REJECT_UNAUTHORIZED === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6f19aa36cac5b39 — Environment-variable access.

repo/packages/server/src/DataSource.ts:115

            ca: Buffer.from(process.env.DATABASE_SSL_KEY_BASE64, 'base64')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f2ebd847956bb95 — Environment-variable access.

repo/packages/server/src/DataSource.ts:117

    } else if (process.env.DATABASE_SSL === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ea7a1ef493ab41b — Filesystem access.

repo/packages/server/src/IdentityManager.ts:15

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #74d4585ca26017c7 — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:60

        if (process.env.STRIPE_SECRET_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b2d285cb7ee7707 — Filesystem access.

repo/packages/server/src/IdentityManager.ts:91

            const publicKey = fs.readFileSync(path.join(__dirname, '../', 'src/enterprise/license/public.pem'), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fbb9a2fd43b6357f — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:103

        const LICENSE_URL = process.env.LICENSE_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d0e4a5573c6a5f6f — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:104

        const FLOWISE_EE_LICENSE_KEY = process.env.FLOWISE_EE_LICENSE_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b90304b0f041eb11 — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:114

            if (process.env.OFFLINE === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #4f7ed3ad4c6b00a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/server/src/IdentityManager.ts:140

                    const response = await axios.post(`${LICENSE_URL}/enterprise/verify`, { license: FLOWISE_EE_LICENSE_KEY })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #d34dc86618771cfe — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:402

                (item) => (item.price.product as string) === process.env.ADDITIONAL_SEAT_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #386945ccdffe76c3 — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:419

                newPlanId === process.env.CLOUD_FREE_ID ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cee5e2a831892ac1 — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:420

                newPlanId === process.env.CLOUD_STARTER_ID ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d126494c7886862a — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:421

                newPlanId === process.env.CLOUD_PRO_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d15051d44493eda — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:435

                newPlanId === process.env.CLOUD_FREE_ID ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd89ebfe461580d4 — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:436

                newPlanId === process.env.CLOUD_STARTER_ID ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5c193cf65d631c2 — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:437

                newPlanId === process.env.CLOUD_PRO_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16537833472865f5 — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:493

                    productId = process.env.CLOUD_STARTER_ID as string

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #508b1b5ae086a5a9 — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:496

                    productId = process.env.CLOUD_PRO_ID as string

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db2a6e604f6fa6d4 — Environment-variable access.

repo/packages/server/src/IdentityManager.ts:499

                    productId = process.env.CLOUD_FREE_ID as string

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4c9174023db6b1fc — Filesystem access.

repo/packages/server/src/NodesPool.ts:3

import { Dirent } from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36ad77c19d670561 — Filesystem access.

repo/packages/server/src/NodesPool.ts:5

import { promises } from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0f6cd549f45781bd — Environment-variable access.

repo/packages/server/src/NodesPool.ts:37

        const disabled_nodes = process.env.DISABLED_NODES ? process.env.DISABLED_NODES.split(',') : []

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61d37eb5d8e07939 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:21

        if (!this.stripe && process.env.STRIPE_SECRET_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3b66e7aa3e70217 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:22

            this.stripe = new Stripe(process.env.STRIPE_SECRET_KEY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba26b0be9c26a71d — Environment-variable access.

repo/packages/server/src/StripeManager.ts:140

                return_url: `${process.env.APP_URL}/account`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79a78d54fe171f4b — Environment-variable access.

repo/packages/server/src/StripeManager.ts:166

                product: process.env.CLOUD_STARTER_ID as string,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8493db341091d51e — Environment-variable access.

repo/packages/server/src/StripeManager.ts:170

                product: process.env.CLOUD_PRO_ID as string,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ed41145e72bae32 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:174

                product: process.env.CLOUD_FREE_ID as string,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd1cd4eec9f78714 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:178

                product: process.env.ADDITIONAL_SEAT_ID as string,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f4cec836a99d3137 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:201

                privacy_policy_url: `${process.env.APP_URL}/privacy-policy`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9253da53ccfc1087 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:202

                terms_of_service_url: `${process.env.APP_URL}/terms-of-service`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c89084549cac119c — Environment-variable access.

repo/packages/server/src/StripeManager.ts:245

                (item) => (item.price.product as string) === process.env.ADDITIONAL_SEAT_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #88f02c939e9e7018 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:291

            const basePlanItem = subscription.items.data.find((item) => (item.price.product as string) !== process.env.ADDITIONAL_SEAT_ID)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0c6ddc9fa3d50e1 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:303

                product: process.env.ADDITIONAL_SEAT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bdb547fe97da2155 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:319

                (item) => (item.price.product as string) === process.env.ADDITIONAL_SEAT_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4103f441f60228ef — Environment-variable access.

repo/packages/server/src/StripeManager.ts:378

                (item) => (item.price.product as string) === process.env.ADDITIONAL_SEAT_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fd20ef140115be6d — Environment-variable access.

repo/packages/server/src/StripeManager.ts:383

                product: process.env.ADDITIONAL_SEAT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b3ef6e560ea04555 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:463

            const isStarterPlan = newPlanId === process.env.CLOUD_STARTER_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c775c1f76d0a69b9 — Environment-variable access.

repo/packages/server/src/StripeManager.ts:534

            const isStarterPlan = newPlanId === process.env.CLOUD_STARTER_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a3e9d3e4452c6cd — Environment-variable access.

repo/packages/server/src/StripeManager.ts:546

                        plan_id: process.env.CLOUD_STARTER_ID || ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15a3ca931d63f56b — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:37

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7672a786a3caadcc — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:39

            if (process.env.REDIS_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b541f418568ceefa — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:41

                    url: process.env.REDIS_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5cbef78cdec5e26 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:44

                            process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3668963f4fff58f2 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:45

                                ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #679b4fdf9a9bc74c — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:49

                        process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #525dc078dfb2246f — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:50

                            ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56944d93f901ebb9 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:55

                    username: process.env.REDIS_USERNAME || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9dfdc39aeab5a567 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:56

                    password: process.env.REDIS_PASSWORD || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3a7c5a45162c4400 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:58

                        host: process.env.REDIS_HOST || 'localhost',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bdd1d57c8d936b59 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:59

                        port: parseInt(process.env.REDIS_PORT || '6379'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c932539991a7cdc — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:60

                        tls: process.env.REDIS_TLS === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9296ba9d2772cf16 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:61

                        cert: process.env.REDIS_CERT ? Buffer.from(process.env.REDIS_CERT, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17e218498adc95a1 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:62

                        key: process.env.REDIS_KEY ? Buffer.from(process.env.REDIS_KEY, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1203181854c302a3 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:63

                        ca: process.env.REDIS_CA ? Buffer.from(process.env.REDIS_CA, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b2d06684e22822e8 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:65

                            process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a940ef5068fbc8b1 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:66

                                ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2659682af3e62b0e — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:70

                        process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c80df84b96acdc87 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:71

                            ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55d40b98e988fa82 — Environment-variable access.

repo/packages/server/src/UsageCacheManager.ts:147

            (item) => (item.price.product as string) === process.env.ADDITIONAL_SEAT_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d8fbcd34e483cc9 — Environment-variable access.

repo/packages/server/src/commands/base.ts:219

                process.env[key] = flags[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04953860fa8d8d76 — Environment-variable access.

repo/packages/server/src/controllers/evaluations/index.ts:32

        const baseURL = `${process.env.APP_URL}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #25707808d63a3a25 — Environment-variable access.

repo/packages/server/src/controllers/evaluations/index.ts:56

        const baseURL = `${process.env.APP_URL}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b4c6e8585e7cf225 — Filesystem access.

repo/packages/server/src/controllers/get-upload-file/index.ts:2

import fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5d45072dd52ba849 — Environment-variable access.

repo/packages/server/src/controllers/internal-predictions/index.ts:36

    const isQueueMode = process.env.MODE === MODE.QUEUE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #19b53dd13aa6cb52 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/server/src/controllers/nvidia-nim/index.ts:17

        const response = await axios.post('https://nts.ngc.nvidia.com/v1/token', data, { headers })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #3c113426d59c3f1a — Filesystem access.

repo/packages/server/src/controllers/openai-assistants/index.ts:2

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d81f2df7134507c9 — Environment-variable access.

repo/packages/server/src/controllers/predictions/index.ts:67

                const isQueueMode = process.env.MODE === MODE.QUEUE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06fd0ab5f73f9542 — Environment-variable access.

repo/packages/server/src/controllers/pricing/index.ts:6

            FREE: process.env.CLOUD_FREE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3eaeb1bb90ab72ed — Environment-variable access.

repo/packages/server/src/controllers/pricing/index.ts:7

            STARTER: process.env.CLOUD_STARTER_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04563a969ccc453a — Environment-variable access.

repo/packages/server/src/controllers/pricing/index.ts:8

            PRO: process.env.CLOUD_PRO_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d88e8e8c181830ec — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:16

        if (process.env.REDIS_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #16ddc4f7287a83f6 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:17

            redisClient = new Redis(process.env.REDIS_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3172b0cdc39bd42b — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:20

                host: process.env.REDIS_HOST || 'localhost',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44fdf09989b7eaee — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:21

                port: parseInt(process.env.REDIS_PORT || '6379'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #79b67a6ae77a4016 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:22

                username: process.env.REDIS_USERNAME || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3da358d0f250f960 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:23

                password: process.env.REDIS_PASSWORD || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7e8ca9401e588b20 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:25

                    process.env.REDIS_TLS === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3e8548dd4274ca8 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:27

                              cert: process.env.REDIS_CERT ? Buffer.from(process.env.REDIS_CERT, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d785e342abd686ea — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:28

                              key: process.env.REDIS_KEY ? Buffer.from(process.env.REDIS_KEY, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #866af4aeffded5a3 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:29

                              ca: process.env.REDIS_CA ? Buffer.from(process.env.REDIS_CA, 'base64') : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31044bc79154515a — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:44

    const databaseType = process.env.DATABASE_TYPE || 'sqlite'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9cf67de0fc431a25 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:50

                host: process.env.DATABASE_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #71688a19ca070fef — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:51

                port: parseInt(process.env.DATABASE_PORT || '3306'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #601b508b40965560 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:52

                user: process.env.DATABASE_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #11e523be370be6a6 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:53

                password: process.env.DATABASE_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #59b666b372ae0536 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:54

                database: process.env.DATABASE_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5da6ed5163255e8 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:73

                host: process.env.DATABASE_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ebc0d9e1cbd97ed5 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:74

                port: parseInt(process.env.DATABASE_PORT || '5432'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8892dd76ae04cf5e — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:75

                user: process.env.DATABASE_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f82e3da91b31feee — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:76

                password: process.env.DATABASE_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06d21f94c36809df — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:77

                database: process.env.DATABASE_NAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9517337be44794b — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:93

            const homePath = process.env.DATABASE_PATH ?? flowisePath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91c3c4ef59b8a8b1 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/SessionPersistance.ts:153

            const databaseType = process.env.DATABASE_TYPE || 'sqlite'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e82e895c6327bc8 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/index.ts:36

const expireAuthTokensOnRestart = process.env.EXPIRE_AUTH_TOKENS_ON_RESTART === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #592d0587a4da1ad6 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/index.ts:42

    process.env.NODE_ENV === 'production'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #31530db859ca1a4e — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/index.ts:44

        : process.env.SECURE_COOKIES === 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #227adf8825491915 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/index.ts:46

        : process.env.SECURE_COOKIES === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #116afaa2b605409f — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/index.ts:48

        : process.env.APP_URL?.startsWith('https')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ad50033fbb2d2556 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/index.ts:68

        if (process.env.MODE === 'queue') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2d604fbd66905cb4 — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/index.ts:371

        expiryInMinutes = process.env.JWT_TOKEN_EXPIRY_IN_MINUTES ? parseInt(process.env.JWT_TOKEN_EXPIRY_IN_MINUTES) : 60

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1a637f4d5d88ecfd — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/index.ts:391

        expiryInMinutes = process.env.JWT_REFRESH_TOKEN_EXPIRY_IN_MINUTES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50e943ca61ea7dfe — Environment-variable access.

repo/packages/server/src/enterprise/middleware/passport/index.ts:392

            ? parseInt(process.env.JWT_REFRESH_TOKEN_EXPIRY_IN_MINUTES)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5042eacb145f18e1 — Environment-variable access.

repo/packages/server/src/enterprise/services/account.service.ts:155

            const expiryInHours = process.env.INVITE_TOKEN_EXPIRY_IN_HOURS ? parseInt(process.env.INVITE_TOKEN_EXPIRY_IN_HOURS) : 24

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9ff8b18887abd069 — Environment-variable access.

repo/packages/server/src/enterprise/services/account.service.ts:218

                    const expiryInHours = process.env.INVITE_TOKEN_EXPIRY_IN_HOURS ? parseInt(process.env.INVITE_TOKEN_EXPIRY_IN_HOURS) : 24

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99e271fd896db50b — Environment-variable access.

repo/packages/server/src/enterprise/services/account.service.ts:373

                const expiryInHours = process.env.INVITE_TOKEN_EXPIRY_IN_HOURS ? parseInt(process.env.INVITE_TOKEN_EXPIRY_IN_HOURS) : 24

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f8e1d97cc29d7f70 — Environment-variable access.

repo/packages/server/src/enterprise/services/account.service.ts:446

                    const expiryInHours = process.env.INVITE_TOKEN_EXPIRY_IN_HOURS ? parseInt(process.env.INVITE_TOKEN_EXPIRY_IN_HOURS) : 24

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7d2dc5be0607d3ec — Environment-variable access.

repo/packages/server/src/enterprise/services/account.service.ts:637

            const expiryInMins = process.env.PASSWORD_RESET_TOKEN_EXPIRY_IN_MINUTES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #685049bfc8873133 — Environment-variable access.

repo/packages/server/src/enterprise/services/account.service.ts:638

                ? parseInt(process.env.PASSWORD_RESET_TOKEN_EXPIRY_IN_MINUTES)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9dfaac7ded05428 — Environment-variable access.

repo/packages/server/src/enterprise/services/account.service.ts:878

            const expiryInHours = process.env.INVITE_TOKEN_EXPIRY_IN_HOURS ? parseInt(process.env.INVITE_TOKEN_EXPIRY_IN_HOURS) : 24

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3205ef14883eb3ff — Environment-variable access.

repo/packages/server/src/enterprise/sso/Auth0SSO.ts:49

        const APP_URL = process.env.APP_URL || 'http://127.0.0.1:' + process.env.PORT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #cbd83dbfcc7c5c79 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/server/src/enterprise/sso/Auth0SSO.ts:149

            const tokenResponse = await axios.post(
                `https://${validatedDomain}/oauth/token`,
                {
                    client_id: clientID,
                    client_secret: clientSecret,
                    audience: `https://${validatedDomain}/api/v2/`,
                    grant_type: 'client_credentials'
                },
                {
                    headers: { 'Content-Type': 'application/json' }
                }
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ca36dc0e6183b258 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/server/src/enterprise/sso/Auth0SSO.ts:178

            const response = await axios.post(
                `https://${validatedDomain}/oauth/token`,
                {
                    client_id: clientID,
                    client_secret: clientSecret,
                    grant_type: 'refresh_token',
                    refresh_token: ssoRefreshToken
                },
                {
                    headers: { 'Content-Type': 'application/json' }
                }
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #61129a711820638e — Environment-variable access.

repo/packages/server/src/enterprise/sso/AzureSSO.ts:21

        const APP_URL = process.env.APP_URL || 'http://127.0.0.1:' + process.env.PORT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #200a42457cd2a6d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/server/src/enterprise/sso/AzureSSO.ts:120

            const tokenResponse = await axios.post(
                `https://login.microsoftonline.com/${tenantID}/oauth2/v2.0/token`,
                new URLSearchParams({
                    client_id: clientID,
                    client_secret: clientSecret,
                    grant_type: 'client_credentials',
                    scope: 'https://graph.microsoft.com/.default'
                }).toString(),
                {
                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' }
                }
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4eb48efb8b5bcc7c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/server/src/enterprise/sso/AzureSSO.ts:143

            const response = await axios.post(
                `https://login.microsoftonline.com/${tenantID}/oauth2/v2.0/token`,
                new URLSearchParams({
                    client_id: clientID || '',
                    client_secret: clientSecret || '',
                    grant_type: 'refresh_token',
                    refresh_token: ssoRefreshToken,
                    scope: 'openid profile email'
                }).toString(),
                {
                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' }
                }
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #7b2c405d5f3c81e1 — Environment-variable access.

repo/packages/server/src/enterprise/sso/GithubSSO.ts:17

        const APP_URL = process.env.APP_URL || 'http://127.0.0.1:' + process.env.PORT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #fffe3b2affe5c7c0 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/server/src/enterprise/sso/GithubSSO.ts:38

                        const emailResponse = await fetch('https://api.github.com/user/emails', {
                            headers: {
                                Authorization: `token ${accessToken}`,
                                'User-Agent': 'Node.js'
                            }
                        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c14184f813a34d65 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/server/src/enterprise/sso/GithubSSO.ts:106

            const response = await fetch('https://github.com/login/oauth/access_token', {
                method: 'POST',
                headers: {
                    Accept: 'application/json',
                    'Content-Type': 'application/json'
                },
                body: JSON.stringify({
                    client_id: clientID,
                    client_secret: clientSecret,
                    code: 'dummy_code_for_testing'
                })
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #769bb14c4c2d5385 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/server/src/enterprise/sso/GithubSSO.ts:133

            const response = await fetch('https://github.com/login/oauth/access_token', {
                method: 'POST',
                headers: {
                    Accept: 'application/json',
                    'Content-Type': 'application/json'
                },
                body: JSON.stringify({
                    client_id: clientID,
                    client_secret: clientSecret,
                    grant_type: 'refresh_token',
                    refresh_token: currentRefreshToken
                })
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #ea9fb27c37cfe55f — Environment-variable access.

repo/packages/server/src/enterprise/sso/GoogleSSO.ts:20

        const APP_URL = process.env.APP_URL || 'http://127.0.0.1:' + process.env.PORT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #73bcd0060c488c8d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/server/src/enterprise/sso/GoogleSSO.ts:129

            const tokenResponse = await axios.get(authorizationUrl)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #73c9369c4932ab82 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/server/src/enterprise/sso/GoogleSSO.ts:141

            const response = await axios.post(
                `https://oauth2.googleapis.com/token`,
                new URLSearchParams({
                    client_id: clientID || '',
                    client_secret: clientSecret || '',
                    grant_type: 'refresh_token',
                    refresh_token: ssoRefreshToken,
                    scope: 'refresh_token'
                }).toString(),
                {
                    headers: { 'Content-Type': 'application/x-www-form-urlencoded' }
                }
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #c4e049f25573e3f5 — Environment-variable access.

repo/packages/server/src/enterprise/utils/encryption.util.ts:6

    return parseInt(process.env.PASSWORD_SALT_HASH_ROUNDS || '10', 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c04babf1962c4179 — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:7

const SMTP_HOST = process.env.SMTP_HOST

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af7e6a8f61ad7c92 — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:8

const SMTP_PORT = parseInt(process.env.SMTP_PORT as string, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #91d48d7b5d41de32 — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:9

const SMTP_USER = process.env.SMTP_USER

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ff426eb6fc78aa2 — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:10

const SMTP_PASSWORD = process.env.SMTP_PASSWORD

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c1bc5a3fd613c92 — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:13

    const port = parseInt(process.env.SMTP_PORT as string, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #870b738227dc9046 — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:15

        process.env.SMTP_HOST?.trim() &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0116dd5ed9ce508c — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:16

            process.env.SMTP_USER?.trim() &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50046986b22d3a6b — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:17

            process.env.SMTP_PASSWORD?.trim() &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45cdffae80fe148b — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:18

            process.env.SMTP_PORT &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5f336456790f1e39 — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:22

const SENDER_EMAIL = process.env.SENDER_EMAIL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44c470f81b8d14f1 — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:23

const SMTP_SECURE = process.env.SMTP_SECURE ? process.env.SMTP_SECURE === 'true' : true

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6a9943eb355f3912 — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:24

const TLS = process.env.ALLOW_UNAUTHORIZED_CERTS ? { rejectUnauthorized: false } : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5dbe5895e28279ae — Filesystem access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:40

            return fs.readFileSync(userTemplatePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #673358758be25a15 — Filesystem access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:45

    return fs.readFileSync(path.join(__dirname, '../', 'emails', defaultTemplateName), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1eb9dd7f84f31ecf — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:52

    const template = getEmailTemplate('workspace_add_cloud.hbs', process.env.WORKSPACE_INVITE_TEMPLATE_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9695996d95d96a36 — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:80

                  process.env.WORKSPACE_INVITE_TEMPLATE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02f8026059d2221d — Environment-variable access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:84

                  process.env.WORKSPACE_INVITE_TEMPLATE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce64ee3e3843a777 — Filesystem access.

repo/packages/server/src/enterprise/utils/sendEmail.ts:100

    const passwordResetTemplateSource = fs.readFileSync(path.join(__dirname, '../', 'emails', 'workspace_user_reset_password.hbs'), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d65c73b58d2ce998 — Environment-variable access.

repo/packages/server/src/enterprise/utils/tempTokenUtils.ts:80

        const expiryInHours = process.env.INVITE_TOKEN_EXPIRY_IN_HOURS ? parseInt(process.env.INVITE_TOKEN_EXPIRY_IN_HOURS) : 24

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9cd108616a68139 — Environment-variable access.

repo/packages/server/src/enterprise/utils/tempTokenUtils.ts:85

        const expiryInMins = process.env.PASSWORD_RESET_TOKEN_EXPIRY_IN_MINUTES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cb668193f3b40b22 — Environment-variable access.

repo/packages/server/src/enterprise/utils/tempTokenUtils.ts:86

            ? parseInt(process.env.PASSWORD_RESET_TOKEN_EXPIRY_IN_MINUTES)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #62bb5a99fcc68f6f — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:11

    const originalEnv = process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0c78dc06989273cb — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:15

            process.env.APP_URL = originalEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cd9b7050b98fc647 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:17

            delete process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #20258a4562deba97 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:23

            delete process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2799f82dbbd03eb2 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:28

            process.env.APP_URL = 'example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2514c0ba707de8ba — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:33

            process.env.APP_URL = 'https://example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #decef0a9af3c083a — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:38

            process.env.APP_URL = 'http://example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5bd67ecc4ae17cb8 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:44

            process.env.APP_URL = 'http://localhost:3000'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a2938ba0668a07dc — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:49

            process.env.APP_URL = 'http://127.0.0.1:3000'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a5456aabb0d4121b — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:54

            process.env.APP_URL = 'http://[::1]:3000'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ae88c3e1f1834c24 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:59

            process.env.APP_URL = 'http://0.0.0.0:3000'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2938b86f10823ca5 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:64

            process.env.APP_URL = 'https://example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7f25c28c254e4ec3 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:69

            process.env.APP_URL = 'https://example.com/'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1b4b23009e1f7c40 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:74

            process.env.APP_URL = 'https://example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b37d7e33e32487c2 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:79

            process.env.APP_URL = 'http://example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #271e8ba3ae289c39 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:86

            process.env.APP_URL = 'https://example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fae4c28de99a9d77 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:92

            process.env.APP_URL = 'http://example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c6e98be7093c2d57 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:98

            process.env.APP_URL = 'http://localhost:3000'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e62f980fcd79ecd2 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:104

            process.env.APP_URL = 'https://example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ed67ef421a37b7ca — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:113

            process.env.APP_URL = 'http://myapp.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9fe9e5c9348b8151 — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:120

            process.env.APP_URL = 'http://myapp.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #92092bd433edfd7d — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.test.ts:126

            process.env.APP_URL = 'http://myapp.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00be02ef9a00132d — Environment-variable access.

repo/packages/server/src/enterprise/utils/url.util.ts:11

    const appUrl = process.env.APP_URL || ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #140601cf4b1e7cfa — Environment-variable access.

repo/packages/server/src/index.ts:137

            if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c2352aaeb76f214 — Environment-variable access.

repo/packages/server/src/index.ts:174

        const flowise_file_size_limit = process.env.FLOWISE_FILE_SIZE_LIMIT || '50mb'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #723ecbc44f0ad366 — Environment-variable access.

repo/packages/server/src/index.ts:184

        let trustProxy: string | boolean | number | undefined = process.env.TRUST_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1191a7296286a9e — Environment-variable access.

repo/packages/server/src/index.ts:223

        const denylistURLs = process.env.DENYLIST_URLS ? process.env.DENYLIST_URLS.split(',') : []

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #22692a748e8a5f01 — Environment-variable access.

repo/packages/server/src/index.ts:305

        if (process.env.ENABLE_METRICS === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #23908628f77bc3e2 — Environment-variable access.

repo/packages/server/src/index.ts:306

            switch (process.env.METRICS_PROVIDER) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #550635c7a550b4bf — Environment-variable access.

repo/packages/server/src/index.ts:339

        if (process.env.MODE === MODE.QUEUE && process.env.ENABLE_BULLMQ_DASHBOARD === 'true' && !this.identityManager.isCloud()) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dadc036012b54761 — Environment-variable access.

repo/packages/server/src/index.ts:346

                process.env.ADMIN_RATE_LIMIT_MESSAGE || 'Too many requests to admin dashboard, please try again later.'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4788423f4e8bf8fe — Environment-variable access.

repo/packages/server/src/index.ts:392

    const host = process.env.HOST

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #137f750faa566978 — Environment-variable access.

repo/packages/server/src/index.ts:393

    const port = parseInt(process.env.PORT || '', 10) || 3000

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b0b1356985b360a7 — Environment-variable access.

repo/packages/server/src/metrics/OpenTelemetry.ts:29

        if (!process.env.METRICS_OPEN_TELEMETRY_METRIC_ENDPOINT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61b19cd2a6084af5 — Environment-variable access.

repo/packages/server/src/metrics/OpenTelemetry.ts:33

        if (process.env.METRICS_OPEN_TELEMETRY_DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0bb173644961ce6f — Environment-variable access.

repo/packages/server/src/metrics/OpenTelemetry.ts:51

                [ATTR_SERVICE_NAME]: process.env.METRICS_SERVICE_NAME || 'FlowiseAI',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6c987379e448a861 — Environment-variable access.

repo/packages/server/src/metrics/OpenTelemetry.ts:55

            const metricProtocol = process.env.METRICS_OPEN_TELEMETRY_PROTOCOL || 'http' // Default to 'http'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bef4d48830d04ffe — Environment-variable access.

repo/packages/server/src/metrics/OpenTelemetry.ts:79

                url: process.env.METRICS_OPEN_TELEMETRY_METRIC_ENDPOINT // OTLP endpoint for metrics

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b6668226e94546b — Environment-variable access.

repo/packages/server/src/metrics/Prometheus.ts:26

        const serviceName: string = process.env.METRICS_SERVICE_NAME || 'FlowiseAI'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d36e5a568a4c0b9d — Environment-variable access.

repo/packages/server/src/metrics/Prometheus.ts:155

        if (process.env.METRICS_INCLUDE_NODE_METRICS !== 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f6c59442cfce610 — Environment-variable access.

repo/packages/server/src/middlewares/errors/index.ts:16

        stack: process.env.NODE_ENV === 'development' ? err.stack : {}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #062569d2ca590933 — Environment-variable access.

repo/packages/server/src/queue/BaseQueue.ts:5

const QUEUE_REDIS_EVENT_STREAM_MAX_LEN = process.env.QUEUE_REDIS_EVENT_STREAM_MAX_LEN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d18d1c6c56365dfc — Environment-variable access.

repo/packages/server/src/queue/BaseQueue.ts:6

    ? parseInt(process.env.QUEUE_REDIS_EVENT_STREAM_MAX_LEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46c46d51ef4163f7 — Environment-variable access.

repo/packages/server/src/queue/BaseQueue.ts:8

const WORKER_CONCURRENCY = process.env.WORKER_CONCURRENCY ? parseInt(process.env.WORKER_CONCURRENCY) : 100000

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dd7aed9ad8f58c0a — Environment-variable access.

repo/packages/server/src/queue/BaseQueue.ts:9

const REMOVE_ON_AGE = process.env.REMOVE_ON_AGE ? parseInt(process.env.REMOVE_ON_AGE) : -1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #982d9e9dc7850bf7 — Environment-variable access.

repo/packages/server/src/queue/BaseQueue.ts:10

const REMOVE_ON_COUNT = process.env.REMOVE_ON_COUNT ? parseInt(process.env.REMOVE_ON_COUNT) : -1

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d1ca5b0ef0df7b3 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:18

const QUEUE_NAME = process.env.QUEUE_NAME || 'flowise-queue'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56865c71f88b9b7a — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:30

        if (process.env.REDIS_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dba7f6131781b58e — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:32

            if (process.env.REDIS_URL.startsWith('rediss://')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6aed43dbb49b357e — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:36

            } else if (process.env.REDIS_TLS === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05b077faea3d3408 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:38

                    cert: process.env.REDIS_CERT ? Buffer.from(process.env.REDIS_CERT, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd282b2a45f027ae — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:39

                    key: process.env.REDIS_KEY ? Buffer.from(process.env.REDIS_KEY, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12efceebe8b2be4e — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:40

                    ca: process.env.REDIS_CA ? Buffer.from(process.env.REDIS_CA, 'base64') : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cbaad7d3113eca81 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:44

                url: process.env.REDIS_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e3c8303375519656 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:48

                    process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #96f48076a365512b — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:49

                        ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1fa784d2d6d73d72 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:54

            if (process.env.REDIS_TLS === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #75ea2cafc4ac2894 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:56

                    cert: process.env.REDIS_CERT ? Buffer.from(process.env.REDIS_CERT, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #55b113840e48cad9 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:57

                    key: process.env.REDIS_KEY ? Buffer.from(process.env.REDIS_KEY, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #193a019e53134097 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:58

                    ca: process.env.REDIS_CA ? Buffer.from(process.env.REDIS_CA, 'base64') : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #66cec550986f9868 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:62

                host: process.env.REDIS_HOST || 'localhost',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e172da166e3d919 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:63

                port: parseInt(process.env.REDIS_PORT || '6379'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a8a44f5b6153bb3 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:64

                username: process.env.REDIS_USERNAME || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4cc8cd6e6f989d1 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:65

                password: process.env.REDIS_PASSWORD || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cf6134b0b0bdb1b3 — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:69

                    process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d00490ee2afc4fea — Environment-variable access.

repo/packages/server/src/queue/QueueManager.ts:70

                        ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e9201caa9b4e1364 — Environment-variable access.

repo/packages/server/src/routes/mcp-endpoint/index.test.ts:60

        delete process.env.MCP_CORS_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ef196e6fac9ad7e — Environment-variable access.

repo/packages/server/src/routes/mcp-endpoint/index.test.ts:98

        delete process.env.MCP_CORS_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f52e03949aa82ab0 — Environment-variable access.

repo/packages/server/src/routes/mcp-endpoint/index.test.ts:142

        process.env.MCP_CORS_ORIGINS = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b5f7eb0813f68b4b — Environment-variable access.

repo/packages/server/src/routes/mcp-endpoint/index.test.ts:147

        delete process.env.MCP_CORS_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #19b28eaa1cac733e — Environment-variable access.

repo/packages/server/src/routes/mcp-endpoint/index.test.ts:180

        process.env.MCP_CORS_ORIGINS = 'https://allowed.example.com, https://also-allowed.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #78a3fdb70c7dccc0 — Environment-variable access.

repo/packages/server/src/routes/mcp-endpoint/index.test.ts:185

        delete process.env.MCP_CORS_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #822445ee1e1ce9be — Environment-variable access.

repo/packages/server/src/routes/mcp-endpoint/index.ts:13

const mcpCorsOrigins = process.env.MCP_CORS_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #97417bcdb6097962 — Environment-variable access.

repo/packages/server/src/schedule/ScheduleBeat.test.ts:90

    delete process.env.MODE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d87e4ae05da7e6b7 — Environment-variable access.

repo/packages/server/src/schedule/ScheduleBeat.test.ts:91

    if (mode) process.env.MODE = mode

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #78cf7d4f37919189 — Environment-variable access.

repo/packages/server/src/schedule/ScheduleBeat.test.ts:115

    delete process.env.MODE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36b6bb7c9fa3ce83 — Environment-variable access.

repo/packages/server/src/schedule/ScheduleBeat.ts:33

        this.isQueueMode = process.env.MODE === MODE.QUEUE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f03294b7092fb7e — Environment-variable access.

repo/packages/server/src/schedule/ScheduleExecutor.ts:206

            baseURL: process.env.APP_URL ?? '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b899ba4c31d48493 — Filesystem access.

repo/packages/server/src/services/agentflowv2-generator/index.ts:6

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #70ac9d25a9496c07 — Environment-variable access.

repo/packages/server/src/services/agentflowv2-generator/index.ts:85

    const disabled_nodes = process.env.DISABLED_NODES ? process.env.DISABLED_NODES.split(',') : []

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f744c806aee6e3dc — Filesystem access.

repo/packages/server/src/services/agentflowv2-generator/index.ts:109

            const fileData = fs.readFileSync(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #128a385e23f40532 — Environment-variable access.

repo/packages/server/src/services/agentflowv2-generator/index.ts:202

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c29d4c86411dc4f2 — Environment-variable access.

repo/packages/server/src/services/chat-messages/index.ts:195

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7da18e5ebe3b0135 — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.test.ts:691

        const ORIGINAL_ENV = process.env.CUSTOM_MCP_TOOLS_MAX_BYTES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b7367b70a3143c75 — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.test.ts:693

            if (ORIGINAL_ENV === undefined) delete process.env.CUSTOM_MCP_TOOLS_MAX_BYTES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4aa6cfe925492530 — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.test.ts:694

            else process.env.CUSTOM_MCP_TOOLS_MAX_BYTES = ORIGINAL_ENV

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e72158abed9e8933 — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.test.ts:698

            process.env.CUSTOM_MCP_TOOLS_MAX_BYTES = '50'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #60843192508ba7ea — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.test.ts:720

            process.env.CUSTOM_MCP_TOOLS_MAX_BYTES = '0'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c4f6c6eb210d3956 — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.test.ts:749

        const ORIGINAL_ENV = process.env.CUSTOM_MCP_AUTHORIZE_TIMEOUT_MS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dc22d14e326cfe12 — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.test.ts:751

            if (ORIGINAL_ENV === undefined) delete process.env.CUSTOM_MCP_AUTHORIZE_TIMEOUT_MS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a9ba3f87213cc225 — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.test.ts:752

            else process.env.CUSTOM_MCP_AUTHORIZE_TIMEOUT_MS = ORIGINAL_ENV

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5e38e2937caede71 — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.test.ts:758

            process.env.CUSTOM_MCP_AUTHORIZE_TIMEOUT_MS = '1000'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #382518473cd0f51b — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.ts:19

    const raw = process.env.CUSTOM_MCP_TOOLS_MAX_BYTES

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72b02522a76fbf52 — Environment-variable access.

repo/packages/server/src/services/custom-mcp-servers/index.ts:27

    const raw = process.env.CUSTOM_MCP_AUTHORIZE_TIMEOUT_MS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #154d652be5343dec — Environment-variable access.

repo/packages/server/src/services/documentstore/index.ts:699

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #284801987ae531f4 — Environment-variable access.

repo/packages/server/src/services/documentstore/index.ts:907

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d83ccb973b1efd76 — Environment-variable access.

repo/packages/server/src/services/documentstore/index.ts:1326

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e873676e80914525 — Environment-variable access.

repo/packages/server/src/services/documentstore/index.ts:2057

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a1d4d77694e4fa4f — Environment-variable access.

repo/packages/server/src/services/documentstore/index.ts:2132

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3cec6c5eef9a0f8 — Environment-variable access.

repo/packages/server/src/services/export-import/index.ts:891

                            const baseURL = process.env.BASE_URL || `http://localhost:${process.env.PORT || 3000}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b4a075c238f0a39 — Environment-variable access.

repo/packages/server/src/services/fetch-links/index.ts:18

        if (process.env.DEBUG === 'true') console.info(`Start ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1040c6bc86910e4e — Environment-variable access.

repo/packages/server/src/services/fetch-links/index.ts:20

        if (process.env.DEBUG === 'true') console.info(`Finish ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #61c7c7bf30e137fc — Filesystem access.

repo/packages/server/src/services/log/index.ts:2

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d49f86cb457fbee2 — Environment-variable access.

repo/packages/server/src/services/log/index.ts:73

            const filePath = process.env.LOG_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #af5e2749b9cd83c5 — Environment-variable access.

repo/packages/server/src/services/log/index.ts:74

                ? path.resolve(process.env.LOG_PATH, `server.log.${date}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6cdfdd3c6eb6b8d5 — Filesystem access.

repo/packages/server/src/services/marketplaces/index.ts:1

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d649b8c84a61d813 — Filesystem access.

repo/packages/server/src/services/marketplaces/index.ts:37

            const fileData = fs.readFileSync(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ebd1623f00931b7 — Filesystem access.

repo/packages/server/src/services/marketplaces/index.ts:58

            const fileData = fs.readFileSync(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6e29c10a93cd59c9 — Filesystem access.

repo/packages/server/src/services/marketplaces/index.ts:99

            const fileData = fs.readFileSync(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f5524372cdbabae8 — Environment-variable access.

repo/packages/server/src/services/nodes/index.ts:149

    if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #fee881042108778d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/server/src/services/prompts-lists/index.ts:8

        const resp = await axios.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #262634d843f07d2f — Environment-variable access.

repo/packages/server/src/services/schedule/utils.ts:10

const MIN_SCHEDULE_INTERVAL_SECONDS = Math.max(1, parseInt(process.env.MIN_SCHEDULE_INTERVAL_SECONDS || '60', 10) || 60)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d826f8b8db230115 — Filesystem access.

repo/packages/server/src/services/versions/index.ts:2

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7593e69953732beb — Filesystem access.

repo/packages/server/src/services/versions/index.ts:29

            const content = await fs.promises.readFile(packagejsonPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9d7c48fcb81801f — Environment-variable access.

repo/packages/server/src/services/webhook-listener/registry.ts:217

    if (process.env.MODE === MODE.QUEUE && redisEventSubscriber) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #539b28ad78169e71 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:22

    const SAVED_CORS_ORIGINS = process.env.CORS_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5c97310aa06a1d9d — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:23

    const SAVED_CORS_ALLOW_CREDENTIALS = process.env.CORS_ALLOW_CREDENTIALS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0541b11e8a97726e — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:26

        if (SAVED_CORS_ORIGINS !== undefined) process.env.CORS_ORIGINS = SAVED_CORS_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3a3546d80cd8ce8e — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:27

        else delete process.env.CORS_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e15d55f3aefaa66f — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:28

        if (SAVED_CORS_ALLOW_CREDENTIALS !== undefined) process.env.CORS_ALLOW_CREDENTIALS = SAVED_CORS_ALLOW_CREDENTIALS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ec400d42d88453fb — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:29

        else delete process.env.CORS_ALLOW_CREDENTIALS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3322b94b5fa40e56 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:33

        if (corsOrigins === undefined) delete process.env.CORS_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c43862c74ed190a2 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:34

        else process.env.CORS_ORIGINS = corsOrigins

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2e1e05c8c99a4a33 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:35

        if (corsAllowCredentials === undefined) delete process.env.CORS_ALLOW_CREDENTIALS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fd8c329e93838f33 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:36

        else process.env.CORS_ALLOW_CREDENTIALS = corsAllowCredentials

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b6e4e358a41cfa0c — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:71

            process.env.CORS_ORIGINS = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #da3aab007a7f7e8d — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:72

            process.env.CORS_ALLOW_CREDENTIALS = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #13ba65a444935f27 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:78

            process.env.CORS_ORIGINS = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #32d2191eee447839 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:79

            delete process.env.CORS_ALLOW_CREDENTIALS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a493b0fd47234644 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:85

            process.env.CORS_ORIGINS = 'https://trusted.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bb6e06665cc8a7f0 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:86

            process.env.CORS_ALLOW_CREDENTIALS = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #56d107cc5335cd89 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:94

    const originalEnv = process.env.IFRAME_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aa1e3ad503867ccc — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:99

            process.env.IFRAME_ORIGINS = originalEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #29897e26e729a1d9 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:101

            delete process.env.IFRAME_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dbff9ca312bdab67 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:107

            delete process.env.IFRAME_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a402c7ec0b19dc35 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:112

            process.env.IFRAME_ORIGINS = ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5cdb312344b1362b — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:117

            process.env.IFRAME_ORIGINS = '   '

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5a395b8105112f69 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:124

            process.env.IFRAME_ORIGINS = "'self'"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2ef2cff24708c6d9 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:129

            process.env.IFRAME_ORIGINS = "'none'"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c9fb7214618a164c — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:134

            process.env.IFRAME_ORIGINS = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f6421fdd1bc9afa4 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:141

            process.env.IFRAME_ORIGINS = 'https://example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5c7ace18b783fbaa — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:146

            process.env.IFRAME_ORIGINS = '  https://example.com  '

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0e05fe259a12d581 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:153

            process.env.IFRAME_ORIGINS = 'https://domain1.com,https://domain2.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9db95bdb0f3f6338 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:158

            process.env.IFRAME_ORIGINS = 'https://domain1.com, https://domain2.com, https://domain3.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #92a0204d13a4bcbd — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:163

            process.env.IFRAME_ORIGINS = '  https://app.com  ,  https://admin.com  '

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #69945e0353a796dd — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:170

            process.env.IFRAME_ORIGINS = 'https://localhost:3000,https://localhost:4000'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #87e26fa5958f3e66 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:175

            process.env.IFRAME_ORIGINS = 'https://example.com/path1,https://example.com/path2'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #db034ae3aefe4b74 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:180

            process.env.IFRAME_ORIGINS = 'http://example.com,https://secure.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d92e17ebd68b12c6 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:185

            process.env.IFRAME_ORIGINS = 'https://example.com,'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e2644170cc2301d4 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:190

            process.env.IFRAME_ORIGINS = ',https://example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #066c74fbe5172351 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:195

            process.env.IFRAME_ORIGINS = 'https://domain1.com,,https://domain2.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #34c76972c51c8c05 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:202

            process.env.IFRAME_ORIGINS = 'https://app.example.com,https://admin.example.com,https://dashboard.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be6b2351d62a8b2b — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:207

            process.env.IFRAME_ORIGINS = 'http://localhost:3000,http://localhost:3001,http://127.0.0.1:3000'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9268a079085d0ca0 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:212

            process.env.IFRAME_ORIGINS = "'self',https://trusted.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #034e43041cccd8aa — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:219

    const originalEnv = process.env.IFRAME_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2b8555732e95556c — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:223

            process.env.IFRAME_ORIGINS = originalEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e9d1b4b481180003 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:225

            delete process.env.IFRAME_ORIGINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #124192b05e315fb8 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:230

        process.env.IFRAME_ORIGINS = '*'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #73795254f4e6a9df — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:237

        process.env.IFRAME_ORIGINS = "'self'"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ecadf76e6e3ab529 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:245

        process.env.IFRAME_ORIGINS = "'none'"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #831617345be26113 — Environment-variable access.

repo/packages/server/src/utils/XSS.test.ts:253

        process.env.IFRAME_ORIGINS = 'https://embed.example.com,https://admin.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9dd79f2e76841d21 — Environment-variable access.

repo/packages/server/src/utils/XSS.ts:26

    return process.env.CORS_ORIGINS ?? ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c9b9ceb2dfc253a2 — Environment-variable access.

repo/packages/server/src/utils/XSS.ts:30

    return process.env.CORS_ALLOW_CREDENTIALS === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #112ab812777c14b6 — Environment-variable access.

repo/packages/server/src/utils/XSS.ts:34

    const appUrl = process.env.APP_URL?.trim()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4653cfe3d902f946 — Environment-variable access.

repo/packages/server/src/utils/XSS.ts:161

    const origins = (process.env.IFRAME_ORIGINS?.trim() || undefined) ?? "'self'"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dccd3e75684da27b — Environment-variable access.

repo/packages/server/src/utils/buildAgentflow.ts:174

const MAX_LOOP_COUNT = process.env.MAX_LOOP_COUNT ? parseInt(process.env.MAX_LOOP_COUNT) : 10

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #876329af89473712 — Environment-variable access.

repo/packages/server/src/utils/buildAgentflow.ts:1912

    const maxIterations = process.env.MAX_ITERATIONS ? parseInt(process.env.MAX_ITERATIONS) : 1000

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04cebc5c16140689 — Environment-variable access.

repo/packages/server/src/utils/buildChatflow.ts:1084

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7ed973ddc1efd914 — Environment-variable access.

repo/packages/server/src/utils/config.ts:10

    dir: process.env.LOG_PATH ?? path.join(__dirname, '..', '..', 'logs'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c21967763d2e87d — Environment-variable access.

repo/packages/server/src/utils/config.ts:12

        level: process.env.LOG_LEVEL ?? 'info',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #119d96b8c246b5fe — Environment-variable access.

repo/packages/server/src/utils/config.ts:17

        level: process.env.LOG_LEVEL ?? 'info',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f9f3ce5dd267a1e — Filesystem access.

repo/packages/server/src/utils/index.ts:6

import fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d838047a73c2eaa — Environment-variable access.

repo/packages/server/src/utils/index.ts:76

const USE_AWS_SECRETS_MANAGER = process.env.SECRETKEY_STORAGE_TYPE === 'aws'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #65cb5a188246b47c — Environment-variable access.

repo/packages/server/src/utils/index.ts:78

    const region = process.env.SECRETKEY_AWS_REGION || 'us-east-1' // Default region if not provided

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0eb2efb90cbbb549 — Environment-variable access.

repo/packages/server/src/utils/index.ts:79

    const accessKeyId = process.env.SECRETKEY_AWS_ACCESS_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fcad8c56a85e483f — Environment-variable access.

repo/packages/server/src/utils/index.ts:80

    const secretAccessKey = process.env.SECRETKEY_AWS_SECRET_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bb2b21d832a2af54 — Environment-variable access.

repo/packages/server/src/utils/index.ts:120

    if (process.env[variableName] === undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7628ffc58b33c416 — Environment-variable access.

repo/packages/server/src/utils/index.ts:125

    return process.env[variableName] as string

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ea4d7ae53080d5c — Environment-variable access.

repo/packages/server/src/utils/index.ts:852

                value = process.env[item.name] ?? ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a92e8eff01a66998 — Environment-variable access.

repo/packages/server/src/utils/index.ts:1554

    if (process.env.FLOWISE_SECRETKEY_OVERWRITE !== undefined && process.env.FLOWISE_SECRETKEY_OVERWRITE !== '') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f2bb3b45f0616850 — Environment-variable access.

repo/packages/server/src/utils/index.ts:1555

        return process.env.FLOWISE_SECRETKEY_OVERWRITE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e854ef160b06d888 — Environment-variable access.

repo/packages/server/src/utils/index.ts:1558

        const secretId = process.env.SECRETKEY_AWS_NAME || 'FlowiseEncryptionKey'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1be58c22b5fed37c — Filesystem access.

repo/packages/server/src/utils/index.ts:1581

        return await fs.promises.readFile(getEncryptionKeyPath(), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e4b79c2c1e11f0d — Environment-variable access.

repo/packages/server/src/utils/index.ts:1584

        const defaultLocation = process.env.SECRETKEY_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f665552f23affb95 — Environment-variable access.

repo/packages/server/src/utils/index.ts:1585

            ? path.join(process.env.SECRETKEY_PATH, 'encryption.key')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #751ae852dd073c7c — Filesystem access.

repo/packages/server/src/utils/index.ts:1587

        await fs.promises.writeFile(defaultLocation, encryptKey)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7bb11d665061dca6 — Environment-variable access.

repo/packages/server/src/utils/index.ts:1670

    return process.env.SECRETKEY_PATH ? process.env.SECRETKEY_PATH : path.join(getUserHome(), '.flowise')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4dffebcbf530a455 — Environment-variable access.

repo/packages/server/src/utils/index.ts:1697

    const envVal = process.env[envKey]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9d4a1fc12d1b8d8 — Environment-variable access.

repo/packages/server/src/utils/index.ts:1704

        const prefix = process.env.SECRETKEY_AWS_AUTH_PREFIX || 'Flowise'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3b4e5f1218545777 — Filesystem access.

repo/packages/server/src/utils/index.ts:1729

        return await fs.promises.readFile(filePath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c3793d006b05ea04 — Filesystem access.

repo/packages/server/src/utils/index.ts:1735

        await fs.promises.writeFile(filePath, value)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36ad84d1f246346f — Filesystem access.

repo/packages/server/src/utils/index.ts:1981

        const content = await fs.promises.readFile(packagejsonPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f8aae8e5d433e9f — Environment-variable access.

repo/packages/server/src/utils/index.ts:2019

    return process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8e301b2a1fc58dd8 — Environment-variable access.

repo/packages/server/src/utils/index.ts:2020

        ? path.join(process.env.BLOB_STORAGE_PATH, 'uploads')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01aad6b0b4d42c63 — Environment-variable access.

repo/packages/server/src/utils/logger.test.ts:127

            process.env.DEBUG = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #46274fa7adb4cfc7 — Environment-variable access.

repo/packages/server/src/utils/logger.test.ts:128

            process.env.LOG_SANITIZE_BODY_FIELDS = 'password,secret'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a846743da29c83d1 — Environment-variable access.

repo/packages/server/src/utils/logger.test.ts:129

            process.env.LOG_SANITIZE_HEADER_FIELDS = 'authorization'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f247c7668fba7316 — Environment-variable access.

repo/packages/server/src/utils/logger.test.ts:146

            process.env.DEBUG = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9ceaeceefe949b49 — Environment-variable access.

repo/packages/server/src/utils/logger.test.ts:147

            delete process.env.LOG_SANITIZE_BODY_FIELDS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #87bae041fbac3fcf — Environment-variable access.

repo/packages/server/src/utils/logger.test.ts:148

            delete process.env.LOG_SANITIZE_HEADER_FIELDS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3637a48cb7416565 — Filesystem access.

repo/packages/server/src/utils/logger.ts:3

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1b1d91b91958eab0 — Environment-variable access.

repo/packages/server/src/utils/logger.ts:40

    exceptionHandlers: [...(process.env.DEBUG && process.env.DEBUG === 'true' ? [new transports.Console()] : []), ...errorTransports],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c74a2edb0fd665d0 — Environment-variable access.

repo/packages/server/src/utils/logger.ts:42

        ...(process.env.DEBUG && process.env.DEBUG === 'true' ? [new transports.Console()] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0908b2cad3945f01 — Environment-variable access.

repo/packages/server/src/utils/logger.ts:45

        ...((!process.env.DEBUG || process.env.DEBUG !== 'true') && errorTransports.length === 0 ? [new transports.Console()] : [])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #db0a09c886200656 — Environment-variable access.

repo/packages/server/src/utils/logger.ts:54

    transports: [...(process.env.DEBUG && process.env.DEBUG === 'true' ? [new transports.Console()] : []), ...requestTransports]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6826e3a3d8bca7d1 — Environment-variable access.

repo/packages/server/src/utils/logger.ts:58

    if (!process.env.LOG_SANITIZE_BODY_FIELDS) return []

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #50ced3708ebaf29d — Environment-variable access.

repo/packages/server/src/utils/logger.ts:59

    return (process.env.LOG_SANITIZE_BODY_FIELDS as string)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b70ff241421f8bf — Environment-variable access.

repo/packages/server/src/utils/logger.ts:66

    if (!process.env.LOG_SANITIZE_HEADER_FIELDS) return []

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #549cbfd405e606ca — Environment-variable access.

repo/packages/server/src/utils/logger.ts:67

    return (process.env.LOG_SANITIZE_HEADER_FIELDS as string)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09f259f8ce56ad17 — Environment-variable access.

repo/packages/server/src/utils/logger.ts:96

        const isDebugLevel = logger.level === 'debug' || process.env.DEBUG === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9174dc75b0901abf — Environment-variable access.

repo/packages/server/src/utils/logger.ts:151

    transports: [...(process.env.DEBUG === 'true' ? [new transports.Console()] : []), ...auditTransports]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #80a7e3628bb84671 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:44

    delete process.env.OAUTH2_SECURITY_CHECK

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8296e77c9e8c4a9a — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:45

    delete process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #95f7cc1d7293be41 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:63

        process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS = 'custom.example.com, another.dev'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f444f3ff6bb46d15 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:73

        process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS = 'github.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #92de99f780975886 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:80

        process.env.OAUTH2_SECURITY_CHECK = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #35dd1f04a451ad32 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:81

        process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS = 'my.corp.dev'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6fbdd10a975e62e8 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:87

        process.env.OAUTH2_SECURITY_CHECK = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #299b51cc9e359dc0 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:93

        process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS = '  MyDomain.COM , UPPER.IO  '

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0d1a63fe04bef6ea — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:100

        process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS = ',,,valid.com,,,'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #18e6c2435effd405 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:137

            process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS = 'custom-idp.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #250febefaafb9987 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:148

            process.env.OAUTH2_SECURITY_CHECK = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #082eb13d167ff720 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:156

            process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS = 'local.dev'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #12eb26a8f822e6f2 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:161

            process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS = 'local.dev'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #05fc9d48d0b15e67 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.test.ts:166

            process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS = 'myidp.local'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #77b9382e476eab3e — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.ts:4

    return (process.env.OAUTH2_ALLOWED_TOKEN_DOMAINS ?? '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce2404c34bc62fa6 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.ts:21

    const securityCheckEnabled = process.env.OAUTH2_SECURITY_CHECK !== 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #96e6ed8957d01193 — Environment-variable access.

repo/packages/server/src/utils/oauth2Security.ts:49

    const securityCheckEnabled = process.env.OAUTH2_SECURITY_CHECK !== 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4fd9200dcc8a1306 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:25

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4256c942293dbbc9 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:26

            if (process.env.REDIS_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #97011d2c76ae4076 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:27

                this.redisClient = new Redis(process.env.REDIS_URL, {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bfbacfbd9d5b0724 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:29

                        process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f3c43dbe5ac13718 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:30

                            ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #597bb9e0d2c4c210 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:35

                    host: process.env.REDIS_HOST || 'localhost',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0b0372bfab10fed8 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:36

                    port: parseInt(process.env.REDIS_PORT || '6379'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dc21d9cf0a67cc7e — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:37

                    username: process.env.REDIS_USERNAME || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72cd3d81af3e4eaa — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:38

                    password: process.env.REDIS_PASSWORD || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #315fcc16d579bfd9 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:40

                        process.env.REDIS_TLS === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #614e1af444481e31 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:42

                                  cert: process.env.REDIS_CERT ? Buffer.from(process.env.REDIS_CERT, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #72afdad264800a24 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:43

                                  key: process.env.REDIS_KEY ? Buffer.from(process.env.REDIS_KEY, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #148ae128db9c64ac — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:44

                                  ca: process.env.REDIS_CA ? Buffer.from(process.env.REDIS_CA, 'base64') : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f0abf74e1355f6b — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:48

                        process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #824725608583e42c — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:49

                            ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ed0f124965650cf — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:60

        if (process.env.REDIS_URL && process.env.REDIS_URL.startsWith('rediss://')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9cbdc9d6d68d8505 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:64

        } else if (process.env.REDIS_TLS === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c588a4f82807d76f — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:66

                cert: process.env.REDIS_CERT ? Buffer.from(process.env.REDIS_CERT, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c943861b860dd9bf — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:67

                key: process.env.REDIS_KEY ? Buffer.from(process.env.REDIS_KEY, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b42eaee6b1c60fe — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:68

                ca: process.env.REDIS_CA ? Buffer.from(process.env.REDIS_CA, 'base64') : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba3c324cbe43bf5e — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:72

            url: process.env.REDIS_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9333f3309669a765 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:73

            host: process.env.REDIS_HOST || 'localhost',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #415d59c1b91346f3 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:74

            port: parseInt(process.env.REDIS_PORT || '6379'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a8c5ca3e7630aa3f — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:75

            username: process.env.REDIS_USERNAME || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #56353cd80086c853 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:76

            password: process.env.REDIS_PASSWORD || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #30f2c78783ddedca — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:81

                process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bae952073c24c9dc — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:82

                    ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #cdf7d3b3d8da32f4 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:97

            if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6c22add9c9a56f5 — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:160

        if (!isInitialized && process.env.MODE === MODE.QUEUE && this.queueEventsProducer) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d185d62a5f600eda — Environment-variable access.

repo/packages/server/src/utils/rateLimit.ts:184

        if (process.env.MODE === MODE.QUEUE && this.queueEvents) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a2ba6058a0897fac — Environment-variable access.

repo/packages/server/src/utils/redis.ts:4

    const keepAliveRaw = process.env.REDIS_KEEP_ALIVE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a9181a6ec31fbc6e — Environment-variable access.

repo/packages/server/src/utils/redis.ts:7

    if (process.env.REDIS_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1f59860b89bf541e — Environment-variable access.

repo/packages/server/src/utils/redis.ts:9

            url: process.env.REDIS_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6111c7b8aa6cccc3 — Environment-variable access.

repo/packages/server/src/utils/redis.ts:16

        username: process.env.REDIS_USERNAME || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #934d0cdd9a0b8180 — Environment-variable access.

repo/packages/server/src/utils/redis.ts:17

        password: process.env.REDIS_PASSWORD || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #06064a203f3d4138 — Environment-variable access.

repo/packages/server/src/utils/redis.ts:19

            host: process.env.REDIS_HOST || 'localhost',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f84a62e3da68dea — Environment-variable access.

repo/packages/server/src/utils/redis.ts:20

            port: parseInt(process.env.REDIS_PORT || '6379'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f142219935addc7 — Environment-variable access.

repo/packages/server/src/utils/redis.ts:21

            tls: process.env.REDIS_TLS === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6948309b54267b8 — Environment-variable access.

repo/packages/server/src/utils/redis.ts:22

            cert: process.env.REDIS_CERT ? Buffer.from(process.env.REDIS_CERT, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac4537e57c1ed885 — Environment-variable access.

repo/packages/server/src/utils/redis.ts:23

            key: process.env.REDIS_KEY ? Buffer.from(process.env.REDIS_KEY, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #28fa3abd2ef8f02c — Environment-variable access.

repo/packages/server/src/utils/redis.ts:24

            ca: process.env.REDIS_CA ? Buffer.from(process.env.REDIS_CA, 'base64') : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aec27acc4416635e — Environment-variable access.

repo/packages/server/src/utils/telemetry.test.ts:67

            delete process.env.POSTHOG_PUBLIC_API_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8f8383ed941b4650 — Environment-variable access.

repo/packages/server/src/utils/telemetry.test.ts:74

            process.env.POSTHOG_PUBLIC_API_KEY = 'ph-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6fa5cfe222ef2001 — Environment-variable access.

repo/packages/server/src/utils/telemetry.test.ts:97

            process.env.POSTHOG_PUBLIC_API_KEY = 'ph-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1297fce359f8b259 — Environment-variable access.

repo/packages/server/src/utils/telemetry.ts:18

        if (process.env.POSTHOG_PUBLIC_API_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #410dddfa08071a69 — Environment-variable access.

repo/packages/server/src/utils/telemetry.ts:19

            this.postHog = new PostHog(process.env.POSTHOG_PUBLIC_API_KEY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6bf47c6c38370acf — Environment-variable access.

repo/packages/server/src/utils/upsertVector.ts:307

        if (process.env.MODE === MODE.QUEUE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm)

npm first-party

expand_more 2 low-confidence finding(s)

low env_fs production #302ad3da40266008 — Environment-variable access.

repo/.eslintrc.js:25

        'no-console': [process.env.CI ? 'error' : 'warn', { allow: ['warn', 'error', 'info'] }],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c4db290a2df1a2e0 — Environment-variable access.

repo/docker/worker/healthcheck/healthcheck.js:4

const port = process.env.WORKER_PORT || 5566

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/agentflow

npm first-party

expand_more 21 low-confidence finding(s)

low egress test-only Excluded from app score #0a9e8bde5cfabd82 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/examples/src/SaveToDbDialog.tsx:37

            const res = await fetch(`${apiBaseUrl}/api/v1/chatflows`, {
                method: 'POST',
                headers: authHeaders,
                credentials: token ? 'omit' : 'include',
                body: JSON.stringify(body)
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #ad9171d9116f95e4 — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent. Non-production path — not application runtime.

repo/packages/agentflow/examples/src/SaveToDbDialog.tsx:37 · flow /tmp/closeopen-n94bn249/repo/packages/agentflow/examples/src/SaveToDbDialog.tsx:26 → /tmp/closeopen-n94bn249/repo/packages/agentflow/examples/src/SaveToDbDialog.tsx:37

            const res = await fetch(`${apiBaseUrl}/api/v1/chatflows`, {
                method: 'POST',
                headers: authHeaders,
                credentials: token ? 'omit' : 'include',
                body: JSON.stringify(body)
            })

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low pii_flow test-only Excluded from app score #bfc6cb0d0661046f — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration. Non-production path — not application runtime.

repo/packages/agentflow/examples/src/SaveToDbDialog.tsx:39 · flow /tmp/closeopen-n94bn249/repo/packages/agentflow/examples/src/SaveToDbDialog.tsx:26 → /tmp/closeopen-n94bn249/repo/packages/agentflow/examples/src/SaveToDbDialog.tsx:39

                headers: authHeaders,

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

low egress test-only Excluded from app score #72c72d52b6df0720 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/examples/src/TestRunDialog.tsx:44

            const res = await fetch(`${apiBaseUrl}/api/v1/internal-prediction/${agentflowId}`, {
                method: 'POST',
                headers: authHeaders,
                credentials: token ? 'omit' : 'include',
                body: JSON.stringify({ question: question.trim(), streaming: true, chatId })
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #2dce4fbb092ec47b — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent. Non-production path — not application runtime.

repo/packages/agentflow/examples/src/TestRunDialog.tsx:44 · flow /tmp/closeopen-n94bn249/repo/packages/agentflow/examples/src/TestRunDialog.tsx:32 → /tmp/closeopen-n94bn249/repo/packages/agentflow/examples/src/TestRunDialog.tsx:44

            const res = await fetch(`${apiBaseUrl}/api/v1/internal-prediction/${agentflowId}`, {
                method: 'POST',
                headers: authHeaders,
                credentials: token ? 'omit' : 'include',
                body: JSON.stringify({ question: question.trim(), streaming: true, chatId })
            })

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low pii_flow test-only Excluded from app score #0c61b553256a24ea — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration. Non-production path — not application runtime.

repo/packages/agentflow/examples/src/TestRunDialog.tsx:46 · flow /tmp/closeopen-n94bn249/repo/packages/agentflow/examples/src/TestRunDialog.tsx:32 → /tmp/closeopen-n94bn249/repo/packages/agentflow/examples/src/TestRunDialog.tsx:46

                headers: authHeaders,

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

low egress test-only Excluded from app score #423103b3997b3dd0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/examples/src/demos/E2eExample.tsx:62

            const res = await fetch(`${apiBaseUrl}/api/v1/chatflows/${agentflowId}`, {
                method: 'DELETE',
                headers: makeHeaders(),
                credentials
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #3dd1e1390d2e54fb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/examples/src/demos/E2eExample.tsx:237

        fetch(`${apiBaseUrl}/api/v1/chatflows/${configuredAgentflowId}`, {
            headers: makeHeaders(),
            credentials
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #68f3e712bb9f60b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/examples/src/demos/E2eExample.tsx:269

                const res = await fetch(`${apiBaseUrl}/api/v1/chatflows/${activeChatflowId}`, {
                    method: 'PUT',
                    headers: makeHeaders(true),
                    credentials,
                    body: JSON.stringify({
                        name: flowName,
                        flowData: JSON.stringify({ nodes: flow.nodes, edges: flow.edges, viewport: flow.viewport })
                    })
                })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6eeec95bd3191dbb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/chatflows.ts:22

            const response = await client.get(`/chatflows/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3d9acb0834c8ac80 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/chatflows.ts:58

            const response = await client.put(`/chatflows/${id}`, updateData)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #788a87362e5ab5d8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/credentials.ts:30

            const response = await client.get(`/components-credentials/${name}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3d83c004bf5f1404 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/credentials.ts:47

            const response = await client.get(`/credentials/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #20e3f3586385ede5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/credentials.ts:55

            const response = await client.put(`/credentials/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #33599f81ea2f3d5d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/deduplicatedClient.ts:81

        const promise = client
            .get<T, R, D>(url, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #445b8b34fa7a68a2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/deduplicatedClient.ts:99

            return client.post<T, R, D>(url, data, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e60a5dda92dd7296 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/deduplicatedClient.ts:110

        const promise = client
            .post<T, R, D>(url, data, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7ea6f819f1c8c7f1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/nodes.ts:25

            const response = await client.get(`/nodes/${name}`, { params: { client: 'agentflowsdk' } })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e4b4b2ebefd41d0a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/nodes.ts:34

            const response = await client.post(`/node-load-method/${nodeName}`, { loadMethod, ...body })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ca8193c8ec61fe0e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/tools.ts:14

            const response = await client.post(`/node-load-method/${encodeURIComponent(nodeName)}`, { loadMethod: 'listTools' })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #cd2d63cf115a2012 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/agentflow/src/infrastructure/api/tools.ts:23

            const response = await client.post(`/node-load-method/${encodeURIComponent(nodeName)}`, {
                loadMethod: 'listToolInputArgs',
                currentNode: { inputs }
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (npm): packages/ui

npm first-party

expand_more 295 low-confidence finding(s)

low egress production #95c786dd4eb06faa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/apikey.js:7

const updateAPI = (id, body) => client.put(`/apikey/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #75ae135ac16d48a1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:4

const getAssistantObj = (id, credentialId) => client.get(`/openai-assistants/${id}?credential=${credentialId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3e04ec2d51cf520e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:6

const getAllAvailableAssistants = (credentialId) => client.get(`/openai-assistants?credential=${credentialId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a613abe0c39423ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:11

const getAllAssistants = (type) => client.get('/assistants?type=' + type)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #17d54dcff8a5c76b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:13

const getSpecificAssistant = (id) => client.get(`/assistants/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #60be3fcd26ae4090 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:15

const updateAssistant = (id, body) => client.put(`/assistants/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #19595110b2f63b4a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:21

const getAssistantVectorStore = (id, credentialId) => client.get(`/openai-assistants-vector-store/${id}?credential=${credentialId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #26c7e80d212912f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:23

const listAssistantVectorStore = (credentialId) => client.get(`/openai-assistants-vector-store?credential=${credentialId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #1e7914da6b8938e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:25

const createAssistantVectorStore = (credentialId, body) => client.post(`/openai-assistants-vector-store?credential=${credentialId}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4cd13dd028a6274e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:28

    client.put(`/openai-assistants-vector-store/${id}?credential=${credentialId}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7de0a0704c29e349 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:34

    client.post(`/openai-assistants-vector-store/${id}?credential=${credentialId}`, formData, {
        headers: { 'Content-Type': 'multipart/form-data' }
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6ba5730c2c8a147d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:39

    client.patch(`/openai-assistants-vector-store/${id}?credential=${credentialId}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #365277cfcaf8fdb6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/assistants.js:43

    client.post(`/openai-assistants-file/upload?credential=${credentialId}`, formData, {
        headers: { 'Content-Type': 'multipart/form-data' }
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a95d4596f744ce1c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/attachments.js:4

    client.post(`/attachments/${chatflowid}/${chatid}`, formData, {
        headers: { 'Content-Type': 'multipart/form-data' }
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #815a4410e705db1a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/auth.js:8

const getAllPermissions = (type) => client.get(`/auth/permissions/${type}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d925a27b33b8180f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/auth.js:9

const ssoSuccess = (token) => client.get(`/auth/sso-success?token=${token}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9a1163d9e531db13 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:5

const getAllAgentflows = (type, params) => client.get(`/chatflows?type=${type}`, { params })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #67b0c80a18fd32fb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:7

const getSpecificChatflow = (id) => client.get(`/chatflows/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #84fc0fe146337ea9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:9

const getSpecificChatflowFromPublicEndpoint = (id) => client.get(`/public-chatflows/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6c0e4cc9e5bad47a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:13

const updateChatflow = (id, body) => client.put(`/chatflows/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7998787a46bc38ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:17

const getIsChatflowStreaming = (id) => client.get(`/chatflows-streaming/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #39ccedfa0b36b4bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:19

const getAllowChatflowUploads = (id) => client.get(`/chatflows-uploads/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #794b67a076d20795 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:21

const getHasChatflowChanged = (id, lastUpdatedDateTime) => client.get(`/chatflows/has-changed/${id}/${lastUpdatedDateTime}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4c6fa0c16ced3881 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:25

const setWebhookSecret = (id) => client.post(`/chatflows/${id}/webhook-secret`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #55a0af9c74472673 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:29

const getScheduleStatus = (id) => client.get(`/chatflows/${id}/schedule/status`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7ff2f49fa02c8df0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:31

const toggleScheduleEnabled = (id, enabled) => client.patch(`/chatflows/${id}/schedule/enabled`, { enabled })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #35d9586c65e4d1db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatflows.js:33

const getScheduleTriggerLogs = (id, params) => client.get(`/chatflows/${id}/schedule/trigger-logs`, { params })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #418d4e59cce06db1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatmessage.js:4

    client.get(`/internal-chatmessage/${id}`, { params: { feedback: true, ...params } })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3f05b86362b28d5b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatmessage.js:6

    client.get(`/chatmessage/${id}`, { params: { order: 'DESC', feedback: true, ...params } })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #92ae4192536d664c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatmessage.js:7

const getChatmessageFromPK = (id, params = {}) => client.get(`/chatmessage/${id}`, { params: { order: 'ASC', feedback: true, ...params } })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #bcc3de6939558c59 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatmessage.js:9

const abortMessage = (chatflowid, chatid) => client.put(`/chatmessage/abort/${chatflowid}/${chatid}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6e8a59031cc6ba08 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatmessagefeedback.js:3

const addFeedback = (id, body) => client.post(`/feedback/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #374c9a1bbddaa257 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/chatmessagefeedback.js:4

const updateFeedback = (id, body) => client.put(`/feedback/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #85ba2cdca457e560 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/client.js:24

                const response = await axios.post(`${baseURL}/api/v1/auth/refreshToken`, {}, { withCredentials: true })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #12d697f7692fbd34 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/client.js:27

                    return apiClient.request(originalRequest)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #521dae1d47e1efc9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/config.js:3

const getConfig = (id) => client.get(`/flow-config/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3f020a9409d5a1eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/credentials.js:5

const getCredentialsByName = (componentCredentialName) => client.get(`/credentials?credentialName=${componentCredentialName}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #28b67e188bf6a34a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/credentials.js:9

const getSpecificCredential = (id) => client.get(`/credentials/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a6095ff2eb72dfc4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/credentials.js:11

const getSpecificComponentCredential = (name) => client.get(`/components-credentials/${name}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5fd67f3f7c3fbdf0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/credentials.js:15

const updateCredential = (id, body) => client.put(`/credentials/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7d646c105ca5fc4e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/credentials.js:19

const revealCredential = (id) => client.get(`/credentials/${id}/reveal`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ad9f305b747642c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/custommcpservers.js:5

const getCustomMcpServer = (id) => client.get(`/custom-mcp-servers/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #22a29ce8478f8830 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/custommcpservers.js:9

const updateCustomMcpServer = (id, body) => client.put(`/custom-mcp-servers/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #13d2e8f7d6bc193e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/custommcpservers.js:13

const authorizeCustomMcpServer = (id) => client.post(`/custom-mcp-servers/${id}/authorize`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #fefeb896953d1ec3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/custommcpservers.js:15

const getCustomMcpServerTools = (id) => client.get(`/custom-mcp-servers/${id}/tools`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8bb7d8d5c599f64c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/dataset.js:6

const getDataset = (id, params) => client.get(`/datasets/set/${id}`, { params })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f385e342ff2089df — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/dataset.js:8

const updateDataset = (id, body) => client.put(`/datasets/set/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a34a75965114473f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/dataset.js:13

const updateDatasetRow = (id, body) => client.put(`/datasets/rows/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9818e5ff6538e075 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/documentstore.js:5

const getSpecificDocumentStore = (id) => client.get(`/document-store/store/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a33c28d5968db868 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/documentstore.js:7

const updateDocumentStore = (id, body) => client.put(`/document-store/store/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ce1b029f712f0db1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/documentstore.js:9

const getDocumentStoreConfig = (storeId, loaderId) => client.get(`/document-store/store-configs/${storeId}/${loaderId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e463743caade9f22 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/documentstore.js:14

    client.put(`/document-store/chunks/${storeId}/${loaderId}/${chunkId}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b17b3b2ee0c083da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/documentstore.js:16

const getFileChunks = (storeId, fileId, pageNo) => client.get(`/document-store/chunks/${storeId}/${fileId}/${pageNo}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8668c4d6288c6fe1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/documentstore.js:18

const processLoader = (body, loaderId) => client.post(`/document-store/loader/process/${loaderId}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #277ec3a7064a7cab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/documentstore.js:20

const refreshLoader = (storeId) => client.post(`/document-store/refresh/${storeId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #bd41572dc2223de3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/documentstore.js:34

const generateDocStoreToolDesc = (storeId, body) => client.post('/document-store/generate-tool-desc/' + storeId, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ea2e0ae5d7cd3c92 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/evaluations.js:5

const getIsOutdated = (id) => client.get(`/evaluations/is-outdated/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c529d3d5c4bf17eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/evaluations.js:6

const getEvaluation = (id) => client.get(`/evaluations/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #1b1a82fc21730c27 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/evaluations.js:9

const runAgain = (id) => client.post(`/evaluations/run-again/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #609f7827016fd1a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/evaluations.js:10

const getVersions = (id) => client.get(`/evaluations/versions/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #630dd3820f18f085 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/evaluators.js:7

const getEvaluator = (id) => client.get(`/evaluators/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #45588998414cb2ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/evaluators.js:8

const updateEvaluator = (id, body) => client.put(`/evaluators/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #64017181c31e3b97 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/executions.js:5

const getExecutionById = (executionId) => client.get(`/executions/${executionId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a58649034448f610 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/executions.js:6

const getExecutionByIdPublic = (executionId) => client.get(`/public-executions/${executionId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b124ab10f7162e65 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/executions.js:7

const updateExecution = (executionId, body) => client.put(`/executions/${executionId}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3309de2c91d0cc5d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/feedback.js:3

const getStatsFromChatflow = (id, params) => client.get(`/stats/${id}`, { params: { ...params } })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #80172e4efc88dce7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/lead.js:3

const getLeads = (id) => client.get(`/leads/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4d54318ecfc9fff7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/log.js:3

const getLogs = (startDate, endDate) => client.get(`/logs?startDate=${startDate}&endDate=${endDate}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f305e2c4f471edcd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/loginmethod.js:4

const getLoginMethods = (organizationId) => client.get(`/loginmethod?organizationId=${organizationId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0935445f0392b859 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/mcpserver.js:3

const getMcpServerConfig = (id) => client.get(`/mcp-server/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0fedc6fd2b206702 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/mcpserver.js:5

const createMcpServerConfig = (id, body) => client.post(`/mcp-server/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #23bf27b502e9dfc8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/mcpserver.js:7

const updateMcpServerConfig = (id, body) => client.put(`/mcp-server/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d05417a930457513 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/mcpserver.js:11

const refreshMcpToken = (id) => client.post(`/mcp-server/${id}/refresh`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8d3c106cbe91b6f1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/nodes.js:5

const getSpecificNode = (name) => client.get(`/nodes/${name}`, { params: { client: 'agentflowv2' } })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #96c784287293284a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/nodes.js:6

const getNodesByCategory = (name) => client.get(`/nodes/category/${name}`, { params: { client: 'agentflowv2' } })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #72f7b1668e7b14ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/nodes.js:10

const executeNodeLoadMethod = (name, body) => client.post(`/node-load-method/${name}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #331d317c328729e3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/oauth2.js:3

const authorize = (credentialId) => client.post(`/oauth2-credential/authorize/${credentialId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0f48945d981271c4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/oauth2.js:5

const refresh = (credentialId) => client.post(`/oauth2-credential/refresh/${credentialId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #313420a668630ae2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/oauth2.js:7

const getCallback = (queryParams) => client.get(`/oauth2-credential/callback?${queryParams}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3d82571f3f7f6ae8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/prediction.js:3

const sendMessageAndGetPrediction = (id, input) => client.post(`/internal-prediction/${id}`, input)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e014b3d9d2756879 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/prediction.js:4

const sendMessageAndStreamPrediction = (id, input) => client.post(`/internal-prediction/stream/${id}`, input)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a86854bbac6c2600 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/prediction.js:5

const sendMessageAndGetPredictionPublic = (id, input) => client.post(`/prediction/${id}`, input)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8cd061ba6b305861 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/role.js:3

const getAllRolesByOrganizationId = (organizationId) => client.get(`/role?organizationId=${organizationId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #34ef565445c0238f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/role.js:4

const getRoleById = (id) => client.get(`/auth/roles/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #136d3356840f8779 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/role.js:7

const getRoleByName = (name) => client.get(`/auth/roles/name/${name}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #cbe53ce85c1f4767 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/scraper.js:4

    client.get(`/fetch-links?url=${encodeURIComponent(url)}&relativeLinksMethod=${relativeLinksMethod}&limit=${relativeLinksLimit}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9068642ee845a77d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/sso.js:3

const ssoLogin = (providerName) => client.get(`/${providerName}/login`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #bbf2b222d05bc002 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/tools.js:5

const getSpecificTool = (id) => client.get(`/tools/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #06ebe9ec9851cdad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/tools.js:9

const updateTool = (id, body) => client.put(`/tools/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #eec830dd1ed2d8b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:4

const getUserById = (id) => client.get(`/user?id=${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e5b5ea2b4fb26594 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:8

const getAllUsersByOrganizationId = (organizationId) => client.get(`/organizationuser?organizationId=${organizationId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f1d75c206de61887 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:10

    client.get(`/organizationuser?organizationId=${organizationId}&userId=${userId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f66ac54269922d65 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:11

const getOrganizationsByUserId = (userId) => client.get(`/organizationuser?userId=${userId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6e20d4832ec636d9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:17

    client.get(`/organization/additional-seats-quantity?subscriptionId=${subscriptionId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0bb63e51f9008b5e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:18

const getCustomerDefaultSource = (customerId) => client.get(`/organization/customer-default-source?customerId=${customerId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #92fea643af66fde9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:20

    client.get(`/organization/additional-seats-proration?subscriptionId=${subscriptionId}&quantity=${quantity}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #bedb023799c1d3bd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:24

    client.get(`/organization/plan-proration?subscriptionId=${subscriptionId}&newPlanId=${newPlanId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b95af7845585352f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:30

const getAllUsersByWorkspaceId = (workspaceId) => client.get(`/workspaceuser?workspaceId=${workspaceId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e61d18c65627cc38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:31

const getUserByRoleId = (roleId) => client.get(`/workspaceuser?roleId=${roleId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #1ef6c38bc55c3633 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:32

const getUserByUserIdWorkspaceId = (userId, workspaceId) => client.get(`/workspaceuser?userId=${userId}&workspaceId=${workspaceId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #1839065c26239db7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:33

const getWorkspacesByUserId = (userId) => client.get(`/workspaceuser?userId=${userId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7f26404e2eb275f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/user.js:35

    client.get(`/workspaceuser?organizationId=${organizationId}&userId=${userId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8b795dc1f8b098e2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/validation.js:3

const checkValidation = (id) => client.get(`/validation/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0aa79b534e4a97b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/variables.js:7

const updateVariable = (id, body) => client.put(`/variables/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e30a52f9fe5651f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/vectorstore.js:3

const upsertVectorStore = (id, input) => client.post(`/vector/internal-upsert/${id}`, input)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4daaa5a8efb6e842 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/vectorstore.js:5

    client.post(`/vector/internal-upsert/${id}`, formData, {
        headers: { 'Content-Type': 'multipart/form-data' }
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4faaeae7d599a8cc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/vectorstore.js:8

const getUpsertHistory = (id, params = {}) => client.get(`/upsert-history/${id}`, { params: { order: 'DESC', ...params } })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a66a553ad74f1ed6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/webhooklistener.js:3

const register = (chatflowid) => client.post(`/webhook-listener/${chatflowid}/register`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #53abe7238ea197c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/workspace.js:3

const getAllWorkspacesByOrganizationId = (organizationId) => client.get(`/workspace?organizationId=${organizationId}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #616b0f4aec17543b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/workspace.js:5

const getWorkspaceById = (id) => client.get(`/workspace?id=${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #068d4834671d6135 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/workspace.js:7

const unlinkUsers = (id, body) => client.post(`/workspace/unlink-users/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ac9882680a026425 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/workspace.js:8

const linkUsers = (id, body) => client.post(`/workspace/link-users/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d20860977b968ac4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/workspace.js:10

const switchWorkspace = (id) => client.post(`/workspace/switch?id=${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b2efcdb959cd14d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/workspace.js:16

const getSharedWorkspacesForItem = (id) => client.get(`/workspace/shared/${id}`)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ea1f49c978c8ef21 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/api/workspace.js:17

const setSharedWorkspacesForItem = (id, body) => client.post(`/workspace/shared/${id}`, body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #05f7a567d2bf0488 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/OrgWorkspaceBreadcrumbs/index.jsx:123

        getWorkspacesByUserIdApi.request(user.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f4e68c50ba4ece93 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/OrgWorkspaceBreadcrumbs/index.jsx:140

            getWorkspacesByUserIdApi.request(user.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #90290c8d7850a0dc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/OrgWorkspaceBreadcrumbs/index.jsx:169

            switchWorkspaceApi.request(id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7e877a75ca17c634 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/OrgWorkspaceBreadcrumbs/index.jsx:176

            getOrganizationsByUserIdApi.request(user.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #30284aad92b509de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/OrgWorkspaceBreadcrumbs/index.jsx:207

                switchWorkspaceApi.request(sortedWorkspaces[0].id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3493c2865aef166e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/OrgWorkspaceBreadcrumbs/index.jsx:240

            getWorkspacesByUserIdApi.request(user.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4752385893ae0b30 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/ProfileSection/index.jsx:281

            importAllApi.request(body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #1f92ee7a9ce1d588 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/ProfileSection/index.jsx:323

        exportAllApi.request(body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #03da2355b616ef60 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/WorkspaceSwitcher/index.jsx:104

        getWorkspacesByOrganizationIdUserIdApi.request(user.activeOrganizationId, user.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #db0158e57c7550d8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/WorkspaceSwitcher/index.jsx:115

            switchWorkspaceApi.request(id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5e0d538a5bcbaa58 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/WorkspaceSwitcher/index.jsx:131

                        getWorkspacesByOrganizationIdUserIdApi.request(user.activeOrganizationId, user.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9fb698039919bc1d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/WorkspaceSwitcher/index.jsx:133

                        getWorkspacesByUserIdApi.request(user.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #824807af93554c31 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/ui/src/layout/MainLayout/Header/index.jsx:202

                    const response = await fetch('https://api.github.com/repos/FlowiseAI/Flowise')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #24388906d572224d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/serviceWorker.js:66

    fetch(swUrl, {
        headers: { 'Service-Worker': 'script' }
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #0660117782ef4236 — Environment-variable access.

repo/packages/ui/src/serviceWorker.js:90

    if (process.env.NODE_ENV === 'production' && 'serviceWorker' in navigator) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #758fe7df9587de8e — Environment-variable access.

repo/packages/ui/src/serviceWorker.js:92

        const publicUrl = new URL(process.env.PUBLIC_URL, window.location.href)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6e043d0796bb5c6 — Environment-variable access.

repo/packages/ui/src/serviceWorker.js:101

            const swUrl = `${process.env.PUBLIC_URL}/service-worker.js`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #eab017d13d06b532 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/button/FlowListMenu.jsx:116

                await updateFlowsApi.request(params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c104e093c84e6682 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/button/FlowListMenu.jsx:186

            await updateChatflowApi.request(chatflow.id, updateBody)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #770d47b84c0ae971 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/button/FlowListMenu.jsx:196

                await updateFlowsApi.request(params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6e4b75b60d636ba9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/button/FlowListMenu.jsx:235

            await updateChatflowApi.request(chatflow.id, updateBody)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0abcbda03e9aa743 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/button/FlowListMenu.jsx:243

                await updateFlowsApi.request(params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #27d60b311b7a41b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/button/FlowListMenu.jsx:285

                    await updateFlowsApi.request(params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8abac8cdf6603d22 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/AboutDialog.jsx:16

            const latestReleaseReq = axios.get('https://api.github.com/repos/FlowiseAI/Flowise/releases/latest')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b408c9d3f1e11f6c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/AboutDialog.jsx:17

            const currentVersionReq = axios.get(`${baseURL}/api/v1/version`, {
                withCredentials: true,
                headers: { 'Content-type': 'application/json', 'x-request-from': 'internal' }
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c5e8e753119d95cf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ExpandTextDialog.jsx:169

                            executeCustomFunctionNodeApi.request({ javascriptFunction: inputValue })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5e62c9098fedc89f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ExportAsTemplateDialog.jsx:133

        saveCustomTemplateApi.request(template)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #742d7ce2efce1d5b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/InviteUsersDialog.jsx:192

        getAllRolesApi.request(currentUser.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #41cda8f4e3f82a36 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/InviteUsersDialog.jsx:193

        getAllWorkspacesByOrganizationIdApi.request(currentUser.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d5ac9ca45aa8caf1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/InviteUsersDialog.jsx:211

            getWorkspacesByUserIdApi.request(dialogProps.data.userId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b69bb6c91452232c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/NodeInfoDialog.jsx:36

            getNodeConfigApi.request(dialogProps.data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c282589e3d9e69c3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/PromptLangsmithHubDialog.jsx:99

            getAvailablePromptsApi.request({ tags: promptType === 'template' ? 'StringPromptTemplate&' : 'ChatPromptTemplate&' })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #bd83cd6528f25e2b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/PromptLangsmithHubDialog.jsx:210

        getAvailablePromptsApi.request({ tags: tags })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2b643a2c1f7f0c2b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ShareWithWorkspaceDialog.jsx:105

            getWorkspacesByOrganizationIdUserIdApi.request(user.activeOrganizationId, user.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ed74842c96fd5d52 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ShareWithWorkspaceDialog.jsx:108

        getSharedWorkspacesForItemApi.request(dialogProps.data.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9a683f20a4ddd9f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewLeadsDialog.jsx:98

            getLeadsApi.request(dialogProps.chatflow.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #91c0b6af10d95425 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewMessagesDialog.jsx:220

        getChatmessageApi.request(dialogProps.chatflow.id, {
            chatType: chatTypes.length ? chatTypes : undefined,
            feedbackType: feedbackTypes.length ? feedbackTypes : undefined,
            startDate: startDate,
            endDate: endDate,
            order: 'DESC',
            page: page,
            limit: limit
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #835d2bf16d06d235 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewMessagesDialog.jsx:229

        getStatsApi.request(dialogProps.chatflow.id, {
            chatType: chatTypes.length ? chatTypes : undefined,
            feedbackType: feedbackTypes.length ? feedbackTypes : undefined,
            startDate: startDate,
            endDate: endDate
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ef90c0bba940f6dd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewMessagesDialog.jsx:451

                getChatmessageApi.request(chatflowid, {
                    startDate: startDate,
                    endDate: endDate,
                    chatType: chatTypeFilter.length ? chatTypeFilter : undefined,
                    feedbackType: feedbackTypeFilter.length ? feedbackTypeFilter : undefined
                })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #13e48e788915cda3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewMessagesDialog.jsx:457

                getStatsApi.request(chatflowid, {
                    startDate: startDate,
                    endDate: endDate,
                    chatType: chatTypeFilter.length ? chatTypeFilter : undefined,
                    feedbackType: feedbackTypeFilter.length ? feedbackTypeFilter : undefined
                })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #94e372fe9ca14b53 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewMessagesDialog.jsx:613

            getChatmessageFromPKApi.request(dialogProps.chatflow.id, {
                ...transformChatPKToParams(getChatPK(chatmsg)),
                feedbackType: feedbackTypeFilter
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f58acd208e098d60 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewMessagesDialog.jsx:618

            getChatmessageFromPKApi.request(dialogProps.chatflow.id, transformChatPKToParams(getChatPK(chatmsg)))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #54aacbd74b337376 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewMessagesDialog.jsx:628

            const response = await axios.post(
                `${baseURL}/api/v1/openai-assistants-file/download`,
                { fileName: fileAnnotation.fileName, chatflowId: dialogProps.chatflow.id, chatId: selectedChatId },
                { responseType: 'blob' }
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #40094a2fd31a2506 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewMessagesDialog.jsx:733

                    getChatmessageFromPKApi.request(dialogProps.chatflow.id, {
                        ...transformChatPKToParams(chatPK),
                        feedbackType: feedbackTypeFilter
                    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3c2d6b1e82ae4d2a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewMessagesDialog.jsx:738

                    getChatmessageFromPKApi.request(dialogProps.chatflow.id, transformChatPKToParams(chatPK))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4685df36e2da85f2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dialog/ViewMessagesDialog.jsx:756

            getStatsApi.request(dialogProps.chatflow.id, {
                startDate: startDate,
                endDate: endDate
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #89e5eb54d58523da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/dropdown/AsyncDropdown.jsx:48

    let lists = await axios
        .post(
            `${baseURL}/api/v1/node-load-method/${nodeData.name}`,
            { ...nodeData, loadMethod, previousNodes, currentNode, credential: credentialId },
            config
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #550613cbe8f0a845 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/extended/AudioWaveform.jsx:117

                    const response = await fetch(audioSrc)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f3674fe8c540e9cc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/extended/McpServer.jsx:201

            getMcpServerConfigApi.request(dialogProps.chatflow.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5859071dbc069bf2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/extended/OverrideConfig.jsx:375

            getConfigApi.request(dialogProps.chatflow.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #dc41015a689599ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/subscription/PricingDialog.jsx:53

        getAdditionalSeatsQuantityApi.request(currentUser?.activeOrganizationSubscriptionId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #1fe369c755edd531 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/subscription/PricingDialog.jsx:66

        getCustomerDefaultSourceApi.request(currentUser?.activeOrganizationCustomerId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e25c84c5b77e94ef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/subscription/PricingDialog.jsx:141

            getPlanProrationApi.request(currentUser.activeOrganizationSubscriptionId, selectedPlan.prodId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #19943d11f62c5c2d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/subscription/PricingDialog.jsx:181

                getAllWorkspacesApi.request(currentUser?.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2a6598ec0b696097 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/ui-component/subscription/PricingDialog.jsx:182

                getAllAPIKeysApi.request({ type: 'organization' })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5aabb7851fb5a6d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/account/index.jsx:112

            getUserByIdApi.request(currentUser.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f3a3471c12bc1747 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/account/index.jsx:122

            getAdditionalSeatsQuantityApi.request(currentUser?.activeOrganizationSubscriptionId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9c70da9f85b81f80 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/account/index.jsx:170

            getCustomerDefaultSourceApi.request(currentUser?.activeOrganizationCustomerId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2278adb844060d8e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/account/index.jsx:377

            await updateAdditionalSeatsApi.request(
                currentUser?.activeOrganizationSubscriptionId,
                newSeatsAmount,
                prorationInfo.prorationDate
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #507a11a9e1b9a022 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/account/index.jsx:395

            getAdditionalSeatsQuantityApi.request(currentUser?.activeOrganizationSubscriptionId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #1e42e4611b33c441 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/account/index.jsx:427

            getAdditionalSeatsProrationApi.request(currentUser.activeOrganizationSubscriptionId, totalAdditionalSeats)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #33b30212d5151673 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/account/index.jsx:1526

                        onClick={() => deleteAccountApi.request({ confirmationText: deleteConfirmationText })}

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c1d46f164a968fcc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentexecutions/ExecutionDetails.jsx:638

        updateExecutionApi.request(localMetadata.id, { isPublic: newIsPublic }).then(() => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6a239f1c8c71787e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentexecutions/ExecutionDetails.jsx:959

                    updateExecutionApi.request(localMetadata.id, { isPublic: false }).then(() => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ac06c3fd99704e6f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentexecutions/NodeExecutionDetails.jsx:182

            const response = await axios.post(
                `${baseURL}/api/v1/openai-assistants-file/download`,
                { fileName: fileAnnotation.fileName, chatflowId: metadata?.agentflowId, chatId: metadata?.sessionId },
                { responseType: 'blob' }
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #fe6446c3be46ac81 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentexecutions/PublicExecutionDetails.jsx:30

        getExecutionByIdPublicApi.request(executionId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d21cc4d4f122d680 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentexecutions/PublicExecutionDetails.jsx:95

                                getExecutionByIdPublicApi.request(executionId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5e54da18f1651eaf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentexecutions/PublicExecutionDetails.jsx:98

                                getExecutionByIdPublicApi.request(executionId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #16c79fbe02276994 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentexecutions/ShareExecutionDialog.jsx:59

        updateExecutionApi.request(executionId, { isPublic: false })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e299b4dc7d3b919e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentexecutions/index.jsx:171

        deleteExecutionsApi.request(selectedExecutionIds)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6081a7eecb2b105b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentexecutions/index.jsx:417

                                    getExecutionByIdApi.request(executionId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9c69d826909314b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentflowsv2/Canvas.jsx:247

                createNewChatflowApi.request(newChatflowBody)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3a5697d63cbf63a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentflowsv2/Canvas.jsx:253

                updateChatflowApi.request(chatflow.id, updateBody)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d91940b9cdd20c8a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/agentflowsv2/Canvas.jsx:595

            getSpecificChatflowApi.request(chatflowId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b5adf9d5434b338b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/apikey/index.jsx:253

        getAllAPIKeysApi.request(params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #fddded9aa3f71105 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/assistants/custom/CustomAssistantConfigurePreview.jsx:746

                getSpecificAssistantApi.request(customAssistantId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ae7271c1acadf4ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/assistants/custom/CustomAssistantConfigurePreview.jsx:770

                    getSpecificChatflowApi.request(assistantDetails.flowId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9acaf110f3af58d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/assistants/openai/AssistantDialog.jsx:268

            getSpecificAssistantApi.request(dialogProps.assistantId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7cf7836f23be1f63 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/assistants/openai/AssistantDialog.jsx:275

            getAssistantObjApi.request(dialogProps.selectedOpenAIAssistantId, dialogProps.credential)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #cb7897cb4a642307 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/assistants/openai/AssistantVectorStoreDialog.jsx:111

            getAssistantVectorStoreApi.request(dialogProps.data.id, dialogProps.credential)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a7301801a384f6fb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/assistants/openai/AssistantVectorStoreDialog.jsx:112

            listAssistantVectorStoreApi.request(dialogProps.credential)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7dcfac5751b27210 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/assistants/openai/AssistantVectorStoreDialog.jsx:114

            listAssistantVectorStoreApi.request(dialogProps.credential)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e966764d66ffed12 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/assistants/openai/AssistantVectorStoreDialog.jsx:304

                                getAssistantVectorStoreApi.request(newValue, dialogProps.credential)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5f49c5fd2d2f8ab7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/assistants/openai/LoadAssistantDialog.jsx:80

                            if (newValue) getAllAvailableAssistantsApi.request(newValue)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ca6f919f170c75a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/auth/confirm-email-change.jsx:56

            confirmApi.request({ user: { tempToken: token } })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #86686c6d6c216bf2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/auth/forgotPassword.jsx:58

        await forgotPasswordApi.request(body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8db3d926c54037d8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/auth/loginActivity.jsx:123

        getLoginActivityApi.request({
            pageNo: _page,
            startDate: _start,
            endDate: _end,
            activityCodes: activityCodes
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #eaefdd4d481cc5de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/auth/loginActivity.jsx:185

        getLoginActivityApi.request({
            pageNo: 1
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f213e0163c278611 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/auth/register.jsx:145

                await registerApi.request(body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3bb3b534ac69f4c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/auth/register.jsx:171

                await registerApi.request(body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d0276aa23c9f5488 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/auth/signIn.jsx:84

        loginApi.request(body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f2323be8b2981c42 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/auth/signIn.jsx:170

            await resendVerificationApi.request({ email: usernameVal })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d64c21200d749ede — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/auth/ssoConfig.jsx:406

        getLoginMethodsApi.request(currentUser.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #66860db014458c40 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/auth/verify-email.jsx:58

            accountVerifyApi.request({ user: { tempToken: token } })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f6d61c3b2bcc77c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/canvas/CanvasHeader.jsx:274

            updateChatflowApi.request(chatflow.id, updateBody)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #84794d0a2d8f730d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/canvas/CanvasHeader.jsx:359

            getScheduleStatusApi.request(chatflow.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #10828d588f364c0b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/canvas/CanvasHeader.jsx:396

        toggleScheduleEnabledApi.request(chatflow.id, newEnabled)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ab4fc9e3290da943 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/canvas/index.jsx:238

                createNewChatflowApi.request(newChatflowBody)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ee04cfd12a4023e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/canvas/index.jsx:242

                getHasChatflowChangedApi.request(chatflow.id, lastUpdatedDateTime)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #013d1e6adad18977 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/canvas/index.jsx:476

            updateChatflowApi.request(chatflow.id, updateBody)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f7c2edb41333fb3f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/canvas/index.jsx:502

            getSpecificChatflowApi.request(chatflowId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #feb5777dd7cc4cd3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/chatbot/index.jsx:34

        getSpecificChatflowFromPublicApi.request(chatflowId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #762a264805c38766 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/chatflows/APICodeDialog.jsx:169

            getConfigApi.request(dialogProps.chatflowid)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #750adc0cad9c58b4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/chatflows/APICodeDialog.jsx:185

        updateChatflowApi.request(dialogProps.chatflowid, updateBody)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6ba8248e95afde3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/chatflows/APICodeDialog.jsx:765

            getIsChatflowStreamingApi.request(dialogProps.chatflowid)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #afed14454c09c0dc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/chatflows/index.jsx:64

        getAllChatflowsApi.request(params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #085bcc6b2739eae7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/chatmessage/ChatMessage.jsx:1284

            const response = await axios.post(
                `${baseURL}/api/v1/openai-assistants-file/download`,
                { fileName: fileAnnotation.fileName, chatflowId: chatflowid, chatId: chatId },
                { responseType: 'blob' }
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #98457edce3378563 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/chatmessage/ChatMessage.jsx:1434

                    getAllExecutionsApi.request({ agentflowId: chatflowid })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b9ffe8a2ec9b2de6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/chatmessage/ChatMessage.jsx:1541

            getChatmessageApi.request(chatflowid)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d87b31817dc0caf8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/chatmessage/ChatMessage.jsx:1542

            getIsChatflowStreamingApi.request(chatflowid)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #414d795fdab43937 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/credentials/AddEditCredentialDialog.jsx:73

                getSpecificComponentCredentialApi.request(getSpecificCredentialApi.data.credentialName)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #75ccbb0024cb1f52 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/credentials/AddEditCredentialDialog.jsx:104

            getSpecificCredentialApi.request(dialogProps.data.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #4db7273b2e1c14d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/credentials/AddEditCredentialDialog.jsx:107

            getSpecificCredentialApi.request(dialogProps.credentialId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b2729813896e7f24 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/datasets/DatasetItems.jsx:131

        reorderDatasetRowApi.request({ datasetId: datasetId, rows: updatedRows })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #96177ff1adf7931e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/DeleteDocStoreDialog.jsx:60

            if (nodeName) getRecordManagerNodeApi.request(nodeName)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8599bb5fe56e7505 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/DeleteDocStoreDialog.jsx:65

            if (nodeName) getVectorStoreNodeApi.request(nodeName)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #44d7f67f3ee261b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/DocStoreAPIDialog.jsx:307

            getConfigApi.request(dialogProps.storeId, dialogProps.loaderId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ca48d4ff5a677387 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/LoaderConfigPreviewChunks.jsx:299

            getSpecificDocumentStoreApi.request(storeId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9557e6a7721805c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/LoaderConfigPreviewChunks.jsx:301

            getNodeDetailsApi.request(docLoaderNodeName)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d09fe4af18b085aa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/LoaderConfigPreviewChunks.jsx:374

                    getNodeDetailsApi.request(loader.loaderId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #540dae32f11e20b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/ShowStoredChunks.jsx:119

                getChunksApi.request(storeId, fileId, currentPage)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #41dae74abb45f0d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/ShowStoredChunks.jsx:168

                    getChunksApi.request(storeId, fileId, currentPage)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b12a6fb52a9e6efa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/ShowStoredChunks.jsx:193

        getChunksApi.request(storeId, fileId, currentPage)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #bfc88634989a2ec5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/ShowStoredChunks.jsx:200

        getChunksApi.request(storeId, fileId, newPage)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9816941d98139cf9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/UpsertHistorySideDrawer.jsx:28

        getUpsertHistoryApi.request(dialogProps.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #a24b29e1ad200bfc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/VectorStoreConfigure.jsx:307

            insertIntoVectorStoreApi.request(data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #1988933ede5e2be4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/VectorStoreConfigure.jsx:314

        saveVectorStoreConfigApi.request(data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d6b78591a2748740 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/VectorStoreConfigure.jsx:436

        getSpecificDocumentStoreApi.request(storeId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5ef6f26948c08fdb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/VectorStoreConfigure.jsx:459

                getEmbeddingNodeDetailsApi.request(docStore.embeddingConfig.name)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #f2868fe50c3194ef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/VectorStoreConfigure.jsx:462

                getVectorStoreNodeDetailsApi.request(docStore.vectorStoreConfig.name)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8bf222343ee3e33a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/VectorStoreConfigure.jsx:465

                getRecordManagerNodeDetailsApi.request(docStore.recordManagerConfig.name)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #db84d2a4080db0a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/VectorStoreQuery.jsx:130

        queryVectorStoreApi.request(data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3d30d742275833e5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/VectorStoreQuery.jsx:235

        getSpecificDocumentStoreApi.request(storeId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3298c03f565baed7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/docstore/VectorStoreQuery.jsx:249

                getVectorStoreNodeDetailsApi.request(vectorStoreConfig.name)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d0870d3eff993c2b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/evaluations/CreateEvaluationDialog.jsx:345

        if (llm !== 'no_grading') getModelsApi.request(llm, { loadMethod: 'listModels' })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #693ae77477aea2a9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/evaluations/EvaluationResult.jsx:193

            runAgainApi.request(evaluation?.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #7d7667cc326d4937 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/evaluations/EvaluationResult.jsx:246

            getIsOutdatedApi.request(data.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6437feffa0c3bcd0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/evaluations/EvaluationResultVersionsSideDrawer.jsx:28

        getVersionsApi.request(dialogProps.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #8e2ff03eef1c4d1c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/organization/index.jsx:132

            await registerAccountApi.request(body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #541fca25505bfcdc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/organization/index.jsx:184

                loginApi.request(body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d7545d306aedac0e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/roles/index.jsx:242

            getAllUsersByRoleIdApi.request(selectedRoleId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #2d213354912f3276 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/roles/index.jsx:510

        getAllRolesByOrganizationIdApi.request(currentUser.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #73fd56cc30c9c4e6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/roles/index.jsx:514

        getAllRolesByOrganizationIdApi.request(currentUser.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b031359a715a10e5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx:267

        statusApi.request(chatflowid)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9b4a6ef356fe57c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx:268

        logsApi.request(chatflowid, { page, limit })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #6473f8c0a2111431 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/schedule/ScheduleHistoryDrawer.jsx:728

                    onRefresh={() => execApi.request(executionMetadata?.id)}

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #e7c6f68bc629c585 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/schedule/ScheduleHistoryFAB.jsx:23

        const tick = () => probeApi.request(chatflowid, { page: 1, limit: 5, status: 'RUNNING' })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #12ff80aade1dae3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:136

                getLogsApi.request(subtractTime(0, 0, 1), getDateTimeFormatted())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #3587bd78b2c9fcf1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:139

                getLogsApi.request(subtractTime(0, 0, 4), getDateTimeFormatted())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c89e618d5b436688 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:142

                getLogsApi.request(subtractTime(0, 0, 24), getDateTimeFormatted())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #26a4bf8d6915ddf9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:145

                getLogsApi.request(subtractTime(0, 2, 0), getDateTimeFormatted())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #013ae213537706c3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:148

                getLogsApi.request(subtractTime(0, 7, 0), getDateTimeFormatted())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #9fd390b31283faa0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:151

                getLogsApi.request(subtractTime(0, 14, 0), getDateTimeFormatted())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #75308cb999168ce2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:154

                getLogsApi.request(subtractTime(1, 0, 0), getDateTimeFormatted())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b6c55713c8a30575 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:157

                getLogsApi.request(subtractTime(2, 0, 0), getDateTimeFormatted())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #847d60bc20a1b4b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:160

                getLogsApi.request(subtractTime(3, 0, 0), getDateTimeFormatted())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #d1d474531d841886 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:165

                getLogsApi.request(subtractTime(0, 0, 1), getDateTimeFormatted())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #b80b205aa613db0a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:174

        getLogsApi.request(getDateTimeFormatted(date), getDateTimeFormatted(endDate))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #42fac34a4a5254d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:179

        getLogsApi.request(getDateTimeFormatted(startDate), getDateTimeFormatted(date))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #31e2ca60009da7f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/serverlogs/index.jsx:185

        getLogsApi.request(startTimeFormatted, currentTimeFormatted)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #053614a86dc384fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/tools/ToolDialog.jsx:205

            getSpecificToolApi.request(dialogProps.toolId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #0a41758576f65a11 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/tools/index.jsx:74

        getAllToolsApi.request(params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #bf33f1ba7808cc4f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/tools/index.jsx:88

        getAllCustomMcpServersApi.request(params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c38feaa2bd4e52eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/users/index.jsx:366

        getAllUsersByOrganizationIdApi.request(currentUser.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #df5e0c0d3b67f6ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/users/index.jsx:370

        getAllUsersByOrganizationIdApi.request(currentUser.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #20ca09fa787054f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/vectorstore/UpsertHistoryDialog.jsx:217

        getUpsertHistoryApi.request(dialogProps.chatflow.id, {
            startDate: updatedDate,
            endDate: endDate
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #31d3224207ed4a0d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/vectorstore/UpsertHistoryDialog.jsx:227

        getUpsertHistoryApi.request(dialogProps.chatflow.id, {
            endDate: updatedDate,
            startDate: startDate
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #84756002887995e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/vectorstore/UpsertHistoryDialog.jsx:296

            getUpsertHistoryApi.request(dialogProps.chatflow.id)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #5ba11dc8639a2220 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/vectorstore/VectorStoreDialog.jsx:288

        if (checkboxNodes[vectorNodeId] === true) getConfigApi.request(dialogProps.chatflowid)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #42f43426b48bbd47 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/workspace/EditWorkspaceUserRoleDialog.jsx:90

            getAllRolesApi.request(currentUser.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #786b6f7775afa26f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/workspace/WorkspaceUsers.jsx:256

        getAllUsersByWorkspaceIdApi.request(workspaceId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #392c7b9d1a486d6e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/workspace/WorkspaceUsers.jsx:271

        getWorkspaceByIdApi.request(workspaceId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #18c32acdb2ffa124 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/workspace/WorkspaceUsers.jsx:272

        getAllUsersByWorkspaceIdApi.request(workspaceId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #49d6fb70c63f0d87 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/workspace/index.jsx:86

            getAllUsersByWorkspaceIdApi.request(selectedWorkspaceId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #32bc3ddf439a8dd1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/workspace/index.jsx:330

        getAllWorkspacesApi.request(currentUser.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #c44a672667847780 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/workspace/index.jsx:341

            switchWorkspaceApi.request(workspaceId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #42de95794e2b2d3d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/workspace/index.jsx:344

            switchWorkspaceApi.request(specificWorkspaceId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #73298208fc15598d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/packages/ui/src/views/workspace/index.jsx:394

        getAllWorkspacesApi.request(currentUser.activeOrganizationId)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #0136873e32453e22 — Environment-variable access.

repo/packages/ui/vite.config.js:47

            port: process.env.VITE_PORT ?? 8080,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4a98024c96079524 — Environment-variable access.

repo/packages/ui/vite.config.js:48

            host: process.env.VITE_HOST

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

axios

npm dependency

high pii_flow dependency Excluded from app score #1186a6194e9e0641 — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.

pkgs/npm/[email protected]/lib/adapters/http.js:708 · flow /tmp/closeopen-n94bn249/pkgs/npm/[email protected]/lib/adapters/http.js:611 → /tmp/closeopen-n94bn249/pkgs/npm/[email protected]/lib/adapters/http.js:708

      req = transport.request(options, function handleResponse(res) {
        if (req.destroyed) return;

        const streams = [res];

        const responseLength = utils.toFiniteNumber(res.headers['content-length']);

        if (onDownloadProgress || maxDownloadRate) {
          const transformStream = new AxiosTransformStream({
            maxRate: utils.toFiniteNumber(maxDownloadRate),
          });

          onDownloadProgress &&
            transformStream.on(
              'progress',
              flushOnFinish(
                transformStream,
                progressEventDecorator(
                  responseLength,
                  progressEventReducer(asyncDecorator(onDownloadProgress), true, 3)
                )
              )
            );

          streams.push(transformStream);
        }

        // decompress the response body transparently if required
        let responseStream = res;

        // return the last request in case of redirects
        const lastRequest = res.req || req;

        // if decompress disabled we should not decompress
        if (config.decompress !== false && res.headers['content-encoding']) {
          // if no content, but headers still say that it is encoded,
          // remove the header not confuse downstream operations
          if (method === 'HEAD' || res.statusCode === 204) {
            delete res.headers['content-encoding'];
          }

          switch ((res.headers['content-encoding'] || '').toLowerCase()) {
            /*eslint default-case:0*/
            case 'gzip':
            case 'x-gzip':
            case 'compress':
            case 'x-compress':
              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'deflate':
              streams.push(new ZlibHeaderTransformStream());

              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'br':
              if (isBrotliSupported) {
                streams.push(zlib.createBrotliDecompress(brotliOptions));
                delete res.headers['content-encoding'];
              }
          }
        }

        responseStream = streams.length > 1 ? stream.pipeline(streams, utils.noop) : streams[0];

        const response = {
          status: res.statusCode,
          statusText: res.statusMessage,
          headers: new AxiosHeaders(res.headers),
          config,
          request: lastRequest,
        };

        if (responseType === 'stream') {
          response.data = responseStream;
          settle(resolve, reject, response);
        } else {
          const responseBuffer = [];
          let totalResponseBytes = 0;

          responseStream.on('data', function handleStreamData(chunk) {
            responseBuffer.push(chunk);
            totalResponseBytes += chunk.length;

            // make sure the content length is not over the maxContentLength if specified
            if (config.maxContentLength > -1 && totalResponseBytes > config.maxContentLength) {
              // stream.destroy() emit aborted event before calling reject() on Node.js v16
              rejected = true;
              responseStream.destroy();
              abort(
                new AxiosError(
                  'maxContentLength size of ' + config.maxContentLength + ' exceeded',
                  AxiosError.ERR_BAD_RESPONSE,
                  config,
                  lastRequest
                )
              );
            }
          });

          responseStream.on('aborted', function handlerStreamAborted() {
            if (rejected) {
              return;
            }

            const err = new AxiosError(
              'stream has been aborted',
              AxiosError.ERR_BAD_RESPONSE,
              config,
              lastRequest
            );
            responseStream.destroy(err);
            reject(err);
          });

          responseStream.on('error', function handleStreamError(err) {
            if (req.destroyed) return;
            reject(AxiosError.from(err, null, config, lastRequest));
          });

          responseStream.on('end', function handleStreamEnd() {
            try {
              let responseData =
                responseBuffer.length === 1 ? responseBuffer[0] : Buffer.concat(responseBuffer);
              if (responseType !== 'arraybuffer') {
                responseData = responseData.toString(responseEncoding);
                if (!responseEncoding || responseEncoding === 'utf8') {
                  responseData = utils.stripBOM(responseData);
                }
              }
              response.data = responseData;
            } catch (err) {
              return reject(AxiosError.from(err, null, config, response.request, response));
            }
            settle(resolve, reject, response);
          });
        }

        abortEmitter.once('abort', (err) => {
          if (!responseStream.destroyed) {
            responseStream.emit('error', err);
            responseStream.destroy();
          }
        });
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

medium pii_flow dependency Excluded from app score #64e7db8a55261830 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/lib/adapters/http.js:708 · flow /tmp/closeopen-n94bn249/pkgs/npm/[email protected]/lib/adapters/http.js:616 → /tmp/closeopen-n94bn249/pkgs/npm/[email protected]/lib/adapters/http.js:708

      req = transport.request(options, function handleResponse(res) {
        if (req.destroyed) return;

        const streams = [res];

        const responseLength = utils.toFiniteNumber(res.headers['content-length']);

        if (onDownloadProgress || maxDownloadRate) {
          const transformStream = new AxiosTransformStream({
            maxRate: utils.toFiniteNumber(maxDownloadRate),
          });

          onDownloadProgress &&
            transformStream.on(
              'progress',
              flushOnFinish(
                transformStream,
                progressEventDecorator(
                  responseLength,
                  progressEventReducer(asyncDecorator(onDownloadProgress), true, 3)
                )
              )
            );

          streams.push(transformStream);
        }

        // decompress the response body transparently if required
        let responseStream = res;

        // return the last request in case of redirects
        const lastRequest = res.req || req;

        // if decompress disabled we should not decompress
        if (config.decompress !== false && res.headers['content-encoding']) {
          // if no content, but headers still say that it is encoded,
          // remove the header not confuse downstream operations
          if (method === 'HEAD' || res.statusCode === 204) {
            delete res.headers['content-encoding'];
          }

          switch ((res.headers['content-encoding'] || '').toLowerCase()) {
            /*eslint default-case:0*/
            case 'gzip':
            case 'x-gzip':
            case 'compress':
            case 'x-compress':
              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'deflate':
              streams.push(new ZlibHeaderTransformStream());

              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'br':
              if (isBrotliSupported) {
                streams.push(zlib.createBrotliDecompress(brotliOptions));
                delete res.headers['content-encoding'];
              }
          }
        }

        responseStream = streams.length > 1 ? stream.pipeline(streams, utils.noop) : streams[0];

        const response = {
          status: res.statusCode,
          statusText: res.statusMessage,
          headers: new AxiosHeaders(res.headers),
          config,
          request: lastRequest,
        };

        if (responseType === 'stream') {
          response.data = responseStream;
          settle(resolve, reject, response);
        } else {
          const responseBuffer = [];
          let totalResponseBytes = 0;

          responseStream.on('data', function handleStreamData(chunk) {
            responseBuffer.push(chunk);
            totalResponseBytes += chunk.length;

            // make sure the content length is not over the maxContentLength if specified
            if (config.maxContentLength > -1 && totalResponseBytes > config.maxContentLength) {
              // stream.destroy() emit aborted event before calling reject() on Node.js v16
              rejected = true;
              responseStream.destroy();
              abort(
                new AxiosError(
                  'maxContentLength size of ' + config.maxContentLength + ' exceeded',
                  AxiosError.ERR_BAD_RESPONSE,
                  config,
                  lastRequest
                )
              );
            }
          });

          responseStream.on('aborted', function handlerStreamAborted() {
            if (rejected) {
              return;
            }

            const err = new AxiosError(
              'stream has been aborted',
              AxiosError.ERR_BAD_RESPONSE,
              config,
              lastRequest
            );
            responseStream.destroy(err);
            reject(err);
          });

          responseStream.on('error', function handleStreamError(err) {
            if (req.destroyed) return;
            reject(AxiosError.from(err, null, config, lastRequest));
          });

          responseStream.on('end', function handleStreamEnd() {
            try {
              let responseData =
                responseBuffer.length === 1 ? responseBuffer[0] : Buffer.concat(responseBuffer);
              if (responseType !== 'arraybuffer') {
                responseData = responseData.toString(responseEncoding);
                if (!responseEncoding || responseEncoding === 'utf8') {
                  responseData = utils.stripBOM(responseData);
                }
              }
              response.data = responseData;
            } catch (err) {
              return reject(AxiosError.from(err, null, config, response.request, response));
            }
            settle(resolve, reject, response);
          });
        }

        abortEmitter.once('abort', (err) => {
          if (!responseStream.destroyed) {
            responseStream.emit('error', err);
            responseStream.destroy();
          }
        });
      });

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 3 low-confidence finding(s)

low egress dependency Excluded from app score #1d206ce69962cae3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/adapters/http.js:310

    const req = session.request(http2Headers);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ff3badd960cbfe80 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/adapters/http.js:708

      req = transport.request(options, function handleResponse(res) {
        if (req.destroyed) return;

        const streams = [res];

        const responseLength = utils.toFiniteNumber(res.headers['content-length']);

        if (onDownloadProgress || maxDownloadRate) {
          const transformStream = new AxiosTransformStream({
            maxRate: utils.toFiniteNumber(maxDownloadRate),
          });

          onDownloadProgress &&
            transformStream.on(
              'progress',
              flushOnFinish(
                transformStream,
                progressEventDecorator(
                  responseLength,
                  progressEventReducer(asyncDecorator(onDownloadProgress), true, 3)
                )
              )
            );

          streams.push(transformStream);
        }

        // decompress the response body transparently if required
        let responseStream = res;

        // return the last request in case of redirects
        const lastRequest = res.req || req;

        // if decompress disabled we should not decompress
        if (config.decompress !== false && res.headers['content-encoding']) {
          // if no content, but headers still say that it is encoded,
          // remove the header not confuse downstream operations
          if (method === 'HEAD' || res.statusCode === 204) {
            delete res.headers['content-encoding'];
          }

          switch ((res.headers['content-encoding'] || '').toLowerCase()) {
            /*eslint default-case:0*/
            case 'gzip':
            case 'x-gzip':
            case 'compress':
            case 'x-compress':
              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'deflate':
              streams.push(new ZlibHeaderTransformStream());

              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'br':
              if (isBrotliSupported) {
                streams.push(zlib.createBrotliDecompress(brotliOptions));
                delete res.headers['content-encoding'];
              }
          }
        }

        responseStream = streams.length > 1 ? stream.pipeline(streams, utils.noop) : streams[0];

        const response = {
          status: res.statusCode,
          statusText: res.statusMessage,
          headers: new AxiosHeaders(res.headers),
          config,
          request: lastRequest,
        };

        if (responseType === 'stream') {
          response.data = responseStream;
          settle(resolve, reject, response);
        } else {
          const responseBuffer = [];
          let totalResponseBytes = 0;

          responseStream.on('data', function handleStreamData(chunk) {
            responseBuffer.push(chunk);
            totalResponseBytes += chunk.length;

            // make sure the content length is not over the maxContentLength if specified
            if (config.maxContentLength > -1 && totalResponseBytes > config.maxContentLength) {
              // stream.destroy() emit aborted event before calling reject() on Node.js v16
              rejected = true;
              responseStream.destroy();
              abort(
                new AxiosError(
                  'maxContentLength size of ' + config.maxContentLength + ' exceeded',
                  AxiosError.ERR_BAD_RESPONSE,
                  config,
                  lastRequest
                )
              );
            }
          });

          responseStream.on('aborted', function handlerStreamAborted() {
            if (rejected) {
              return;
            }

            const err = new AxiosError(
              'stream has been aborted',
              AxiosError.ERR_BAD_RESPONSE,
              config,
              lastRequest
            );
            responseStream.destroy(err);
            reject(err);
          });

          responseStream.on('error', function handleStreamError(err) {
            if (req.destroyed) return;
            reject(AxiosError.from(err, null, config, lastRequest));
          });

          responseStream.on('end', function handleStreamEnd() {
            try {
              let responseData =
                responseBuffer.length === 1 ? responseBuffer[0] : Buffer.concat(responseBuffer);
              if (responseType !== 'arraybuffer') {
                responseData = responseData.toString(responseEncoding);
                if (!responseEncoding || responseEncoding === 'utf8') {
                  responseData = utils.stripBOM(responseData);
                }
              }
              response.data = responseData;
            } catch (err) {
              return reject(AxiosError.from(err, null, config, response.request, response));
            }
            settle(resolve, reject, response);
          });
        }

        abortEmitter.once('abort', (err) => {
          if (!responseStream.destroyed) {
            responseStream.emit('error', err);
            responseStream.destroy();
          }
        });
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #9861bf83495adf59 — Environment-variable access.

pkgs/npm/[email protected]/lib/helpers/shouldBypassProxy.js:64

  const noProxy = (process.env.no_proxy || process.env.NO_PROXY || '').toLowerCase();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

flowise-components

npm dependency

high pii_flow dependency Excluded from app score #465efc29f6530f9e — A credential read from the environment/filesystem flows to an external network call in a non-auth-header position (request body). Review what is sent.

pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:132 · flow /tmp/closeopen-n94bn249/pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:129 → /tmp/closeopen-n94bn249/pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:132

        const response = await fetch(this.apiUrl, {
            method: 'POST',
            body: formData,
            headers
        })

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

medium pii_flow dependency Excluded from app score #1c23f01523ab0d63 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:135 · flow /tmp/closeopen-n94bn249/pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:129 → /tmp/closeopen-n94bn249/pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:135

            headers

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 353 low-confidence finding(s)

low egress dependency Excluded from app score #27ea7b6d6bc8e081 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/evaluation/EvaluationRunner.ts:144

                let response = await axios.post(`${this.baseURL}/api/v1/prediction/${chatflowId}`, postData, axiosConfig)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #22b036b161b71aac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/agentflow/utils.ts:534

        const response = await fetch(`https://api.openai.com/v1/containers/${containerId}/files/${fileId}/content`, {
            method: 'GET',
            headers: {
                Accept: '*/*',
                Authorization: `Bearer ${openAIApiKey}`
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #bed0662cc1cb2cfc — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/ConversationalAgent/ConversationalAgent.ts:283

        verbose: process.env.DEBUG === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3b253bc2f38959a — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/ConversationalRetrievalToolAgent/ConversationalRetrievalToolAgent.ts:360

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ff91e4c7c395847 — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/LlamaIndexAgents/AnthropicAgent/AnthropicAgent_LlamaIndex.ts:104

            verbose: process.env.DEBUG === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0df0d419faf67622 — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/LlamaIndexAgents/AnthropicAgent/AnthropicAgent_LlamaIndex.ts:113

        const response = await agent.chat({ message: input, chatHistory, verbose: process.env.DEBUG === 'true' ? true : false })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a108258b0772154 — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/LlamaIndexAgents/OpenAIToolAgent/OpenAIToolAgent_LlamaIndex.ts:115

            verbose: process.env.DEBUG === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ab13ee935d0b85b — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/LlamaIndexAgents/OpenAIToolAgent/OpenAIToolAgent_LlamaIndex.ts:130

                verbose: process.env.DEBUG === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d70a569aca531b7 — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/LlamaIndexAgents/OpenAIToolAgent/OpenAIToolAgent_LlamaIndex.ts:157

            const response = await agent.chat({ message: input, chatHistory, verbose: process.env.DEBUG === 'true' ? true : false })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #fed2981ffeb393f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/agents/OpenAIAssistant/OpenAIAssistant.ts:974

        const response = await fetch(`https://api.openai.com/v1/files/${fileObj.id}/content`, {
            method: 'GET',
            headers: { Accept: '*/*', Authorization: `Bearer ${openAIApiKey}` }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #1f173691e1a5da55 — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/ReActAgentChat/ReActAgentChat.ts:132

            verbose: process.env.DEBUG === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38e76a1edf091e23 — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/ReActAgentLLM/ReActAgentLLM.ts:105

            verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ea331e0a2bf4649 — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/ToolAgent/ToolAgent.ts:359

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #895c48de942af6d2 — Environment-variable access.

pkgs/npm/[email protected]/nodes/agents/XMLAgent/XMLAgent.ts:284

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #7c3732db794e6314 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/cache/RedisCache/RedisCache.ts:66

            let value = await client.get(key)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3b67b90f2851c811 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/cache/RedisCache/RedisCache.ts:74

                value = await client.get(key)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #980295944807811e — Environment-variable access.

pkgs/npm/[email protected]/nodes/cache/RedisCache/RedisCache.ts:130

                process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92fd47e7d35fa0ee — Environment-variable access.

pkgs/npm/[email protected]/nodes/cache/RedisCache/RedisCache.ts:131

                    ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe0a7cbab05d3169 — Environment-variable access.

pkgs/npm/[email protected]/nodes/cache/RedisCache/RedisCache.ts:138

                process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7fec96c757e9a7b — Environment-variable access.

pkgs/npm/[email protected]/nodes/cache/RedisCache/RedisCache.ts:139

                    ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb725877002fd64f — Environment-variable access.

pkgs/npm/[email protected]/nodes/cache/RedisCache/RedisEmbeddingsCache.ts:87

                    process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #474b14c34d2967c0 — Environment-variable access.

pkgs/npm/[email protected]/nodes/cache/RedisCache/RedisEmbeddingsCache.ts:88

                        ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71b6a791a20b5a02 — Environment-variable access.

pkgs/npm/[email protected]/nodes/cache/RedisCache/RedisEmbeddingsCache.ts:95

                    process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5affa82a4cd5b239 — Environment-variable access.

pkgs/npm/[email protected]/nodes/cache/RedisCache/RedisEmbeddingsCache.ts:96

                        ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f66e6cc13f9ebd7 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/ApiChain/GETApiChain.ts:134

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91675d1022614446 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/ApiChain/OpenAPIChain.ts:134

        verbose: process.env.DEBUG === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff131bdbd9fd1f83 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/ApiChain/POSTApiChain.ts:124

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6dae43c5e8ab260f — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/ConversationChain/ConversationChain.ts:139

        if (process.env.DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3919452b19a8649e — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/ConversationalRetrievalQAChain/ConversationalRetrievalQAChain.ts:229

        if (process.env.DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e887698f0d64ec4 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/GraphCypherQAChain/GraphCypherQAChain.ts:423

        if (process.env.DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a5ed219d9713023 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/LLMChain/LLMChain.ts:109

                verbose: process.env.DEBUG === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0cd92523ac21d4d0 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/LLMChain/LLMChain.ts:117

                verbose: process.env.DEBUG === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5dba6bbdb629dc3 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/MultiPromptChain/MultiPromptChain.ts:71

            llmChainOpts: { verbose: process.env.DEBUG === 'true' ? true : false }

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1d9b485e0145eb9 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/MultiRetrievalQAChain/MultiRetrievalQAChain.ts:79

            retrievalQAChainOpts: { verbose: process.env.DEBUG === 'true' ? true : false, returnSourceDocuments }

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #373bed6fa096899d — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/RetrievalQAChain/RetrievalQAChain.ts:58

        const chain = RetrievalQAChain.fromLLM(model, vectorStoreRetriever, { verbose: process.env.DEBUG === 'true' ? true : false })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfe2e81ff6c8d155 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/SqlDatabaseChain/SqlDatabaseChain.ts:245

        verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #027c3898ac9ba192 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/chains/VectaraChain/VectaraChain.ts:312

            const response = await fetch(`https://api.vectara.io/v1/query`, {
                method: 'POST',
                headers: headers?.headers,
                body: JSON.stringify(data)
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5065ba7c15d94756 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chains/VectorDBQAChain/VectorDBQAChain.ts:60

            verbose: process.env.DEBUG === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #516a4eedad852f05 — Filesystem access.

pkgs/npm/[email protected]/nodes/chatmodels/AWSBedrock/AWSBedrockCatalog.test.ts:1

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8135897b7cad4694 — Filesystem access.

pkgs/npm/[email protected]/nodes/chatmodels/AWSBedrock/AWSBedrockCatalog.test.ts:9

        const raw = JSON.parse(fs.readFileSync(modelsPath, 'utf8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7a51e9e3b2c83bf — Environment-variable access.

pkgs/npm/[email protected]/nodes/chatmodels/AzureChatOpenAI/AzureChatOpenAI.ts:10

    !!process.env.AZURE_OPENAI_API_KEY &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf8ad8221c74ce51 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chatmodels/AzureChatOpenAI/AzureChatOpenAI.ts:11

    !!process.env.AZURE_OPENAI_API_INSTANCE_NAME &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e66a02f9849bc47 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chatmodels/AzureChatOpenAI/AzureChatOpenAI.ts:12

    !!process.env.AZURE_OPENAI_API_DEPLOYMENT_NAME &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99caaab9fd67ba74 — Environment-variable access.

pkgs/npm/[email protected]/nodes/chatmodels/AzureChatOpenAI/AzureChatOpenAI.ts:13

    !!process.env.AZURE_OPENAI_API_VERSION

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #90473c0dfe00bd76 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/chatmodels/ChatNemoGuardrails/NemoClient.ts:66

        return await fetch(`${this.config.baseUrl}/v1/chat/completions`, requestOptions)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #20863b37309dde99 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/Airtable/Airtable.ts:318

            const response = await axios.post(url, data, { headers })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #f7c8c94923884b27 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Cheerio/Cheerio.ts:153

                    if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f77eb464a7f8129 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Cheerio/Cheerio.ts:166

                if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30a7a4d51f39af58 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Cheerio/Cheerio.ts:175

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Start CheerioWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ecb73e5f11ca4780 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Cheerio/Cheerio.ts:186

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7eb0c388585d018 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Cheerio/Cheerio.ts:192

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Finish CheerioWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22ac2d81374996b4 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Cheerio/Cheerio.ts:194

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90a5dc53c66b5270 — Filesystem access.

pkgs/npm/[email protected]/nodes/documentloaders/Epub/Epub.ts:7

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c22f830ed2409b06 — Filesystem access.

pkgs/npm/[email protected]/nodes/documentloaders/Epub/Epub.ts:127

                    fs.writeFileSync(tempFilePath, fileData)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8ed47155660735a — Filesystem access.

pkgs/npm/[email protected]/nodes/documentloaders/Epub/Epub.ts:139

                    fs.writeFileSync(tempFilePath, fileBuffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ba903b5603f9822 — Filesystem access.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:15

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #855db294a7a13b8f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:227

                const url = new URL('https://www.googleapis.com/drive/v3/files')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d076672158b18118 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:239

                const response = await fetch(url.toString(), {
                    headers: {
                        Authorization: `Bearer ${accessToken}`,
                        'Content-Type': 'application/json'
                    }
                })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8df3d885492e050d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:412

        const response = await fetch(url.toString(), {
            headers: {
                Authorization: `Bearer ${accessToken}`,
                'Content-Type': 'application/json'
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cb832fbd0c6adad5 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:454

            const url = new URL('https://www.googleapis.com/drive/v3/files')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f281fc89d43d5f41 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:472

            const response = await fetch(url.toString(), {
                headers: {
                    Authorization: `Bearer ${accessToken}`,
                    'Content-Type': 'application/json'
                }
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #c4fb4f903773913d — Filesystem access.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:702

        fs.writeFileSync(tempFilePath, buffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #8ebf2ec591cecfbc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:709

        const response = await fetch(url, {
            headers: {
                Authorization: `Bearer ${accessToken}`
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b445d8f3d8713dfc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:726

        const response = await fetch(url, {
            headers: {
                Authorization: `Bearer ${accessToken}`
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a807183a9d0c8661 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleDrive/GoogleDrive.ts:808

        const response = await fetch(url, {
            headers: {
                Authorization: `Bearer ${accessToken}`
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6ba95e4cad696bb5 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleSheets/GoogleSheets.ts:155

                const url = new URL('https://www.googleapis.com/drive/v3/files')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b7925dec4ca1c324 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleSheets/GoogleSheets.ts:161

                const response = await fetch(url.toString(), {
                    headers: {
                        Authorization: `Bearer ${accessToken}`,
                        'Content-Type': 'application/json'
                    }
                })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f3308dc7f87d1844 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleSheets/GoogleSheets.ts:316

        const response = await fetch(url, {
            headers: {
                Authorization: `Bearer ${accessToken}`,
                'Content-Type': 'application/json'
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2a113f2cac54b73c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/GoogleSheets/GoogleSheets.ts:339

        const response = await fetch(`${url}?${params}`, {
            headers: {
                Authorization: `Bearer ${accessToken}`,
                'Content-Type': 'application/json'
            }
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #e05840d11e6c2d1e — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Playwright/Playwright.ts:194

                const executablePath = process.env.PLAYWRIGHT_EXECUTABLE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a180a3d7b5def48 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Playwright/Playwright.ts:235

                if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b46985fb9d94804f — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Playwright/Playwright.ts:242

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Start PlaywrightWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f22d4dc8bacc5aa — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Playwright/Playwright.ts:253

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0cb4e9a1799c9171 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Playwright/Playwright.ts:262

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Finish PlaywrightWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5ac37b0d741ef8e — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Playwright/Playwright.ts:264

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5d3201fe90ecc86 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Puppeteer/Puppeteer.ts:185

                const executablePath = process.env.PUPPETEER_EXECUTABLE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #516d39af84bdf87a — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Puppeteer/Puppeteer.ts:226

                if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18f24bbe3c8c42c4 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Puppeteer/Puppeteer.ts:233

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Start PuppeteerWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10eceec59bb6e429 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Puppeteer/Puppeteer.ts:244

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae54b2f1f301b126 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Puppeteer/Puppeteer.ts:253

            if (process.env.DEBUG === 'true') options.logger.info(`[${orgId}]: Finish PuppeteerWebBaseLoader ${relativeLinksMethod}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a311280e7aa82552 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Puppeteer/Puppeteer.ts:255

            if (process.env.DEBUG === 'true')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f373385b52ca51a1 — Filesystem access.

pkgs/npm/[email protected]/nodes/documentloaders/S3Directory/S3Directory.ts:217

                        fsDefault.writeFileSync(filePath, objectData)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79b0e8d657aa5331 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/S3File/S3File.ts:130

                placeholder: process.env.UNSTRUCTURED_API_URL || 'http://localhost:8000/general/v0/general',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99c9598c86aae243 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/S3File/S3File.ts:131

                optional: !!process.env.UNSTRUCTURED_API_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7211f69126039aa — Filesystem access.

pkgs/npm/[email protected]/nodes/documentloaders/S3File/S3File.ts:784

                    fsDefault.writeFileSync(filePath, objectData)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33507bfef03ccfbd — Filesystem access.

pkgs/npm/[email protected]/nodes/documentloaders/S3File/S3File.ts:1020

        fsDefault.writeFileSync(tempFilePath, buffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ced9e940271d98a — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:30

    private apiUrl = process.env.UNSTRUCTURED_API_URL || 'https://api.unstructuredapp.io/general/v0/general'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2bbb45f31d50081 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:32

    private apiKey: string | undefined = process.env.UNSTRUCTURED_API_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #b6905f5253d1d0c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/Unstructured.ts:132

        const response = await fetch(this.apiUrl, {
            method: 'POST',
            body: formData,
            headers
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5575c65eb8f728c5 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/UnstructuredFile.ts:57

                placeholder: process.env.UNSTRUCTURED_API_URL || 'http://localhost:8000/general/v0/general',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d863282e6deb02e2 — Environment-variable access.

pkgs/npm/[email protected]/nodes/documentloaders/Unstructured/UnstructuredFile.ts:58

                optional: !!process.env.UNSTRUCTURED_API_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2d301433869768e — Environment-variable access.

pkgs/npm/[email protected]/nodes/embeddings/AzureOpenAIEmbedding/AzureOpenAIEmbedding.ts:6

    !!process.env.AZURE_OPENAI_API_KEY &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f83ed312d709dcca — Environment-variable access.

pkgs/npm/[email protected]/nodes/embeddings/AzureOpenAIEmbedding/AzureOpenAIEmbedding.ts:7

    !!process.env.AZURE_OPENAI_API_INSTANCE_NAME &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e830b6b2b7e28102 — Environment-variable access.

pkgs/npm/[email protected]/nodes/embeddings/AzureOpenAIEmbedding/AzureOpenAIEmbedding.ts:8

    (!!process.env.AZURE_OPENAI_API_EMBEDDINGS_DEPLOYMENT_NAME || !!process.env.AZURE_OPENAI_API_DEPLOYMENT_NAME) &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8713a6caf3452e15 — Environment-variable access.

pkgs/npm/[email protected]/nodes/embeddings/AzureOpenAIEmbedding/AzureOpenAIEmbedding.ts:9

    !!process.env.AZURE_OPENAI_API_VERSION

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81699a1277e55ccf — Environment-variable access.

pkgs/npm/[email protected]/nodes/llms/Azure OpenAI/AzureOpenAI.ts:9

    !!process.env.AZURE_OPENAI_API_KEY &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa98408ad8937010 — Environment-variable access.

pkgs/npm/[email protected]/nodes/llms/Azure OpenAI/AzureOpenAI.ts:10

    !!process.env.AZURE_OPENAI_API_INSTANCE_NAME &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40b6115b94ee2ae1 — Environment-variable access.

pkgs/npm/[email protected]/nodes/llms/Azure OpenAI/AzureOpenAI.ts:11

    !!process.env.AZURE_OPENAI_API_DEPLOYMENT_NAME &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c7b46109ae29089 — Environment-variable access.

pkgs/npm/[email protected]/nodes/llms/Azure OpenAI/AzureOpenAI.ts:12

    !!process.env.AZURE_OPENAI_API_VERSION

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb1fe6aeb542a7dd — Environment-variable access.

pkgs/npm/[email protected]/nodes/memory/AgentMemory/AgentMemory.ts:138

                : path.join(process.env.DATABASE_PATH ?? path.join(getUserHome(), '.flowise'), 'database.sqlite')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fda851d8c1790c14 — Environment-variable access.

pkgs/npm/[email protected]/nodes/memory/AgentMemory/SQLiteAgentMemory/SQLiteAgentMemory.ts:72

        const database = validateSQLitePath(path.join(process.env.DATABASE_PATH ?? path.join(getUserHome(), '.flowise'), 'database.sqlite'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd694ba7dfbc1b07 — Environment-variable access.

pkgs/npm/[email protected]/nodes/memory/RedisBackedChatMemory/RedisBackedChatMemory.ts:144

                          process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a8901a315c366f3 — Environment-variable access.

pkgs/npm/[email protected]/nodes/memory/RedisBackedChatMemory/RedisBackedChatMemory.ts:145

                              ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d143a16406daf7b — Environment-variable access.

pkgs/npm/[email protected]/nodes/memory/RedisBackedChatMemory/RedisBackedChatMemory.ts:151

                          process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b00b8ac7611edbe9 — Environment-variable access.

pkgs/npm/[email protected]/nodes/memory/RedisBackedChatMemory/RedisBackedChatMemory.ts:152

                              ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db11ceb8bb3b0b04 — Environment-variable access.

pkgs/npm/[email protected]/nodes/multiagents/Worker/Worker.ts:235

            verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #923dce6dc64672ee — Environment-variable access.

pkgs/npm/[email protected]/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts:10

const serverCredentialsExists = !!process.env.POSTGRES_RECORDMANAGER_USER && !!process.env.POSTGRES_RECORDMANAGER_PASSWORD

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4f52364f736a730 — Environment-variable access.

pkgs/npm/[email protected]/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts:139

        const user = getCredentialParam('user', credentialData, nodeData, process.env.POSTGRES_RECORDMANAGER_USER)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a67fb04808f3a50f — Environment-variable access.

pkgs/npm/[email protected]/nodes/recordmanager/PostgresRecordManager/PostgresRecordManager.ts:140

        const password = getCredentialParam('password', credentialData, nodeData, process.env.POSTGRES_RECORDMANAGER_PASSWORD)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bab4a2739300a7cf — Environment-variable access.

pkgs/npm/[email protected]/nodes/recordmanager/PostgresRecordManager/utils.ts:4

    return defaultChain(nodeData?.inputs?.host, process.env.POSTGRES_RECORDMANAGER_HOST)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41170bf2ee10efb7 — Environment-variable access.

pkgs/npm/[email protected]/nodes/recordmanager/PostgresRecordManager/utils.ts:8

    return defaultChain(nodeData?.inputs?.database, process.env.POSTGRES_RECORDMANAGER_DATABASE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d286fb2a79f7c399 — Environment-variable access.

pkgs/npm/[email protected]/nodes/recordmanager/PostgresRecordManager/utils.ts:12

    return defaultChain(nodeData?.inputs?.port, process.env.POSTGRES_RECORDMANAGER_PORT, '5432')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d476953f7f2156e — Environment-variable access.

pkgs/npm/[email protected]/nodes/recordmanager/PostgresRecordManager/utils.ts:16

    return defaultChain(nodeData?.inputs?.ssl, process.env.POSTGRES_RECORDMANAGER_SSL, false)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #684f899fdb7f05aa — Environment-variable access.

pkgs/npm/[email protected]/nodes/recordmanager/PostgresRecordManager/utils.ts:20

    return defaultChain(nodeData?.inputs?.tableName, process.env.POSTGRES_RECORDMANAGER_TABLE_NAME, 'upsertion_records')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25b1a3b683cdcf48 — Environment-variable access.

pkgs/npm/[email protected]/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts:124

        const database = validateSQLitePath(path.join(process.env.DATABASE_PATH ?? path.join(getUserHome(), '.flowise'), 'database.sqlite'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #b7ed8d8f88aa5713 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/retrievers/CohereRerankRetriever/CohereRerank.ts:44

            let returnedDocs = await axios.post(this.COHERE_API_URL, data, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a950e11be95d9fe3 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/retrievers/JinaRerankRetriever/JinaRerank.ts:39

            let returnedDocs = await axios.post(this.JINA_RERANK_API_URL, data, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #2c45915ab7da459b — Environment-variable access.

pkgs/npm/[email protected]/nodes/retrievers/MultiQueryRetriever/MultiQueryRetriever.ts:75

            verbose: process.env.DEBUG === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #04fb40d2f96c2b25 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/retrievers/VoyageAIRetriever/VoyageAIRerank.ts:40

            let returnedDocs = await axios.post(this.VOYAGEAI_RERANK_API_URL, data, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #8ee20ecfcd129cfa — Environment-variable access.

pkgs/npm/[email protected]/nodes/sequentialagents/Agent/Agent.ts:690

            verbose: process.env.DEBUG === 'true' ? true : false,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8350bde7f5248e57 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/Arxiv/Arxiv.ts:119

        if (process.env.DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #5afe0b1287feeeee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/Arxiv/core.ts:157

        const response = await fetch(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #37aaaf63d894b201 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/Arxiv/core.ts:173

        const response = await fetch(pdfUrl)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #63549b118d1afa58 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/Gmail/core.ts:86

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #83824fc7436cafcc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/GoogleCalendar/core.ts:160

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #7daa1e6b60bf4f9a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/GoogleDocs/core.ts:118

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #5166505005e4aef0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/GoogleDocs/core.ts:153

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #1de4c80f82661c1c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/GoogleDrive/core.ts:150

        const response = await fetch(url, {
            method,
            headers,
            body: body ? (typeof body === 'string' ? body : JSON.stringify(body)) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #f56cdc090cdabf85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/GoogleDrive/core.ts:341

        const response = await fetch(url, {
            method: 'POST',
            headers,
            body: params.content
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #7aed6ee93cd5bc97 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/GoogleDrive/core.ts:386

            const response = await fetch(url, {
                method: 'POST',
                headers,
                body: body
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #f93e784ad8f398e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/GoogleSheets/core.ts:147

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #59bb66642c02e13b — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/CustomMCP/CustomMCP.ts:77

                    process.env.CUSTOM_MCP_PROTOCOL === 'sse'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #885e50ef21a1e7c8 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/CustomMCP/CustomMCP.ts:176

            if (process.env.CUSTOM_MCP_SECURITY_CHECK !== 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #92968d50d5e38004 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/CustomMCP/CustomMCP.ts:186

            if (process.env.CUSTOM_MCP_PROTOCOL === 'stdio' && serverParams!.command) toolkit = new MCPToolkit(serverParams, 'stdio')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #c0bb08b8d10c8ff0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/MCP/Pipedream/PipedreamMCP.ts:51

                const res = await client.request(req, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #80d7c278727fe31a — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/MCP/Pipedream/PipedreamMCP.ts:212

            const response = await axios.post('https://api.pipedream.com/v1/oauth/token', body, {
                headers: {
                    'Content-Type': 'application/json'
                }
            })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #c8e11855ac696229 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/Supergateway/SupergatewayMCP.ts:109

        if (process.env.CUSTOM_MCP_SECURITY_CHECK !== 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6c2e37dc124915ea — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:416

        const originalAllowList = process.env.CUSTOM_MCP_ALLOWED_ENV_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2ab64c46c41df539 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:420

                delete process.env.CUSTOM_MCP_ALLOWED_ENV_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7477efe839abf555 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:422

                process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = originalAllowList

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #17cbb838b3b70c29 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:427

            delete process.env.CUSTOM_MCP_ALLOWED_ENV_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5dc4b7106d31eaf1 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:435

            process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = 'API_KEY'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #21776ba254dbfad9 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:447

            process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = 'CUSTOM_VAR'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #43b3df16a986dd68 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:455

            process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = 'CUSTOM_VAR,API_KEY'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #108d6c938dbf8221 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:520

            const original = process.env.CUSTOM_MCP_ALLOWED_ENV_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1a758296d78c9038 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:521

            process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = 'API_TOKEN'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1dc1382779b9f206 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:533

                    delete process.env.CUSTOM_MCP_ALLOWED_ENV_VARS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2c63ef9e11ee2ae6 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.test.ts:535

                    process.env.CUSTOM_MCP_ALLOWED_ENV_VARS = original

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3ab40b4c10b27f77 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.ts:48

                    PATH: process.env.PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #c9a0a3e04b8d6b09 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/MCP/core.ts:110

            this._tools = await this.client.request({ method: 'tools/list' }, ListToolsResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #a980a5b095cc24bd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/MCP/core.ts:164

                const res = await client.request(req, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #d0c5e0e0b57303f5 — Environment-variable access.

pkgs/npm/[email protected]/nodes/tools/MCP/core.ts:258

        (process.env.CUSTOM_MCP_ALLOWED_ENV_VARS ?? '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #386381ff66631c0a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/MicrosoftOutlook/core.ts:150

        const response = await fetch(url, {
            method,
            headers,
            body: body ? JSON.stringify(body) : undefined
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #6c55799fdec620a4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/tools/MicrosoftTeams/core.ts:37

        const response = await fetch(`${BASE_URL}${endpoint}`, config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7e10d673f15eeedf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/nodes/vectorstores/Meilisearch/Meilisearch.ts:245

            const response = await fetch(experimentalEndpoint, experimentalOptions)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #100b1a6e30cd7def — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Pinecone/Pinecone_LlamaIndex.ts:238

        this.chunkSize = params?.chunkSize ?? Number.parseInt(process.env.PINECONE_CHUNK_SIZE ?? '100')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d478adba3d2abc83 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Postgres/Postgres.ts:13

const serverCredentialsExists = !!process.env.POSTGRES_VECTORSTORE_USER && !!process.env.POSTGRES_VECTORSTORE_PASSWORD

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3982a0178bd2753 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Postgres/driver/Base.ts:68

        const user = getCredentialParam('user', credentialData, this.nodeData, process.env.POSTGRES_VECTORSTORE_USER)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26df3e447baa6cce — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Postgres/driver/Base.ts:69

        const password = getCredentialParam('password', credentialData, this.nodeData, process.env.POSTGRES_VECTORSTORE_PASSWORD)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77734ee526e07048 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Postgres/utils.ts:4

    return defaultChain(nodeData?.inputs?.host, process.env.POSTGRES_VECTORSTORE_HOST)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a23859a264a380c6 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Postgres/utils.ts:8

    return defaultChain(nodeData?.inputs?.database, process.env.POSTGRES_VECTORSTORE_DATABASE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c0482fbe3b10931 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Postgres/utils.ts:12

    return defaultChain(nodeData?.inputs?.port, process.env.POSTGRES_VECTORSTORE_PORT, '5432')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3df4f5ff3cf61589 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Postgres/utils.ts:16

    return defaultChain(nodeData?.inputs?.ssl, process.env.POSTGRES_VECTORSTORE_SSL, false)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd8f8e199a75c626 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Postgres/utils.ts:20

    return defaultChain(nodeData?.inputs?.tableName, process.env.POSTGRES_VECTORSTORE_TABLE_NAME, 'documents')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95535d4b188d29f6 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Postgres/utils.ts:24

    return defaultChain(nodeData?.inputs?.contentColumnName, process.env.POSTGRES_VECTORSTORE_CONTENT_COLUMN_NAME, 'pageContent')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8838cadac3457b24 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Postgres/utils.ts:28

    return defaultChain(nodeData?.inputs?.schemaName, process.env.POSTGRES_VECTORSTORE_SCHEMA_NAME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c2f22ae6c43357e — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Redis/Redis.ts:154

                            process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d31dd85e8f56658b — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Redis/Redis.ts:155

                                ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdf77dcc070c9b09 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Redis/Redis.ts:159

                        process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e16ad308604bc5c6 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Redis/Redis.ts:160

                            ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b572475c0e3265db — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Redis/Redis.ts:172

                    if (process.env.DEBUG === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afcff323dbfdac57 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Redis/Redis.ts:231

                    process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8338383603c45e8 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Redis/Redis.ts:232

                        ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a21563f7df8ef397 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Redis/Redis.ts:236

                process.env.REDIS_KEEP_ALIVE && !isNaN(parseInt(process.env.REDIS_KEEP_ALIVE, 10))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f68e8121fd984a5 — Environment-variable access.

pkgs/npm/[email protected]/nodes/vectorstores/Redis/Redis.ts:237

                    ? parseInt(process.env.REDIS_KEEP_ALIVE, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #df5673de5c3acb4c — Environment-variable access.

pkgs/npm/[email protected]/src/handler.test.ts:388

        for (const k of LANGSMITH_KEYS) envSnapshot[k] = process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5c1322ccde99fece — Environment-variable access.

pkgs/npm/[email protected]/src/handler.test.ts:389

        for (const k of LANGSMITH_KEYS) delete process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1257620fc966f0f1 — Environment-variable access.

pkgs/npm/[email protected]/src/handler.test.ts:390

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #812ba5f1fa588d0c — Environment-variable access.

pkgs/npm/[email protected]/src/handler.test.ts:391

        process.env.LANGSMITH_API_KEY = 'test-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e4c43b23effceb4e — Environment-variable access.

pkgs/npm/[email protected]/src/handler.test.ts:397

        for (const k of LANGSMITH_KEYS) delete process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cc077c6cdd7f6987 — Environment-variable access.

pkgs/npm/[email protected]/src/handler.test.ts:400

            if (v !== undefined) process.env[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff0dc41d60791053 — Environment-variable access.

pkgs/npm/[email protected]/src/handler.ts:81

        if (process.env.DEBUG === 'true') console.error(`Error setting up Arize tracer: ${err.message}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e71ada9f744adc02 — Environment-variable access.

pkgs/npm/[email protected]/src/handler.ts:135

        if (process.env.DEBUG === 'true') console.error(`Error setting up Phoenix tracer: ${err.message}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67ab0b8a6a125ad0 — Environment-variable access.

pkgs/npm/[email protected]/src/handler.ts:179

        if (process.env.DEBUG === 'true') console.error(`Error setting up Opik tracer: ${err.message}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ed89266f33f06a9 — Environment-variable access.

pkgs/npm/[email protected]/src/httpSecurity.ts:36

    const securityCheckEnabled = process.env.HTTP_SECURITY_CHECK !== 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5af37dd67696276e — Environment-variable access.

pkgs/npm/[email protected]/src/httpSecurity.ts:37

    const httpDenyListString = process.env.HTTP_DENY_LIST

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #0d9af23e42df2be6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/httpSecurity.ts:249

        const response = await fetch(currentUrl, { ...currentInit, agent: () => agent })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #29d9da5b5ab48978 — Filesystem access.

pkgs/npm/[email protected]/src/modelLoader.ts:2

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9bfe1d2f658e3c7 — Environment-variable access.

pkgs/npm/[email protected]/src/modelLoader.ts:38

        process.env.MODEL_LIST_CONFIG_JSON ?? 'https://raw.githubusercontent.com/FlowiseAI/Flowise/main/packages/components/models.json'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d5c1b8daa0a3b84c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/modelLoader.ts:41

            const resp = await axios.get(modelFile)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #ddc0f1cb8debed17 — Filesystem access.

pkgs/npm/[email protected]/src/modelLoader.ts:48

            const models = await fs.promises.readFile(modelFile, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3cae61c6eef7523 — Filesystem access.

pkgs/npm/[email protected]/src/modelLoader.ts:55

        const models = await fs.promises.readFile(getModelsJSONPath(), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c9ddb3e8ff188118 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/speechToText.ts:96

                    const response = await axios.post(`${baseUrl}?api-version=${apiVersion}`, formData, {
                        headers: {
                            'Ocp-Apim-Subscription-Key': credentialData.azureSubscriptionKey,
                            Accept: 'application/json'
                        }
                    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #ade3f459f0dd2dfe — Environment-variable access.

pkgs/npm/[email protected]/src/storage/AzureBlobStorageProvider.ts:40

        const connectionString = process.env.AZURE_BLOB_STORAGE_CONNECTION_STRING

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0ee8a854385ecd7 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/AzureBlobStorageProvider.ts:41

        const accountName = process.env.AZURE_BLOB_STORAGE_ACCOUNT_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #672e2e6904419a8b — Environment-variable access.

pkgs/npm/[email protected]/src/storage/AzureBlobStorageProvider.ts:42

        const accountKey = process.env.AZURE_BLOB_STORAGE_ACCOUNT_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1aa32912e1a27caa — Environment-variable access.

pkgs/npm/[email protected]/src/storage/AzureBlobStorageProvider.ts:43

        const containerName = process.env.AZURE_BLOB_STORAGE_CONTAINER_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd86a1368a1f11e6 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/AzureBlobStorageProvider.ts:265

        const connectionString = process.env.AZURE_BLOB_STORAGE_CONNECTION_STRING

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c74a2aee8573940 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/AzureBlobStorageProvider.ts:276

            storageConfig.accountName = process.env.AZURE_BLOB_STORAGE_ACCOUNT_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc14c2e66b01874e — Environment-variable access.

pkgs/npm/[email protected]/src/storage/AzureBlobStorageProvider.ts:277

            storageConfig.accessKey = process.env.AZURE_BLOB_STORAGE_ACCOUNT_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #102adbead312495a — Environment-variable access.

pkgs/npm/[email protected]/src/storage/AzureBlobStorageProvider.ts:285

        const connectionString = process.env.AZURE_BLOB_STORAGE_CONNECTION_STRING

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2efb16b2ff16747e — Environment-variable access.

pkgs/npm/[email protected]/src/storage/AzureBlobStorageProvider.ts:286

        const accountName = process.env.AZURE_BLOB_STORAGE_ACCOUNT_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af66a44d159f6d7b — Environment-variable access.

pkgs/npm/[email protected]/src/storage/AzureBlobStorageProvider.ts:287

        const accountKey = process.env.AZURE_BLOB_STORAGE_ACCOUNT_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c27e5e6845e39f6 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/BaseStorageProvider.ts:63

        const storagePath = process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a20c55edda5d7896 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/BaseStorageProvider.ts:64

            ? path.join(process.env.BLOB_STORAGE_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4e728786121fd73 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/GCSStorageProvider.ts:32

        const keyFilename = process.env.GOOGLE_CLOUD_STORAGE_CREDENTIAL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f332b44d4e9c8563 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/GCSStorageProvider.ts:33

        const projectId = process.env.GOOGLE_CLOUD_STORAGE_PROJ_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aecfecd8e701e8f0 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/GCSStorageProvider.ts:34

        const bucketName = process.env.GOOGLE_CLOUD_STORAGE_BUCKET_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ee2f4808631c632 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/GCSStorageProvider.ts:333

                uniformBucketLevelAccess: Boolean(process.env.GOOGLE_CLOUD_UNIFORM_BUCKET_ACCESS) ?? true,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7fef71006b3e892 — Filesystem access.

pkgs/npm/[email protected]/src/storage/LocalStorageProvider.ts:1

import fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37706eedb5fc8e63 — Filesystem access.

pkgs/npm/[email protected]/src/storage/LocalStorageProvider.ts:40

        fs.writeFileSync(filePath, bf)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5799ec759c5ca587 — Filesystem access.

pkgs/npm/[email protected]/src/storage/LocalStorageProvider.ts:60

        fs.writeFileSync(filePath, bf)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bf97cc8b061aba4 — Filesystem access.

pkgs/npm/[email protected]/src/storage/LocalStorageProvider.ts:74

        fs.writeFileSync(filePath, bf)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1fba19467739405 — Filesystem access.

pkgs/npm/[email protected]/src/storage/LocalStorageProvider.ts:81

        return fs.readFileSync(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4948604b64a0423 — Filesystem access.

pkgs/npm/[email protected]/src/storage/LocalStorageProvider.ts:88

            return fs.readFileSync(fileInStorage)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f64423555c2285dd — Filesystem access.

pkgs/npm/[email protected]/src/storage/LocalStorageProvider.ts:114

                    return fs.readFileSync(targetPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46e6a09b97d516b7 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/LocalStorageProvider.ts:344

        return process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9322abdba5dbbea9 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/LocalStorageProvider.ts:345

            ? path.join(process.env.BLOB_STORAGE_PATH, 'uploads')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4de0d79b32e3872f — Environment-variable access.

pkgs/npm/[email protected]/src/storage/LocalStorageProvider.ts:350

        return process.env.HOME || process.env.USERPROFILE || process.env.HOMEPATH || ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d542187c603f0fda — Environment-variable access.

pkgs/npm/[email protected]/src/storage/S3StorageProvider.ts:34

        const accessKeyId = process.env.S3_STORAGE_ACCESS_KEY_ID

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ce875054d8cf059 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/S3StorageProvider.ts:35

        const secretAccessKey = process.env.S3_STORAGE_SECRET_ACCESS_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe97dd07800cf050 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/S3StorageProvider.ts:36

        const region = process.env.S3_STORAGE_REGION

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01d4a64a76712925 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/S3StorageProvider.ts:37

        const bucket = process.env.S3_STORAGE_BUCKET_NAME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #235bdda41d6899f3 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/S3StorageProvider.ts:38

        const customURL = process.env.S3_ENDPOINT_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3aaa8667242eb36 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/S3StorageProvider.ts:39

        const forcePathStyle = process.env.S3_FORCE_PATH_STYLE === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #506d3a3d0cef67f7 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/S3StorageProvider.ts:73

            region: process.env.S3_STORAGE_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc299d911741d12e — Environment-variable access.

pkgs/npm/[email protected]/src/storage/S3StorageProvider.ts:74

            endpoint: process.env.S3_ENDPOINT_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #428088f3202d85da — Environment-variable access.

pkgs/npm/[email protected]/src/storage/S3StorageProvider.ts:536

            const instance = process.env.HOSTNAME || process.env.POD_NAME || String(process.pid)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b99c9b480f8ffd8 — Environment-variable access.

pkgs/npm/[email protected]/src/storage/StorageProviderFactory.ts:20

            const storageType = process.env.STORAGE_TYPE || 'local'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a721623a4ca0f8bb — Filesystem access.

pkgs/npm/[email protected]/src/storageUtils.ts:1

import fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c981a703bf99f55b — Environment-variable access.

pkgs/npm/[email protected]/src/storageUtils.ts:51

    const storagePath = process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c13070af6398260b — Environment-variable access.

pkgs/npm/[email protected]/src/storageUtils.ts:52

        ? path.join(process.env.BLOB_STORAGE_PATH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ecedbc2957f35e5 — Environment-variable access.

pkgs/npm/[email protected]/src/storageUtils.ts:64

    return process.env.STORAGE_TYPE ? process.env.STORAGE_TYPE : 'local'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a9f4a0b2f3195e01 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:21

    for (const k of ENV_KEYS) delete process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cb00e1f38a600a0f — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:28

    for (const k of ENV_KEYS) envSnapshot[k] = process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #139c6ab3c407b08f — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:37

        if (v !== undefined) process.env[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #798b7c8bda7d5014 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:48

        process.env.LANGSMITH_TRACING = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a16b3a87c8fd2d8f — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:49

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2cad5ef5c3e6c9f3 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:52

        process.env.LANGSMITH_TRACING = '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1624a6269ce08121 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:55

        process.env.LANGSMITH_TRACING = 'TRUE'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ca4bbebf42deb8a7 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:60

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #422d40430493763e — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:65

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #76af6744dda7e188 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:66

        process.env.LANGSMITH_API_KEY = 'new-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ac990c4afbf5c995 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:75

        process.env.LANGCHAIN_TRACING_V2 = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0be96550f5c34bfe — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:76

        process.env.LANGCHAIN_API_KEY = 'legacy-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cf7c28a09ae5e448 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:77

        process.env.LANGCHAIN_ENDPOINT = 'https://legacy.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #405c5374bb7f069f — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:78

        process.env.LANGCHAIN_PROJECT = 'legacy-proj'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d9cdefea6d3f0c8d — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:87

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a62d8803866f6aa6 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:88

        process.env.LANGCHAIN_TRACING_V2 = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #66178f40cff6bdf0 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:89

        process.env.LANGSMITH_API_KEY = 'new-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e7f2c1ecde628a94 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:90

        process.env.LANGCHAIN_API_KEY = 'legacy-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5c17c4178a77f583 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:91

        process.env.LANGSMITH_ENDPOINT = 'https://new.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #84b46e1346e343d8 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:92

        process.env.LANGCHAIN_ENDPOINT = 'https://legacy.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #186f67ad29697836 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:93

        process.env.LANGSMITH_PROJECT = 'new-proj'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8d0e619334a5639c — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:94

        process.env.LANGCHAIN_PROJECT = 'legacy-proj'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #40f6e8ec1eac0388 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:103

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #28dfcc4168fe2ebc — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:104

        process.env.LANGCHAIN_API_KEY = 'legacy-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #16f48e84483d4abf — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:113

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #29c8e1d4926887a7 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:114

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1adf14ba6b1c6020 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:115

        process.env.LANGSMITH_ENDPOINT = 'https://api.smith.langchain.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #085e9ac7a08461de — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:116

        process.env.LANGSMITH_PROJECT = 'my-proj'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3fa03f50081adeea — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:129

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0bd57eb8ac23a2ed — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:130

        process.env.LANGSMITH_API_KEY = 'k1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #518b471139ab9d57 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:135

        process.env.LANGSMITH_API_KEY = 'k2'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8999427147461049 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:144

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7628eee86e80eddd — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:145

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a53300b2dd22022e — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:152

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1b82e70cab5a71b1 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:153

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2224063355024745 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:197

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a43791709f12c09d — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:198

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #96d9b9d1393758fe — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:212

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8996b478caabd106 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:213

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0cb57cd250e28d42 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:214

        process.env.LANGSMITH_ENDPOINT = 'https://e.example.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0e76ad8eff7c0c80 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:215

        process.env.LANGSMITH_PROJECT = 'proj'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9a16bc45567a99ad — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:233

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #78b647677d53937f — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:234

        process.env.LANGSMITH_API_KEY = 'env-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bd35c0edb38fa97f — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:245

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #097b707cc0e487ef — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:246

        process.env.LANGSMITH_API_KEY = 'env-key'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2ae9bd0bbdf51d96 — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:259

        process.env.LANGSMITH_TRACING = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5d67fa004c0e4bfd — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.test.ts:260

        process.env.LANGSMITH_API_KEY = 'k'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ceba8e1b0869f5b — Environment-variable access.

pkgs/npm/[email protected]/src/tracingEnv.ts:71

    for (const k of LANGCHAIN_TRACING_FLAG_VARS) delete process.env[k]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d2165ca0f3add403 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.test.ts:245

        delete process.env.ALLOW_BUILTIN_DEP

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3609ff7260240bb8 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.test.ts:246

        delete process.env.TOOL_FUNCTION_EXTERNAL_DEP

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #59dba7b31fa2fb7d — Environment-variable access.

pkgs/npm/[email protected]/src/utils.test.ts:251

            process.env.ALLOW_BUILTIN_DEP = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bfc1a37cbe947294 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.test.ts:278

        process.env.ALLOW_BUILTIN_DEP = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bde4a381513df2ef — Environment-variable access.

pkgs/npm/[email protected]/src/utils.test.ts:284

        process.env.ALLOW_BUILTIN_DEP = 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1048711798e358d4 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.test.ts:285

        process.env.TOOL_FUNCTION_EXTERNAL_DEP = 'pg'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f76c2d0c6fa470ed — Filesystem access.

pkgs/npm/[email protected]/src/utils.ts:12

import * as fs from 'fs'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b116bb942475ef8b — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:32

const USE_AWS_SECRETS_MANAGER = process.env.SECRETKEY_STORAGE_TYPE === 'aws'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4d19139c9d4d417 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:34

    const region = process.env.SECRETKEY_AWS_REGION || 'us-east-1' // Default region if not provided

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a9a6956affbddb7 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:35

    const accessKeyId = process.env.SECRETKEY_AWS_ACCESS_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1681936623cf9f9 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:36

    const secretAccessKey = process.env.SECRETKEY_AWS_SECRET_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #e6d044dab42ff24a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/utils.ts:361

        const response = await axios.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #5e2550884a9047a6 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:408

            if (process.env.DEBUG === 'true') console.error(`error with scraped URL: ${err.message}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d628a522597c0253 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:454

    if (process.env.DEBUG === 'true') console.info(`actively crawling ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f8a270989628072 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:459

            if (process.env.DEBUG === 'true') console.error(`error in fetch with status code: ${resp.status}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd892427e7453911 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:465

            if (process.env.DEBUG === 'true') console.error(`non html response, content type: ${contentType}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70342dfe3342af34 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:475

        if (process.env.DEBUG === 'true') console.error(`error in fetch url: ${err.message}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #311c03132cd15c9c — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:510

    if (process.env.DEBUG === 'true') console.info(`actively scarping ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a24a22b1a602eb99 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:515

            if (process.env.DEBUG === 'true') console.error(`error in fetch with status code: ${resp.status}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eed6f958d3af921b — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:521

            if (process.env.DEBUG === 'true') console.error(`non xml response, content type: ${contentType}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d193311fdffe817 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:528

        if (process.env.DEBUG === 'true') console.error(`error in fetch url: ${err.message}, on page: ${currentURL}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fff3b1da3b304c2 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:540

        return typeof process !== 'undefined' ? process.env?.[name] : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #977e9f0516398060 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:571

    return process.env.SECRETKEY_PATH ? path.join(process.env.SECRETKEY_PATH, 'encryption.key') : getEncryptionKeyFilePath()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a11eff297bbf221 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:579

    if (process.env.FLOWISE_SECRETKEY_OVERWRITE !== undefined && process.env.FLOWISE_SECRETKEY_OVERWRITE !== '') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fffb83151588f225 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:580

        return process.env.FLOWISE_SECRETKEY_OVERWRITE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5adddfaf5b9084b — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:584

            const secretId = process.env.SECRETKEY_AWS_NAME || 'FlowiseEncryptionKey'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f4619233eb17f2f — Filesystem access.

pkgs/npm/[email protected]/src/utils.ts:592

        return await fs.promises.readFile(getEncryptionKeyPath(), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a66407439b9b77fa — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:734

    if (process.env[variableName] === undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e0c50f34ceed384 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:738

    return process.env[variableName] as string

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b6418f35f30b33e — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:1021

                value = process.env[item.name] ?? ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e038f25bb272ad01 — Filesystem access.

pkgs/npm/[email protected]/src/utils.ts:1048

            const content = await fs.promises.readFile(checkPath, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #0dca456cedc730d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/utils.ts:1472

                const refreshResponse = await fetch(
                    `${options.baseURL || 'http://localhost:3000'}/api/v1/oauth2-credential/refresh/${credentialId}`,
                    {
                        method: 'POST',
                        headers: {
                            'Content-Type': 'application/json'
                        }
                    }
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #76f267c24bab17bb — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:1603

    const shouldUseE2BSandbox = useSandbox && process.env.E2B_APIKEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a6cc7631b48f591 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:1606

    if (process.env.SANDBOX_TIMEOUT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4e3e5d89f3fc571 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:1607

        timeoutMs = parseInt(process.env.SANDBOX_TIMEOUT, 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe7dac51e6a02182 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:1665

            const sbx = await Sandbox.create({ apiKey: process.env.E2B_APIKEY, timeoutMs })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9ac12c17cfe4484 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:1729

        const builtinDeps = process.env.TOOL_FUNCTION_BUILTIN_DEP

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aeaa05991dcc2b29 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:1730

            ? defaultAllowBuiltInDep.concat(process.env.TOOL_FUNCTION_BUILTIN_DEP.split(','))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eeeb65cdaa833263 — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:1732

        const externalDeps = process.env.TOOL_FUNCTION_EXTERNAL_DEP ? process.env.TOOL_FUNCTION_EXTERNAL_DEP.split(',') : []

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b7e3d635a37e89f — Environment-variable access.

pkgs/npm/[email protected]/src/utils.ts:1733

        let deps = process.env.ALLOW_BUILTIN_DEP === 'true' ? availableDependencies.concat(externalDeps) : externalDeps

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #12cf6211e1d98fa1 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:55

            process.env.PATH_TRAVERSAL_SAFETY = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #283feeaddde844a5 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:58

            delete process.env.PATH_TRAVERSAL_SAFETY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ec553d89f6916992 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:75

            process.env.PATH_TRAVERSAL_SAFETY = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e1490e678e974a54 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:78

            delete process.env.PATH_TRAVERSAL_SAFETY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #84691f4e5c34c62b — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:365

            const originalEnv = process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bdacc1bec02005e2 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:366

            delete process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9c92ac91f50ba628 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:375

                    process.env.BLOB_STORAGE_PATH = originalEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8c39d05de60ed1b5 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:396

        const originalEnv = process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6a6d527813ab37ab — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:401

                process.env.BLOB_STORAGE_PATH = originalEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2c649abe36e95fb3 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:403

                delete process.env.BLOB_STORAGE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f1f798e5d2acad3a — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:409

            process.env.BLOB_STORAGE_PATH = customStoragePath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b40d91fcee9784f6 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:418

            process.env.BLOB_STORAGE_PATH = path.join(userHome, 'custom-storage')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #093edc407cc16aeb — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:453

            process.env.PATH_TRAVERSAL_SAFETY = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #54d72e1e874847a8 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:456

            delete process.env.PATH_TRAVERSAL_SAFETY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6c391eb6237cf115 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:591

        const originalDatabasePath = process.env.DATABASE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6ef97cbbddb9a0d9 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:595

                delete process.env.DATABASE_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9bfdf5578c3bb01a — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:597

                process.env.DATABASE_PATH = originalDatabasePath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b8e8cd1a25228945 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:603

            process.env.DATABASE_PATH = customBase

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fcff0eb2610fbe18 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:609

            process.env.DATABASE_PATH = path.join(userHome, 'custom-flowise-data')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #92a7d2c16f80c095 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:616

            process.env.PATH_TRAVERSAL_SAFETY = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bc52ef7840abff1f — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:619

            delete process.env.PATH_TRAVERSAL_SAFETY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ad0585734c67ec13 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:788

            process.env.PATH_TRAVERSAL_SAFETY = 'false'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5b1933de910559e0 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.test.ts:791

            delete process.env.PATH_TRAVERSAL_SAFETY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d915ae7178580ba3 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.ts:41

    if (process.env.PATH_TRAVERSAL_SAFETY === 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #188f3a78c0d1d1fa — Environment-variable access.

pkgs/npm/[email protected]/src/validator.ts:70

    if (process.env.PATH_TRAVERSAL_SAFETY === 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44b963655c7c9935 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.ts:195

    if (process.env.BLOB_STORAGE_PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a00dec9367384c0 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.ts:196

        allowedDirs.push(path.resolve(process.env.BLOB_STORAGE_PATH))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91ec6e3cd224c41b — Environment-variable access.

pkgs/npm/[email protected]/src/validator.ts:213

    if (process.env.PATH_TRAVERSAL_SAFETY === 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #96f4d62238cd3235 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.ts:290

    if (process.env.DATABASE_PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df8c7b32c49911f0 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.ts:291

        dirs.push(path.resolve(process.env.DATABASE_PATH))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1de3cbf50e7f4053 — Environment-variable access.

pkgs/npm/[email protected]/src/validator.ts:324

    if (process.env.PATH_TRAVERSAL_SAFETY === 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef8831cc5f48591d — Environment-variable access.

pkgs/npm/[email protected]/src/validator.ts:423

    if (process.env.PATH_TRAVERSAL_SAFETY === 'false') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

posthog-node

npm dependency

medium telemetry dependency Excluded from app score #0b9579752d1df669 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/[email protected]/src/extensions/express.ts:69

    posthog.withContext(buildRequestContextData(posthog, req), () => next())

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c219ec68d3791661 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/[email protected]/src/extensions/express.ts:98

    posthog.addPendingPromise(
      ErrorTracking.buildEventMessage(
        posthog.getErrorPropertiesBuilder(),
        error,
        hint,
        contextData.distinctId,
        additionalProperties
      ).then((msg) => {
        return posthog._capturePreparedEvent(msg, false)
      })
    )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cbd37b2e3b58b917 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/[email protected]/src/extensions/express.ts:100

        posthog.getErrorPropertiesBuilder(),

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7e243413dcd181b6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/[email protected]/src/extensions/express.ts:106

        return posthog._capturePreparedEvent(msg, false)

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 2 low-confidence finding(s)

low egress dependency Excluded from app score #9fcf6075225811ce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/client.ts:420

    return this.options.fetch ? this.options.fetch(url, options) : fetch(url, options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a4381744807988be — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/extensions/feature-flags/feature-flags.ts:1020

      return fetch(url, options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@brave/brave-search-mcp-server

npm dependency

medium pii_flow dependency Excluded from app score #7240df6224a27e7d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/src/config.ts:135 · flow /tmp/closeopen-n94bn249/pkgs/npm/@[email protected]__reposrc/src/config.ts:77 → /tmp/closeopen-n94bn249/pkgs/npm/@[email protected]__reposrc/src/config.ts:135

    console.error(
      `Invalid --transport value: '${options.transport}'. Must be one of: stdio, http.`
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5c5ff8886cf9dc21 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/src/config.ts:142 · flow /tmp/closeopen-n94bn249/pkgs/npm/@[email protected]__reposrc/src/config.ts:77 → /tmp/closeopen-n94bn249/pkgs/npm/@[email protected]__reposrc/src/config.ts:142

    console.error(
      `Invalid --logging-level value: '${options.loggingLevel}'. Must be one of: ${LoggingLevelSchema.options.join(', ')}`
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow dependency Excluded from app score #5cf93cef6944f306 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/src/config.ts:157 · flow /tmp/closeopen-n94bn249/pkgs/npm/@[email protected]__reposrc/src/config.ts:77 → /tmp/closeopen-n94bn249/pkgs/npm/@[email protected]__reposrc/src/config.ts:157

      console.error(
        `Invalid --port value: '${options.port}'. Must be a valid port number between 1 and 65535.`
      );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 11 low-confidence finding(s)

low egress dependency Excluded from app score #3882a4e4d601db74 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/BraveAPI/index.ts:94

  const response = await fetch(urlWithParams, { headers });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #aa25eaf6c132a324 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/config.ts:14

    .default(process.env.BRAVE_API_KEY ?? ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac9c971a84abfe0e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/config.ts:61

  braveApiKey: process.env.BRAVE_API_KEY ?? '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #086b0e3a4d7f7f0c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/config.ts:77

    .option('--brave-api-key <string>', 'Brave API key', process.env.BRAVE_API_KEY ?? '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9eba3f14f7c84bdd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/config.ts:78

    .option('--logging-level <string>', 'Logging level', process.env.BRAVE_MCP_LOG_LEVEL ?? 'info')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f63bcc192bdc01d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/config.ts:82

      process.env.BRAVE_MCP_TRANSPORT ?? 'stdio'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f40cd7b110327bb7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/config.ts:87

      process.env.BRAVE_MCP_ENABLED_TOOLS?.trim().split(' ') ?? []

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26df74120121bffb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/config.ts:92

      process.env.BRAVE_MCP_DISABLED_TOOLS?.trim().split(' ') ?? []

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5fe0e6052773322 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/config.ts:97

      process.env.BRAVE_MCP_PORT ?? '8080'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4b07e6e98af453b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/config.ts:102

      process.env.BRAVE_MCP_HOST ?? '0.0.0.0'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28c081100ecc25d1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/config.ts:107

      process.env.BRAVE_MCP_STATELESS === 'true' ? true : false

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

winston

npm dependency

medium pii_flow dependency Excluded from app score #6e8a48ce2d8af2b1 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/lib/winston/transports/http.js:242 · flow /tmp/closeopen-n94bn249/pkgs/npm/[email protected]/lib/winston/transports/http.js:249 → /tmp/closeopen-n94bn249/pkgs/npm/[email protected]/lib/winston/transports/http.js:242

    const req = (this.ssl ? https : http).request({
      ...this.options,
      method: 'POST',
      host: this.host,
      port: this.port,
      path: `/${path.replace(/^\//, '')}`,
      headers: headers,
      auth: (auth && auth.username && auth.password) ? (`${auth.username}:${auth.password}`) : '',
      agent: this.agent
    });

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #bb4695b2d12dabb1 — Filesystem access.

pkgs/npm/[email protected]/lib/winston/tail-file.js:10

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c1788f8b5e3fae9 — Filesystem access.

pkgs/npm/[email protected]/lib/winston/transports/file.js:11

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #2cfa4ba6fe4af18d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/winston/transports/http.js:242

    const req = (this.ssl ? https : http).request({
      ...this.options,
      method: 'POST',
      host: this.host,
      port: this.port,
      path: `/${path.replace(/^\//, '')}`,
      headers: headers,
      auth: (auth && auth.username && auth.password) ? (`${auth.username}:${auth.password}`) : '',
      agent: this.agent
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

winston-azure-blob

npm dependency

medium pii_flow tooling Excluded from app score unknown #3c624936bce3de51 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/[email protected]__reposrc/examples/index.ts:33 · flow /tmp/closeopen-n94bn249/pkgs/npm/[email protected]__reposrc/examples/index.ts:19 → /tmp/closeopen-n94bn249/pkgs/npm/[email protected]__reposrc/examples/index.ts:33

    logger.info(`index ${v} sample log ${randAnimalType()}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 2 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #96cca9c65c879498 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/index.ts:18

                host: process.env.HOST || "host",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ce582af46be6f90f — Environment-variable access.

pkgs/npm/[email protected]__reposrc/examples/index.ts:19

                sasToken: process.env.SAS_TOKEN || "sasToken",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@anthropic-ai/sdk

npm dependency

expand_more 266 low-confidence finding(s)

low env_fs dependency Excluded from app score #7ad93933875facac — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.js:110

        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ecceb0ce6da8154 — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.js:210

        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54a208eb6b73237f — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.js:308

        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7186bcd539b323cd — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.mjs:73

        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b21283e1888ab219 — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.mjs:172

        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24c0bd3af55c697d — Filesystem access.

pkgs/npm/@[email protected]/core/credentials.mjs:268

        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86c586ad84b08598 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/credential-chain.js:203

            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #562fd7d295b47feb — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/credential-chain.mjs:166

            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2edf604f78b0cbc3 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/identity-token.js:51

            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81c629fd947598f0 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/identity-token.mjs:14

            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #725e5ca31ffc62a1 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/types.js:195

            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c054587412ed409c — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/types.mjs:154

            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbecb389e51bb321 — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:56

            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e99fa25398e242f — Filesystem access.

pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:20

            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #62d2c357295a1ae3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.js:53

        return this._client.get((0, path_1.path) `/v1/agents/${agentID}?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0d010a8593cd6b2a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.js:76

        return this._client.post((0, path_1.path) `/v1/agents/${agentID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a1f812c9bdcdbca7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.js:120

        return this._client.post((0, path_1.path) `/v1/agents/${agentID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e48233fc1d4bc4a7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.mjs:49

        return this._client.get(path `/v1/agents/${agentID}?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #55f7b1458cb03429 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.mjs:72

        return this._client.post(path `/v1/agents/${agentID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #40070ce33b52ee4a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/agents/agents.mjs:116

        return this._client.post(path `/v1/agents/${agentID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a207e81d948d4023 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployment-runs.js:23

        return this._client.get((0, path_1.path) `/v1/deployment_runs/${deploymentRunID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4d709da35c647472 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployment-runs.mjs:20

        return this._client.get(path `/v1/deployment_runs/${deploymentRunID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #53b95bb5cf11c0b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:58

        return this._client.get((0, path_1.path) `/v1/deployments/${deploymentID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a7ee0601bb8bf0c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:79

        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cf63f5251786a27c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:123

        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #59d7ed72eac5f4d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:144

        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/pause?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cca38dd83c7dc13d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:165

        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/run?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #41d0d25abdd39b42 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.js:186

        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/unpause?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a94cabead01d68e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:55

        return this._client.get(path `/v1/deployments/${deploymentID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8255a71cee0055ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:76

        return this._client.post(path `/v1/deployments/${deploymentID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8973fb24dcc62217 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:120

        return this._client.post(path `/v1/deployments/${deploymentID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f107a25a02e9b3cf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:141

        return this._client.post(path `/v1/deployments/${deploymentID}/pause?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #28a51fdd82449b38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:162

        return this._client.post(path `/v1/deployments/${deploymentID}/run?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #954236f9487f5bbf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/deployments.mjs:183

        return this._client.post(path `/v1/deployments/${deploymentID}/unpause?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f1a7666f7cddc565 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.js:44

        return this._client.get((0, path_1.path) `/v1/dreams/${dreamID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b1f6d6bf24d8760f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.js:86

        return this._client.post((0, path_1.path) `/v1/dreams/${dreamID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5b59c93d9bfec026 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.js:106

        return this._client.post((0, path_1.path) `/v1/dreams/${dreamID}/cancel?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2447dd174139737d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.mjs:41

        return this._client.get(path `/v1/dreams/${dreamID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ebaf1e04d307dd0d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.mjs:83

        return this._client.post(path `/v1/dreams/${dreamID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #352b3171803fecef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/dreams.mjs:103

        return this._client.post(path `/v1/dreams/${dreamID}/cancel?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bcc8d8fb321e23ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.js:52

        return this._client.get((0, path_1.path) `/v1/environments/${environmentID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #816d2f4a3bac2ab8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.js:73

        return this._client.post((0, path_1.path) `/v1/environments/${environmentID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #55b812bc981ec63c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.js:139

        return this._client.post((0, path_1.path) `/v1/environments/${environmentID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #54c7590202f8b7ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.mjs:48

        return this._client.get(path `/v1/environments/${environmentID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bcc701ea56a1ceb1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.mjs:69

        return this._client.post(path `/v1/environments/${environmentID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8e7ad3f6f1e4edf0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/environments.mjs:135

        return this._client.post(path `/v1/environments/${environmentID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #923b551daffc2c60 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:30

        return this._client.get((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5dcdd4a4561fb18c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:57

        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0b5e057bf9e7175d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:114

        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}/ack?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #99ad477634a55ac3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:140

        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}/heartbeat?beta=true`, {
            query: { desired_ttl_seconds, expected_last_heartbeat },
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #03525a5902b3d898 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:167

        return this._client.get((0, path_1.path) `/v1/environments/${environmentID}/work/poll?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
                    ...(anthropicWorkerID != null ? { 'Anthropic-Worker-ID': anthropicWorkerID } : undefined),
                },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c63b3ad5d1234790 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:192

        return this._client.get((0, path_1.path) `/v1/environments/${environmentID}/work/stats?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #03e37ad5671ae5f6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.js:218

        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}/stop?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #30c84ba0f55f40b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:27

        return this._client.get(path `/v1/environments/${environment_id}/work/${workID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #09291c2e59e841a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:54

        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #357b45a04a95a824 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:111

        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}/ack?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #edb80c0c8229b28d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:137

        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}/heartbeat?beta=true`, {
            query: { desired_ttl_seconds, expected_last_heartbeat },
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e06e25b33c8a44fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:164

        return this._client.get(path `/v1/environments/${environmentID}/work/poll?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                {
                    'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
                    ...(anthropicWorkerID != null ? { 'Anthropic-Worker-ID': anthropicWorkerID } : undefined),
                },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cd516cb993d4351d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:189

        return this._client.get(path `/v1/environments/${environmentID}/work/stats?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4acae3a0d2c55494 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:215

        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}/stop?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d02357017b7ca860 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/files.js:69

        return this._client.get((0, path_1.path) `/v1/files/${fileID}/content?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #301ccc2858b61dee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/files.js:92

        return this._client.get((0, path_1.path) `/v1/files/${fileID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bb7b1aaefff1fd27 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/files.mjs:66

        return this._client.get(path `/v1/files/${fileID}/content?beta=true`, {
            ...options,
            headers: buildHeaders([
                {
                    'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a61b8595b3aeb6d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/files.mjs:89

        return this._client.get(path `/v1/files/${fileID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e0958223a025896e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.js:24

        return this._client.post((0, path_1.path) `/v1/memory_stores/${memoryStoreID}/memories?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1080da070a3b11d3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.js:48

        return this._client.get((0, path_1.path) `/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6d551a478fbd1062 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.js:71

        return this._client.post((0, path_1.path) `/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a9b1916112449a8b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.mjs:21

        return this._client.post(path `/v1/memory_stores/${memoryStoreID}/memories?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #553e0a231753e067 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.mjs:45

        return this._client.get(path `/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c11d55c000bf0de1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.mjs:68

        return this._client.post(path `/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #75bef16a04047974 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.js:53

        return this._client.get((0, path_1.path) `/v1/memory_stores/${memoryStoreID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #74ebc99c49a3104b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.js:72

        return this._client.post((0, path_1.path) `/v1/memory_stores/${memoryStoreID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c8fb10826e4e7ae3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.js:133

        return this._client.post((0, path_1.path) `/v1/memory_stores/${memoryStoreID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1902bd8277032912 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.mjs:49

        return this._client.get(path `/v1/memory_stores/${memoryStoreID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d891f79b60d487c3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.mjs:68

        return this._client.post(path `/v1/memory_stores/${memoryStoreID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bb705a5b8846a345 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.mjs:129

        return this._client.post(path `/v1/memory_stores/${memoryStoreID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4e05a693831e2b61 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-versions.js:24

        return this._client.get((0, path_1.path) `/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #939c750c5fa44755 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-versions.js:71

        return this._client.post((0, path_1.path) `/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}/redact?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #06597877255751e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-versions.mjs:21

        return this._client.get(path `/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4ca8a3b27ef8ff40 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-versions.mjs:68

        return this._client.post(path `/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}/redact?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f0ac10949ce8fd44 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.js:73

        return this._client.get((0, path_1.path) `/v1/messages/batches/${messageBatchID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8539a5cec01bc799 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.js:158

        return this._client.post((0, path_1.path) `/v1/messages/batches/${messageBatchID}/cancel?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6781edb6eaafd4fa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.js:190

        return this._client
            .get(batch.results_url, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            stream: true,
            __binaryResponse: true,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #89755dd9200b4201 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.mjs:70

        return this._client.get(path `/v1/messages/batches/${messageBatchID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a9dd7fc3784cd286 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.mjs:155

        return this._client.post(path `/v1/messages/batches/${messageBatchID}/cancel?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d45dbfd5a77eb839 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/messages/batches.mjs:187

        return this._client
            .get(batch.results_url, {
            ...options,
            headers: buildHeaders([
                {
                    'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            stream: true,
            __binaryResponse: true,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1cf361cbadad7336 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/models.js:25

        return this._client.get((0, path_1.path) `/v1/models/${modelID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5e450470b7634f1b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/models.mjs:22

        return this._client.get(path `/v1/models/${modelID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #37220a043328dd75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/events.js:61

        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}/events?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #37f0124bff210565 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/events.js:83

        return this._client.get((0, path_1.path) `/v1/sessions/${sessionID}/events/stream?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
            stream: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #404973c1726928d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/events.mjs:58

        return this._client.post(path `/v1/sessions/${sessionID}/events?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #30d3f22fd5568cbe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/events.mjs:80

        return this._client.get(path `/v1/sessions/${sessionID}/events/stream?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
            stream: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d01415eae1bcfcbf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.js:24

        return this._client.get((0, path_1.path) `/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f14ccb2ff1393d7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.js:49

        return this._client.post((0, path_1.path) `/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #96e4ea7134015907 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.js:121

        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}/resources?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d40f8eb8e757b465 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.mjs:21

        return this._client.get(path `/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6c6bb95b8a314aaa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.mjs:46

        return this._client.post(path `/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2492d958d99d8a70 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/resources.mjs:118

        return this._client.post(path `/v1/sessions/${sessionID}/resources?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #75d6b838e96495e6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.js:59

        return this._client.get((0, path_1.path) `/v1/sessions/${sessionID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #180208a3aefec8b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.js:80

        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6cd3054b983d02eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.js:145

        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #34c3a06c45e93ec4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.mjs:55

        return this._client.get(path `/v1/sessions/${sessionID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8ead18c07b5d5221 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.mjs:76

        return this._client.post(path `/v1/sessions/${sessionID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d2a1ec659b12a3be — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/sessions.mjs:141

        return this._client.post(path `/v1/sessions/${sessionID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b3f3386da3d9dfbf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/events.js:49

        return this._client.get((0, path_1.path) `/v1/sessions/${session_id}/threads/${threadID}/stream?beta=true`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
            stream: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #41caae06953c2a35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/events.mjs:46

        return this._client.get(path `/v1/sessions/${session_id}/threads/${threadID}/stream?beta=true`, {
            query,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
            stream: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #562b523d4227a770 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/threads.js:31

        return this._client.get((0, path_1.path) `/v1/sessions/${session_id}/threads/${threadID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9305182269254fd7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/threads.js:77

        return this._client.post((0, path_1.path) `/v1/sessions/${session_id}/threads/${threadID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f29306f65382f131 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/threads.mjs:27

        return this._client.get(path `/v1/sessions/${session_id}/threads/${threadID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f6db03f6a4e75c2c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/sessions/threads/threads.mjs:73

        return this._client.post(path `/v1/sessions/${session_id}/threads/${threadID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d47d37ad94bd5f2e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/skills.js:49

        return this._client.get((0, path_1.path) `/v1/skills/${skillID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6dae96716e6e8943 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/skills.mjs:45

        return this._client.get(path `/v1/skills/${skillID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d8bb688fad747992 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.js:24

        return this._client.post((0, path_1.path) `/v1/skills/${skillID}/versions?beta=true`, (0, uploads_1.multipartFormRequestOptions)({
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        }, this._client, false));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #52538c4cd132e217 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.js:46

        return this._client.get((0, path_1.path) `/v1/skills/${skill_id}/versions/${version}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3c35f7c6e902cc7e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.js:115

        return this._client.get((0, path_1.path) `/v1/skills/${skill_id}/versions/${version}/content?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b745bf87c09b9265 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.mjs:21

        return this._client.post(path `/v1/skills/${skillID}/versions?beta=true`, multipartFormRequestOptions({
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        }, this._client, false));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a6c42728d44c75e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.mjs:43

        return this._client.get(path `/v1/skills/${skill_id}/versions/${version}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #42dc4b392a87c5b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/skills/versions.mjs:112

        return this._client.get(path `/v1/skills/${skill_id}/versions/${version}/content?beta=true`, {
            ...options,
            headers: buildHeaders([
                {
                    'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString(),
                    Accept: 'application/binary',
                },
                options?.headers,
            ]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a090603a9a407258 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.js:31

        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/certificates?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d503cac02186b99e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.js:59

        return this._client.get((0, path_1.path) `/v1/tunnels/${tunnel_id}/certificates/${certificateID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6e298c6973f3df38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.js:119

        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #916e2bf04e0fc05f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.mjs:28

        return this._client.post(path `/v1/tunnels/${tunnelID}/certificates?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bf4ae1c77334d47d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.mjs:56

        return this._client.get(path `/v1/tunnels/${tunnel_id}/certificates/${certificateID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #58c82e6684ff0bab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.mjs:116

        return this._client.post(path `/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3d4a34442527dda1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:60

        return this._client.get((0, path_1.path) `/v1/tunnels/${tunnelID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1a3b68acbea5c66a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:116

        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9ff3b3bb9c0ad1d9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:143

        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/reveal_token?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5005e572c8f2b7e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:169

        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/rotate_token?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9e83fdc9a63d2a85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:56

        return this._client.get(path `/v1/tunnels/${tunnelID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f02abfb8c21e7c65 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:112

        return this._client.post(path `/v1/tunnels/${tunnelID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5fd8b452bad82d08 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:139

        return this._client.post(path `/v1/tunnels/${tunnelID}/reveal_token?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #910ac55c320c8887 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:165

        return this._client.post(path `/v1/tunnels/${tunnelID}/rotate_token?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #76450adb952620b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.js:43

        return this._client.get((0, path_1.path) `/v1/user_profiles/${userProfileID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8fc2442abf2a039c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.js:64

        return this._client.post((0, path_1.path) `/v1/user_profiles/${userProfileID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d2c3a5a76e251f9e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.js:108

        return this._client.post((0, path_1.path) `/v1/user_profiles/${userProfileID}/enrollment_url?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cbc5bf0861f627bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.mjs:40

        return this._client.get(path `/v1/user_profiles/${userProfileID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #30d0ebdd7792a4ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.mjs:61

        return this._client.post(path `/v1/user_profiles/${userProfileID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9dbe05e4f27383ef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/user-profiles.mjs:105

        return this._client.post(path `/v1/user_profiles/${userProfileID}/enrollment_url?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3a0fcbb05aa3b09c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:31

        return this._client.post((0, path_1.path) `/v1/vaults/${vaultID}/credentials?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3a1f9dea59978c1d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:54

        return this._client.get((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5529334153efc06e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:76

        return this._client.post((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d5af2aab54e21957 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:145

        return this._client.post((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d289ac3a4fb87543 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:167

        return this._client.post((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}/mcp_oauth_validate?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6569f28da24d7e61 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:28

        return this._client.post(path `/v1/vaults/${vaultID}/credentials?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d700d01dfb38d0bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:51

        return this._client.get(path `/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #952fbe9d7a399c38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:73

        return this._client.post(path `/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #89a8568c0d93de84 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:142

        return this._client.post(path `/v1/vaults/${vault_id}/credentials/${credentialID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a1ccce230fa2a1e5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:164

        return this._client.post(path `/v1/vaults/${vault_id}/credentials/${credentialID}/mcp_oauth_validate?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cd9f0f9115ed28cf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.js:52

        return this._client.get((0, path_1.path) `/v1/vaults/${vaultID}?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #388f790f48719403 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.js:73

        return this._client.post((0, path_1.path) `/v1/vaults/${vaultID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #23326943a2ab86b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.js:138

        return this._client.post((0, path_1.path) `/v1/vaults/${vaultID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aca21437ba53a844 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.mjs:48

        return this._client.get(path `/v1/vaults/${vaultID}?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b0cbe48c8b17d408 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.mjs:69

        return this._client.post(path `/v1/vaults/${vaultID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #99e24a6d46041d13 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/beta/vaults/vaults.mjs:134

        return this._client.post(path `/v1/vaults/${vaultID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #74ce5448d80e779d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.js:67

        return this._client.get((0, path_1.path) `/v1/messages/batches/${messageBatchID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ed2b638c5037cc11 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.js:127

        return this._client.post((0, path_1.path) `/v1/messages/batches/${messageBatchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #db2224aab4d8e4c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.js:150

        return this._client
            .get(batch.results_url, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/binary' }, options?.headers]),
            stream: true,
            __binaryResponse: true,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #43d29d8dad5074a8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.mjs:64

        return this._client.get(path `/v1/messages/batches/${messageBatchID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d0e0788283213de3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.mjs:124

        return this._client.post(path `/v1/messages/batches/${messageBatchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b0a120502367f3ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/messages/batches.mjs:147

        return this._client
            .get(batch.results_url, {
            ...options,
            headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
            stream: true,
            __binaryResponse: true,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #13e4aa321debded9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/models.js:18

        return this._client.get((0, path_1.path) `/v1/models/${modelID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a91620056f38764b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/resources/models.mjs:15

        return this._client.get(path `/v1/models/${modelID}`, {
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #3bb0a076b0e95628 — Filesystem access.

pkgs/npm/@[email protected]/src/core/credentials.ts:154

    configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d6e5966b12c8b69 — Filesystem access.

pkgs/npm/@[email protected]/src/core/credentials.ts:258

    raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21828ba22ce7a570 — Filesystem access.

pkgs/npm/@[email protected]/src/core/credentials.ts:372

    return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f87ac86ac3e9fb9f — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/credential-chain.ts:250

      const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cca2cc0c2fec34bd — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/identity-token.ts:17

      content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #003ca8cf72f418db — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/types.ts:222

      await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05f1b7d0db16adb1 — Filesystem access.

pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:45

      raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3dc9aae2f81dc119 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/agents/agents.ts:58

    return this._client.get(path`/v1/agents/${agentID}?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #de310e55c97e1e74 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/agents/agents.ts:86

    return this._client.post(path`/v1/agents/${agentID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ded7841d8208f94b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/agents/agents.ts:139

    return this._client.post(path`/v1/agents/${agentID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0c9db73b3ba01c91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployment-runs.ts:30

    return this._client.get(path`/v1/deployment_runs/${deploymentRunID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #836fa77c598a09e2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:69

    return this._client.get(path`/v1/deployments/${deploymentID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a31dc077455b4b13 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:95

    return this._client.post(path`/v1/deployments/${deploymentID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #87b9c4b91dbad542 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:148

    return this._client.post(path`/v1/deployments/${deploymentID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8f5be966816edb76 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:174

    return this._client.post(path`/v1/deployments/${deploymentID}/pause?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3785ba68b4cb5cea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:200

    return this._client.post(path`/v1/deployments/${deploymentID}/run?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1a3f70d446e7f106 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:226

    return this._client.post(path`/v1/deployments/${deploymentID}/unpause?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #259db8040d55d22d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/dreams.ts:51

    return this._client.get(path`/v1/dreams/${dreamID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d23a0b6ca5470e95 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/dreams.ts:102

    return this._client.post(path`/v1/dreams/${dreamID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #390673b6448f7ee6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/dreams.ts:127

    return this._client.post(path`/v1/dreams/${dreamID}/cancel?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #215037e0ad640912 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/environments.ts:74

    return this._client.get(path`/v1/environments/${environmentID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9d747593a956761d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/environments.ts:100

    return this._client.post(path`/v1/environments/${environmentID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2e2f2270618a11a2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/environments.ts:180

    return this._client.post(path`/v1/environments/${environmentID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c213b5b564d609a8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:43

    return this._client.get(path`/v1/environments/${environment_id}/work/${workID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3763d80572911b5e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:71

    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6aa9b6f28ca44daa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:138

    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}/ack?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7b232014b289b03c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:169

    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}/heartbeat?beta=true`, {
      query: { desired_ttl_seconds, expected_last_heartbeat },
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #77076a2659463c8f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:201

    return this._client.get(path`/v1/environments/${environmentID}/work/poll?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        {
          'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString(),
          ...(anthropicWorkerID != null ? { 'Anthropic-Worker-ID': anthropicWorkerID } : undefined),
        },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3d8f51c290c9ddda — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:231

    return this._client.get(path`/v1/environments/${environmentID}/work/stats?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6111b9ee841a6644 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:258

    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}/stop?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a958460fe4caa8ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/files.ts:85

    return this._client.get(path`/v1/files/${fileID}/content?beta=true`, {
      ...options,
      headers: buildHeaders([
        {
          'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString(),
          Accept: 'application/binary',
        },
        options?.headers,
      ]),
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0248238f3c41fb00 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/files.ts:113

    return this._client.get(path`/v1/files/${fileID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fc0e77606519f7f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memories.ts:30

    return this._client.post(path`/v1/memory_stores/${memoryStoreID}/memories?beta=true`, {
      query: { view },
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #83eb4371282f6e7b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memories.ts:59

    return this._client.get(path`/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f5c74043c0099f7b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memories.ts:87

    return this._client.post(path`/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
      query: { view },
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #db732360241789bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-stores.ts:91

    return this._client.get(path`/v1/memory_stores/${memoryStoreID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #33388fc587ec2083 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-stores.ts:115

    return this._client.post(path`/v1/memory_stores/${memoryStoreID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #747c674509ece5cc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-stores.ts:190

    return this._client.post(path`/v1/memory_stores/${memoryStoreID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #288575c6b0b31e94 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-versions.ts:31

    return this._client.get(
      path`/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}?beta=true`,
      {
        query,
        ...options,
        headers: buildHeaders([
          { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
          options?.headers,
        ]),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #738a6df3e68eb498 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-versions.ts:95

    return this._client.post(
      path`/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}/redact?beta=true`,
      {
        ...options,
        headers: buildHeaders([
          { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
          options?.headers,
        ]),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7212b272d2ddc846 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/messages/batches.ts:82

    return this._client.get(path`/v1/messages/batches/${messageBatchID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9c031e2b87c9a9e8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/messages/batches.ts:181

    return this._client.post(path`/v1/messages/batches/${messageBatchID}/cancel?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #022ba686d3b4c4d8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/messages/batches.ts:221

    return this._client
      .get(batch.results_url, {
        ...options,
        headers: buildHeaders([
          {
            'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString(),
            Accept: 'application/binary',
          },
          options?.headers,
        ]),
        stream: true,
        __binaryResponse: true,
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e50e8deb9d5f2833 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/models.ts:31

    return this._client.get(path`/v1/models/${modelID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #18b19d4610d40ef8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/events.ts:82

    return this._client.post(path`/v1/sessions/${sessionID}/events?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6288a8ecab3c1cb1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/events.ts:109

    return this._client.get(path`/v1/sessions/${sessionID}/events/stream?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
      stream: true,
    }) as APIPromise<Stream<BetaManagedAgentsStreamSessionEvents>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #241bec46be1cbdc6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/resources.ts:31

    return this._client.get(path`/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0e758ef5b7cab6e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/resources.ts:61

    return this._client.post(path`/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2d9ea7f7436fcaf2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/resources.ts:152

    return this._client.post(path`/v1/sessions/${sessionID}/resources?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a589c68ad18e0886 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/sessions.ts:174

    return this._client.get(path`/v1/sessions/${sessionID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a68fff5ea1355ac0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/sessions.ts:200

    return this._client.post(path`/v1/sessions/${sessionID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3e8598449b576a3e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/sessions.ts:283

    return this._client.post(path`/v1/sessions/${sessionID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #01497c98a73a065d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/threads/events.ts:69

    return this._client.get(path`/v1/sessions/${session_id}/threads/${threadID}/stream?beta=true`, {
      query,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
      stream: true,
    }) as APIPromise<Stream<ThreadsAPI.BetaManagedAgentsStreamSessionThreadEvents>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2dcc0468f4881093 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/threads/threads.ts:37

    return this._client.get(path`/v1/sessions/${session_id}/threads/${threadID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f86b67653303db6d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/sessions/threads/threads.ts:97

    return this._client.post(path`/v1/sessions/${session_id}/threads/${threadID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #02117c51cd6d11ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/skills/skills.ts:73

    return this._client.get(path`/v1/skills/${skillID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5f4747b23425a0e1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/skills/versions.ts:31

    return this._client.post(
      path`/v1/skills/${skillID}/versions?beta=true`,
      multipartFormRequestOptions(
        {
          body,
          ...options,
          headers: buildHeaders([
            { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
            options?.headers,
          ]),
        },
        this._client,
        false,
      ),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #839c2823f7767c8a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/skills/versions.ts:65

    return this._client.get(path`/v1/skills/${skill_id}/versions/${version}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1ab5e0c1e6e0b7de — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/skills/versions.ts:149

    return this._client.get(path`/v1/skills/${skill_id}/versions/${version}/content?beta=true`, {
      ...options,
      headers: buildHeaders([
        {
          'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString(),
          Accept: 'application/binary',
        },
        options?.headers,
      ]),
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1a7cbb771bfa80d1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/certificates.ts:37

    return this._client.post(path`/v1/tunnels/${tunnelID}/certificates?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ad263c8e6723903d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/certificates.ts:70

    return this._client.get(path`/v1/tunnels/${tunnel_id}/certificates/${certificateID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #26876d756f26958e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/certificates.ts:144

    return this._client.post(path`/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #67e1cb357944554d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:72

    return this._client.get(path`/v1/tunnels/${tunnelID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1edd05a2971c3a0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:137

    return this._client.post(path`/v1/tunnels/${tunnelID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7f35e27338f53684 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:169

    return this._client.post(path`/v1/tunnels/${tunnelID}/reveal_token?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9b5e7abf68e71e1f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:200

    return this._client.post(path`/v1/tunnels/${tunnelID}/rotate_token?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #30802173abf90c27 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/user-profiles.ts:50

    return this._client.get(path`/v1/user_profiles/${userProfileID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #97b005098d8aef43 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/user-profiles.ts:76

    return this._client.post(path`/v1/user_profiles/${userProfileID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7c5ed4f79202bf21 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/user-profiles.ts:129

    return this._client.post(path`/v1/user_profiles/${userProfileID}/enrollment_url?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9bc4ec746943979d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:37

    return this._client.post(path`/v1/vaults/${vaultID}/credentials?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f6cfa7ab883e3db2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:65

    return this._client.get(path`/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c09544582aa55971 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:92

    return this._client.post(path`/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9bc2ba38c2ef7b91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:180

    return this._client.post(path`/v1/vaults/${vault_id}/credentials/${credentialID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #da1d482e4fdcb416 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:207

    return this._client.post(
      path`/v1/vaults/${vault_id}/credentials/${credentialID}/mcp_oauth_validate?beta=true`,
      {
        ...options,
        headers: buildHeaders([
          { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
          options?.headers,
        ]),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0854abc89c549c47 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/vaults.ts:101

    return this._client.get(path`/v1/vaults/${vaultID}?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a7eec45701abe4d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/vaults.ts:127

    return this._client.post(path`/v1/vaults/${vaultID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b7910f4200cc3205 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/beta/vaults/vaults.ts:206

    return this._client.post(path`/v1/vaults/${vaultID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e2f0ede0ea06db7c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/messages/batches.ts:71

    return this._client.get(path`/v1/messages/batches/${messageBatchID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a2006fd7c2dc1777 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/messages/batches.ts:137

    return this._client.post(path`/v1/messages/batches/${messageBatchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7f3ca7f0dcca4088 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/messages/batches.ts:167

    return this._client
      .get(batch.results_url, {
        ...options,
        headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
        stream: true,
        __binaryResponse: true,
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #953f475957306f3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/src/resources/models.ts:24

    return this._client.get(path`/v1/models/${modelID}`, {
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #c3e89380697b6688 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/fs-util.ts:112

    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9c0735f0fad1bf29 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:457

        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #702af4e47d2add14 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:533

        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c28b4b6f60064a3e — Environment-variable access.

pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:806

  const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #02cb9834876f1fbc — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:4

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #97a333bf734938c5 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:52

    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #de281bedeff20970 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:101

    return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #018d2a3ddcebcc02 — Filesystem access.

pkgs/npm/@[email protected]/src/tools/memory/node.ts:256

      await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9dec8019144fca6f — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.js:115

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5891057057dc8467 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.mjs:107

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a1b48bb9e9261375 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.js:390

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8429092d023d7655 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.js:469

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ee66df296fe880cd — Environment-variable access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.js:755

    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4fcadb4abdb3439c — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:375

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #465cd5732b1f7276 — Filesystem access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:454

                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8d00bf54f97431c6 — Environment-variable access.

pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:740

    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #57e1264a10701bb5 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.js:43

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6ac0af64f82b1611 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.js:91

        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6fd37d11b9ddd8bc — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.js:213

            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #86eb0cf36ce87b4f — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:2

import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5749142b71fa1235 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:38

        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c0d27c223d46f936 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:86

        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #43535bd1737df4f4 — Filesystem access.

pkgs/npm/@[email protected]/tools/memory/node.mjs:208

            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@apidevtools/json-schema-ref-parser

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #272e54795beaf305 — Filesystem access.

pkgs/npm/@[email protected]/lib/resolvers/file.ts:39

      return await fs.promises.readFile(path);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #79968dc817ed2bc6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/lib/resolvers/http.ts:137

  const response = await fetch(u, {
    method: "GET",
    headers: httpOptions.headers || {},
    credentials: httpOptions.withCredentials ? "include" : "same-origin",
    redirect: "manual",
    signal: controller ? controller.signal : null,
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@datastax/astra-db-ts

npm dependency

expand_more 16 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #5502db2a4785abb6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/http2-when-minified/src/app/route.ts:6

const client = new DataAPIClient(process.env.ASTRA_DB_TOKEN!, {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b014bf667a1eecf9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/http2-when-minified/src/app/route.ts:11

const db = client.db(process.env.ASTRA_DB_ENDPOINT!);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #47e0afc043845a48 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/nextjs/src/app/route.ts:6

const client = new DataAPIClient(process.env.ASTRA_DB_TOKEN!);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #05f79610dd3f1332 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/nextjs/src/app/route.ts:7

const db = client.db(process.env.ASTRA_DB_ENDPOINT!);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c51d628197eefbe9 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/add-license-bumf.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #81426a517f6607a0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/add-license-bumf.js:23

fs.readFile(filePath, 'utf8', (err, data) => {
  if (err) {
    throw new Error('Error reading file ${filePath}: ${err}');
  }

  fs.writeFile(filePath, bumf + '\n\n' + data, 'utf8', (err) => {
    if (err) {
      throw new Error('Error writing file ${filePath}: ${err}');
    }
  });
});

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2462dc0c2e17dd49 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/add-license-bumf.js:28

  fs.writeFile(filePath, bumf + '\n\n' + data, 'utf8', (err) => {
    if (err) {
      throw new Error('Error writing file ${filePath}: ${err}');
    }
  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #805f7b67910f4cdf — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/del-empty-dist-files.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #74c98664dc397e14 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/del-empty-dist-files.js:29

        fs.readFile(filePath, 'utf8', (err, data) => {
          if (err) {
            return console.error('Error reading file: ' + err);
          }

          if (data === targetContent) {
            fs.unlink(filePath, (err) => err && console.error('Error deleting file: ' + err));
          }
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9015881a431c5ef4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/reduce-comments.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8fe695aeacb6df81 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/reduce-comments.js:27

fs.readFile(filePath, 'utf8', (err, data) => {
  if (err) {
    throw new Error('Error reading file ${filePath}: ${err}');
  }

  const withShortenedLicense = data.replace(longBumf, shortBumf);
  const withStrippedBlockComments = strip.block(withShortenedLicense);

  fs.writeFile(filePath, withStrippedBlockComments, 'utf8', (err) => {
    if (err) {
      throw new Error('Error writing file ${filePath}: ${err}');
    }
  });
});

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #889156e52c836005 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/utils/reduce-comments.js:35

  fs.writeFile(filePath, withStrippedBlockComments, 'utf8', (err) => {
    if (err) {
      throw new Error('Error writing file ${filePath}: ${err}');
    }
  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #0adc95df5a5c9309 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/api/fetch/fetch-native.ts:35

      const resp = await fetch(info.url, init);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9ec61a6e162c0168 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/devops/astra-admin.ts:252

    const resp = await this.#httpClient.request({
      method: HttpMethods.Get,
      path: `/databases/${id}`,
    }, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5a333db2a33beb26 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/devops/astra-admin.ts:305

    const resp = await this.#httpClient.request({
      method: HttpMethods.Get,
      path: `/databases`,
      params: params,
    }, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0ff375c1ab72565b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/devops/astra-db-admin.ts:171

    const resp = await this.#httpClient.request({
      method: HttpMethods.Get,
      path: `/databases/${this.#db.id}`,
    }, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@dqbd/tiktoken

npm dependency

expand_more 8 low-confidence finding(s)

low egress dependency Excluded from app score #4dd302094914710a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/lite/load.cjs:148

        : (url) => fetch(url).then((r) => r.text());

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #207efc10c9566d6c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/lite/load.js:145

        : (url) => fetch(url).then((r) => r.text());

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #c82b88a7a0636aff — Filesystem access.

pkgs/npm/@[email protected]/lite/tiktoken.cjs:5

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02c96abc89be7107 — Filesystem access.

pkgs/npm/@[email protected]/lite/tiktoken.cjs:29

    bytes = fs.readFileSync(candidate);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #113080dbf52a6930 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/load.cjs:148

        : (url) => fetch(url).then((r) => r.text());

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f75e4cd7d27b4b21 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/load.js:145

        : (url) => fetch(url).then((r) => r.text());

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #24df0028f60d33ca — Filesystem access.

pkgs/npm/@[email protected]/tiktoken.cjs:5

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b2a01001b1658c2 — Filesystem access.

pkgs/npm/@[email protected]/tiktoken.cjs:29

    bytes = fs.readFileSync(candidate);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@e2b/code-interpreter

npm dependency

expand_more 5 low-confidence finding(s)

low egress dependency Excluded from app score #0e96f869922d8d41 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__sourcemap/src/sandbox.ts:230

      const res = await fetch(`${this.jupyterUrl}/execute`, {
        method: 'POST',
        headers,
        body: JSON.stringify({
          code,
          context_id: opts?.context?.id,
          language: opts?.language,
          env_vars: opts?.envs,
        }),
        signal: controller.signal,
        keepalive: true,
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e16d6aa3e9c48c62 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__sourcemap/src/sandbox.ts:308

      const res = await fetch(`${this.jupyterUrl}/contexts`, {
        method: 'POST',
        headers,
        body: JSON.stringify({
          language: opts?.language,
          cwd: opts?.cwd,
        }),
        keepalive: true,
        signal: this.connectionConfig.getSignal(opts?.requestTimeoutMs),
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #645163a7b5179933 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__sourcemap/src/sandbox.ts:350

      const res = await fetch(`${this.jupyterUrl}/contexts/${id}`, {
        method: 'DELETE',
        headers,
        keepalive: true,
        signal: this.connectionConfig.getSignal(
          this.connectionConfig.requestTimeoutMs
        ),
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #af4a9d0c569bc900 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__sourcemap/src/sandbox.ts:385

      const res = await fetch(`${this.jupyterUrl}/contexts`, {
        method: 'GET',
        headers,
        keepalive: true,
        signal: this.connectionConfig.getSignal(
          this.connectionConfig.requestTimeoutMs
        ),
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f9f88b2c0b132bd2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__sourcemap/src/sandbox.ts:425

      const res = await fetch(`${this.jupyterUrl}/contexts/${id}/restart`, {
        method: 'POST',
        headers,
        keepalive: true,
        signal: this.connectionConfig.getSignal(
          this.connectionConfig.requestTimeoutMs
        ),
      })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@modelcontextprotocol/sdk

npm dependency

expand_more 38 low-confidence finding(s)

low egress tooling Excluded from app score unknown #d4c936739521cbc1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/scripts/cli.ts:54

    await client.request({ method: 'resources/list' }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #5434fe9258cce69d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:16

    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3de59a1def2f7f06 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:32

    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #a1dbff4a99cb51f5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:77

        writeFileSync(outputPath, fullContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c5b558303843967 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/client/stdio.ts:71

        const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #73729aec9cf47ec2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/elicitationUrlExample.ts:632

        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #769670f61232e42c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/elicitationUrlExample.ts:663

        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #35eaa6c32ff90c00 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/multipleClientsParallel.ts:64

        const result = await client.request(toolRequest, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #9760a8dfe8b1917c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:95

        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #0cce64cc682d79d1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:167

            return client
                .request(request, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #1c0ba7e7191bc75c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:26

const DEFAULT_SERVER_URL = process.env.MCP_SERVER_URL || 'http://localhost:3000/mcp';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #40c4f970ec3ace41 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:29

    const clientId = process.env.MCP_CLIENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #df37eb69d0fb3f5c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:36

    const privateKeyPem = process.env.MCP_CLIENT_PRIVATE_KEY_PEM;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dbc99031cd4f64cc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:38

        const algorithm = process.env.MCP_CLIENT_ALGORITHM || 'RS256';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7fbea65966ff2731 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:48

    const clientSecret = process.env.MCP_CLIENT_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #ea2bf2d3cc1de2ef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:232

            const result = await this.client.request(request, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #5822af19171c4c4f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:290

            const result = await this.client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d73229394bc7c93a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:510

                const resourcesResult = await client.request(
                    {
                        method: 'resources/list',
                        params: {}
                    },
                    ListResourcesResultSchema
                );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #bc89a14b55f8a0e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:601

        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b5287869103ff086 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:632

        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #9f97b58ee87bdaef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:719

        const result = await client.request(request, CallToolResultSchema, {
            resumptionToken: notificationsToolLastEventId,
            onresumptiontoken: onLastEventIdUpdate
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d95c51f145d010c9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:748

        const promptsResult = await client.request(promptsRequest, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #2f547cdbd3e27ffc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:777

        const promptResult = await client.request(promptRequest, GetPromptResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #f9c6365756f65702 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:798

        const resourcesResult = await client.request(resourcesRequest, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #8a42c6de8c424256 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:826

        const result = await client.request(request, ReadResourceResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ac07888cbe51edcb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/ssePollingClient.ts:75

        const result = await client.request(
            {
                method: 'tools/call',
                params: {
                    name: 'long-task',
                    arguments: {}
                }
            },
            CallToolResultSchema,
            {
                // Track resumption tokens for debugging
                onresumptiontoken: token => {
                    lastEventId = token;
                    console.log(`[Event ID] ${token}`);
                }
            }
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #6fc78afb5e5b4139 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:139

        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #6da4e308ccb6582d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:172

        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #84e2277cc4addeb3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationFormExample.ts:350

    const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #81b6bd4357442670 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:215

const MCP_PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #88a3333c0ae14d56 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:216

const AUTH_PORT = process.env.MCP_AUTH_PORT ? parseInt(process.env.MCP_AUTH_PORT, 10) : 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #9a9e5c800a63d288 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:245

        const response = await fetch(endpoint, {
            method: 'POST',
            headers: {
                'Content-Type': 'application/x-www-form-urlencoded'
            },
            body: new URLSearchParams({
                token: token
            }).toString()
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #5968029a51625f92 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/honoWebStandardStreamableHttp.ts:69

const PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #908f799f54424161 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:621

const MCP_PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2341957f9e4b4f9a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:622

const AUTH_PORT = process.env.MCP_AUTH_PORT ? parseInt(process.env.MCP_AUTH_PORT, 10) : 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #e749033cfafb17b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:643

            const response = await fetch(endpoint, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded'
                },
                body: new URLSearchParams({
                    token: token
                }).toString()
            });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #a53eec89d509cd97 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleTaskInteractive.ts:448

const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 8000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ec77687a29f6e25 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.ts:12

    process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL === 'true' || process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@oclif/core

npm dependency

expand_more 20 low-confidence finding(s)

low env_fs dependency Excluded from app score #bf34d6d8b1b2982f — Environment-variable access.

pkgs/npm/@[email protected]/lib/command.js:323

        keys.map((key) => delete process.env[key]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25a0a51ab2004ecd — Environment-variable access.

pkgs/npm/@[email protected]/lib/config/config.js:201

        const base = process.env[`XDG_${category.toUpperCase()}_HOME`] ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84269326471e7eb3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/config/config.js:202

            (this.windows && process.env.LOCALAPPDATA) ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #406358c0956e2564 — Environment-variable access.

pkgs/npm/@[email protected]/lib/config/config.js:310

        this.home = process.env.HOME || (this.windows && this.windowsHome()) || (0, os_1.getHomeDir)() || (0, node_os_1.tmpdir)();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea95b4d6a72897ed — Environment-variable access.

pkgs/npm/@[email protected]/lib/config/config.js:548

        return process.env[this.scopedEnvVarKeys(k).find((k) => process.env[k])];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #833a173cc4831674 — Environment-variable access.

pkgs/npm/@[email protected]/lib/config/config.js:579

        return process.env.HOMEDRIVE && process.env.HOMEPATH && (0, node_path_1.join)(process.env.HOMEDRIVE, process.env.HOMEPATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44ee0bbb0280229d — Environment-variable access.

pkgs/npm/@[email protected]/lib/config/config.js:582

        return process.env.USERPROFILE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d185dbced6679092 — Environment-variable access.

pkgs/npm/@[email protected]/lib/config/config.js:587

        const SHELL = process.env.SHELL ?? (0, node_os_1.userInfo)().shell?.split(node_path_1.sep)?.pop();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bebba50a3be79fc — Environment-variable access.

pkgs/npm/@[email protected]/lib/config/plugin.js:222

                if (!process.env.OCLIF_NEXT_VERSION && manifest.version.split('-')[0] !== this.version.split('-')[0]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c1f10801b619eaf — Environment-variable access.

pkgs/npm/@[email protected]/lib/config/ts-path.js:266

        debug(`Skipping typescript path lookup for ${root} because it's an ESM module (NODE_ENV: ${process.env.NODE_ENV}, root plugin module type: ${rootPlugin?.moduleType})`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64c4f27b5a4e40da — Environment-variable access.

pkgs/npm/@[email protected]/lib/execute.js:55

        process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd28e3bce280c9b6 — Environment-variable access.

pkgs/npm/@[email protected]/lib/parser/parse.js:16

        process.env.CLI_FLAGS_DEBUG === '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #705fe77f1d6d4a07 — Environment-variable access.

pkgs/npm/@[email protected]/lib/parser/parse.js:337

            if (fws.inputFlag.flag.env && process.env[fws.inputFlag.flag.env]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fb43802d383ca13 — Environment-variable access.

pkgs/npm/@[email protected]/lib/parser/parse.js:338

                const valueFromEnv = process.env[fws.inputFlag.flag.env];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b98a94800e68647 — Environment-variable access.

pkgs/npm/@[email protected]/lib/parser/parse.js:348

                        valueFunction: async (i) => (0, util_1.isTruthy)(process.env[i.inputFlag.flag.env] ?? 'false'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8bd0127c17473dfe — Environment-variable access.

pkgs/npm/@[email protected]/lib/screen.js:18

const columns = Number.parseInt(process.env.OCLIF_COLUMNS, 10) || settings_1.settings.columns;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e15af8cda0041501 — Environment-variable access.

pkgs/npm/@[email protected]/lib/util/read-pjson.js:16

    if (process.env.OCLIF_DISABLE_RC) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dea21c34ee410ab0 — Environment-variable access.

pkgs/npm/@[email protected]/lib/util/util.js:58

    return !['development', 'test'].includes(process.env.NODE_ENV ?? '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #822115eadd3d67c3 — Environment-variable access.

pkgs/npm/@[email protected]/lib/ux/index.js:29

    !process.env.CI &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #396eea47b68d5158 — Environment-variable access.

pkgs/npm/@[email protected]/lib/ux/index.js:30

    !['dumb', 'emacs-color'].includes(process.env.TERM) &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

bullmq

npm dependency

expand_more 10 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #1c70177afd4e4af2 — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/commandTransform.js:2

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ab1b6818de5268a3 — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/generateRawScripts.ts:3

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #24346c0e3ebca645 — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/updateVersion.js:1

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e644791a7429f193 — Filesystem access.

pkgs/npm/[email protected]__reposrc/scripts/updateVersion.js:9

fs.writeFileSync(versionFilePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #621ac26beed004d2 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/classes/child-processor.ts:13

const RESPONSE_TIMEOUT = process.env.NODE_ENV === 'test' ? 500 : 5_000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #8008b537d96d0f3c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/classes/queue-getters.ts:110

    return client.get(`${this.keys.de}:${id}`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5cf2112af400ff52 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/classes/queue-getters.ts:121

    return client.get(`${this.keys.de}:${id}`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #647b06d70466a10d — Filesystem access.

pkgs/npm/[email protected]__reposrc/src/classes/worker.ts:1

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ca0e9d0507918c1 — Filesystem access.

pkgs/npm/[email protected]__reposrc/src/commands/script-loader.ts:3

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f84ae7a7cb6c98c2 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/utils.ts:137

  prefix = process.env.BULLMQ_TEST_PREFIX || 'bull',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

connect-pg-simple

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #feaf42e5b968ba2f — Environment-variable access.

pkgs/npm/[email protected]/index.js:137

        const conString = options.conString || process.env['DATABASE_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8f3bbb5e5662d51 — Filesystem access.

pkgs/npm/[email protected]/index.js:183

        const tableDefString = await fs.readFile(pathModule.resolve(__dirname, './table.sql'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

connect-redis

npm dependency

expand_more 1 low-confidence finding(s)

low egress dependency Excluded from app score #cb64ff6ffdfdc03e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/index.ts:50

      let data = await this.client.get(key)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

dotenv

npm dependency

expand_more 18 low-confidence finding(s)

low env_fs dependency Excluded from app score #2e7336774a9c7e17 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:4

if (process.env.DOTENV_CONFIG_ENCODING != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6804eb8c5a8179dc — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:5

  options.encoding = process.env.DOTENV_CONFIG_ENCODING

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1107ebfe5eeb8559 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:8

if (process.env.DOTENV_CONFIG_PATH != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b51a0fe0a48882a — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:9

  options.path = process.env.DOTENV_CONFIG_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66f4aeb2cb200f9b — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:12

if (process.env.DOTENV_CONFIG_QUIET != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43a2344508f1e08c — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:13

  options.quiet = process.env.DOTENV_CONFIG_QUIET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55cfb0bca7d1c122 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:16

if (process.env.DOTENV_CONFIG_DEBUG != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fba4386366063f4b — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:17

  options.debug = process.env.DOTENV_CONFIG_DEBUG

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7529d5255da99ead — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:20

if (process.env.DOTENV_CONFIG_OVERRIDE != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58dc766b3cdaa004 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:21

  options.override = process.env.DOTENV_CONFIG_OVERRIDE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0aa17eb0e2f6f74 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:24

if (process.env.DOTENV_CONFIG_DOTENV_KEY != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2197c508dfea03d6 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:25

  options.DOTENV_KEY = process.env.DOTENV_CONFIG_DOTENV_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a0be841e5cbb241 — Filesystem access.

pkgs/npm/[email protected]/lib/main.js:1

const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7cc9f954e2ac1b43 — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:141

  if (process.env.DOTENV_KEY && process.env.DOTENV_KEY.length > 0) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f2b8bfa98737418 — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:142

    return process.env.DOTENV_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efb1ac178c0d533a — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:221

  const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || (options && options.debug))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0430462f8688af0 — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:222

  const quiet = parseBoolean(process.env.DOTENV_CONFIG_QUIET || (options && options.quiet))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0726d74ea35111b — Filesystem access.

pkgs/npm/[email protected]/lib/main.js:277

      const parsed = DotenvModule.parse(fs.readFileSync(path, { encoding }))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

express

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #68846bcdaa0e88ae — Environment-variable access.

pkgs/npm/[email protected]/lib/application.js:91

  var env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

express-mysql-session

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #7c95824e07b30658 — Filesystem access.

pkgs/npm/[email protected]/index.js:136

			const fs = require('fs').promises;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21d84a765aeb9bd0 — Filesystem access.

pkgs/npm/[email protected]/index.js:138

			return fs.readFile(schemaFilePath, 'utf-8').then(sql => {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

express-session

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #bf86a910c66e28b9 — Environment-variable access.

pkgs/npm/[email protected]/index.js:33

var env = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

flowise-nim-container-manager

npm dependency

expand_more 18 low-confidence finding(s)

low env_fs dependency Excluded from app score #d813ca4ab75104a6 — Filesystem access.

pkgs/npm/[email protected]/src/NimContainerManager.js:9

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c710154940804ee3 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:15

process.env.LLM_PROVIDER = "nvidia-nim";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4d9c68be834c8e8 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:16

process.env.NVIDIA_NIM_LLM_MODE = "managed";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5838a8bc06e501e4 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:49

      process.env.LLM_PROVIDER === "nvidia-nim" &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5363c10450f54fd2 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:50

      process.env.NVIDIA_NIM_LLM_MODE === "managed"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1e661b32dc794c2 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:60

        process.env.NVIDIA_NIM_LLM_MODE = "remote";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d7a4df66b47cdc2 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:74

      if (process.env.LLM_PROVIDER !== "nvidia-nim") return;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5d5cba0e8b3cb26 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:75

      if (process.env.NVIDIA_NIM_LLM_MODE !== "managed") return;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #13d3dbed5ce93d25 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/NimContainerManager.js:490

      const req = request(options, (res) => {
        let data = "";
        res.on("data", (chunk) => {
          data += chunk;
        });
        res.on("end", () => {
          try {
            resolve(JSON.parse(data));
          } catch (e) {
            resolve(data);
          }
        });
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #43782ed9e667c8dd — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:520

      process.env.NODE_ENV === "development"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71c4ed5908a708af — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:588

    if (process.env.NODE_ENV === "development" || !!process.env.NGC_PATCH)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #678401ea9efa7698 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:629

          ...(process.env.NODE_ENV === "development" || !!process.env.NGC_PATCH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed057a2e29c62b57 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:874

    process.env.NVIDIA_NIM_LLM_NGC_API_KEY = newKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #182244a83d381dd1 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:929

      process.env.NVIDIA_NIM_LLM_NGC_API_KEY = providedKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #534c53ac8ca22162 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:990

    if (!!process.env.NVIDIA_NIM_LLM_NGC_API_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e7f06c25ded6b04 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:992

        `Using stored NGC API key: ${process.env.NVIDIA_NIM_LLM_NGC_API_KEY.slice(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ba42e03494b3a57 — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:995

        )}...${process.env.NVIDIA_NIM_LLM_NGC_API_KEY.slice(-5)}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5c95d1f01dbe21d — Environment-variable access.

pkgs/npm/[email protected]/src/NimContainerManager.js:997

      this.ngcApiKey = process.env.NVIDIA_NIM_LLM_NGC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

flowise-ui

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #8e6874dce7192a78 — Environment-variable access.

pkgs/npm/[email protected]/vite.config.js:47

            port: process.env.VITE_PORT ?? 8080,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #28b82657c60dd3b6 — Environment-variable access.

pkgs/npm/[email protected]/vite.config.js:48

            host: process.env.VITE_HOST

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

global-agent

npm dependency

expand_more 27 low-confidence finding(s)

low env_fs dependency Excluded from app score #d344bbfedf9fa7d7 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/classes/Agent.ts:112

    const rejectUnauthorized = process.env.NODE_TLS_REJECT_UNAUTHORIZED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #20359302cceaba2d — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:62

const defaultNodeTlsRejectUnauthorized = process.env.NODE_TLS_REJECT_UNAUTHORIZED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5674e8b012da4851 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:136

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = defaultNodeTlsRejectUnauthorized;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #934e93d8a9313fbd — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:343

  process.env.GLOBAL_AGENT_FORCE_GLOBAL_AGENT = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #52bd91923e824814 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:359

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 'null';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e4d9e012f1fcfac0 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:371

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 1;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #64dff61cb5d1d12c — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:385

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 0;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bccdd66d78a0ef81 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:399

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = true;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5d3964ce7821b86f — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:411

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = false;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #da004f5d12e72c31 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:422

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 'yes';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #035cbff045490599 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:433

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 'no';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #987b1eb33df7003b — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:461

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b28140f247137c80 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:480

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f38929ab48bf12bb — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:499

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #433fadc047a8806f — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:518

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #888188938992bf18 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:538

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #227df1b26023bce2 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:554

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3e0707e274638ca1 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:586

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #abf581e29113f9ef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:625

    http.get(httpServer.url, createHttpResponseResolver(resolve));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #9264c40a09bec436 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:646

    http.get({
      path: '/endpoint',
      socketPath: '/tmp/test.sock',
    }, createHttpResponseResolver(resolve));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #9174fccb9f4ebb87 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:665

    http.get({
      host: '127.0.0.1',
    }, createHttpResponseResolver(resolve));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #c43888672dbece67 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:687

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #06288c186233eaee — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:713

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7cdd9320d80ec04b — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:745

  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b46e5cc0eefbc9fb — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.ts:70

  proxyController.HTTP_PROXY = process.env[configuration.environmentVariableNamespace + 'HTTP_PROXY'] ?? null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6546f424160c419 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.ts:73

  proxyController.HTTPS_PROXY = process.env[configuration.environmentVariableNamespace + 'HTTPS_PROXY'] ?? null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6cc8af1f6de2f48 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.ts:76

  proxyController.NO_PROXY = process.env[configuration.environmentVariableNamespace + 'NO_PROXY'] ?? null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

handlebars

npm dependency

expand_more 6 low-confidence finding(s)

low env_fs dependency Excluded from app score #1a90bdee731ca7eb — Filesystem access.

pkgs/npm/[email protected]/lib/index.js:18

  var fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30841b502b4a3257 — Filesystem access.

pkgs/npm/[email protected]/lib/index.js:19

  var templateString = fs.readFileSync(filename, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ce77d3b503faff4 — Filesystem access.

pkgs/npm/[email protected]/lib/precompiler.js:4

import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e73d107c7031d15c — Filesystem access.

pkgs/npm/[email protected]/lib/precompiler.js:113

          fs.readFile(path, 'utf8', function(err, data) {
            /* istanbul ignore next : Race condition that being too lazy to test */
            if (err) {
              return callback(err);
            }

            if (opts.bom && data.indexOf('\uFEFF') === 0) {
              data = data.substring(1);
            }

            // Clean the template name
            let name = path;
            if (!root) {
              name = basename(name);
            } else if (name.indexOf(root) === 0) {
              name = name.substring(root.length + 1);
            }
            name = name.replace(extension, '');

            ret.push({
              path: path,
              name: name,
              source: data
            });

            callback();
          });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65abfd3427f9214e — Filesystem access.

pkgs/npm/[email protected]/lib/precompiler.js:301

    fs.writeFileSync(opts.map, output.map, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c736af62ad89ce7 — Filesystem access.

pkgs/npm/[email protected]/lib/precompiler.js:306

    fs.writeFileSync(opts.output, output, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

multer

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #d16f353b33754e43 — Filesystem access.

pkgs/npm/[email protected]/storage/disk.js:1

var fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

multer-azure-blob-storage

npm dependency

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #95e69b62092677a1 — Environment-variable access.

pkgs/npm/[email protected]/lib/MulterAzureStorage.js:69

        options.connectionString = (options.connectionString || process.env.AZURE_STORAGE_CONNECTION_STRING || null);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #447c9072607a82c6 — Environment-variable access.

pkgs/npm/[email protected]/lib/MulterAzureStorage.js:71

            options.accessKey = (options.accessKey || process.env.AZURE_STORAGE_ACCESS_KEY || null);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4376f570362942a — Environment-variable access.

pkgs/npm/[email protected]/lib/MulterAzureStorage.js:72

            options.accountName = (options.accountName || process.env.AZURE_STORAGE_ACCOUNT || null);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

multer-cloud-storage

npm dependency

expand_more 18 low-confidence finding(s)

low env_fs dependency Excluded from app score #88e2154b7535797b — Environment-variable access.

pkgs/npm/[email protected]/lib/index.js:118

        const bucket = opts.bucket || process.env.GCS_BUCKET || null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4725f2a7ec521184 — Environment-variable access.

pkgs/npm/[email protected]/lib/index.js:119

        const projectId = opts.projectId || process.env.GCLOUD_PROJECT || null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #646bd71eb6944039 — Environment-variable access.

pkgs/npm/[email protected]/lib/index.js:120

        const keyFilename = opts.keyFilename || process.env.GCS_KEYFILE || null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bd4d2147d817f46a — Environment-variable access.

pkgs/npm/[email protected]/lib/index.spec.js:9

        process.env.GCS_BUCKET = 'test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3d544f7dddd4a3e5 — Environment-variable access.

pkgs/npm/[email protected]/lib/index.spec.js:10

        process.env.GCLOUD_PROJECT = 'test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3af0dd4f54f36505 — Environment-variable access.

pkgs/npm/[email protected]/lib/index.spec.js:11

        process.env.GCS_KEYFILE = './test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f65a337134c388cb — Environment-variable access.

pkgs/npm/[email protected]/lib/index.spec.js:14

        delete process.env.GCS_BUCKET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7c4a35461136caf9 — Environment-variable access.

pkgs/npm/[email protected]/lib/index.spec.js:15

        delete process.env.GCLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c5c73ef3118b4a11 — Environment-variable access.

pkgs/npm/[email protected]/lib/index.spec.js:16

        delete process.env.GCS_KEYFILE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6de64612d932bc6f — Environment-variable access.

pkgs/npm/[email protected]/src/index.spec.ts:12

    process.env.GCS_BUCKET = 'test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d2c5ed2748071e45 — Environment-variable access.

pkgs/npm/[email protected]/src/index.spec.ts:13

    process.env.GCLOUD_PROJECT = 'test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ecaf59ff7cdaa99a — Environment-variable access.

pkgs/npm/[email protected]/src/index.spec.ts:14

    process.env.GCS_KEYFILE = './test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7ff90bdd0be60ba7 — Environment-variable access.

pkgs/npm/[email protected]/src/index.spec.ts:19

    delete process.env.GCS_BUCKET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #744486ca74ada54a — Environment-variable access.

pkgs/npm/[email protected]/src/index.spec.ts:20

    delete process.env.GCLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f7f030295d142264 — Environment-variable access.

pkgs/npm/[email protected]/src/index.spec.ts:21

    delete process.env.GCS_KEYFILE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74c3da8693185cb2 — Environment-variable access.

pkgs/npm/[email protected]/src/index.ts:111

		const bucket = opts.bucket || process.env.GCS_BUCKET || null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5998e887348fe37 — Environment-variable access.

pkgs/npm/[email protected]/src/index.ts:112

		const projectId = opts.projectId || process.env.GCLOUD_PROJECT || null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76f39c4543611957 — Environment-variable access.

pkgs/npm/[email protected]/src/index.ts:113

		const keyFilename = opts.keyFilename || process.env.GCS_KEYFILE || null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mysql2

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #ea4a5065928cffe5 — Environment-variable access.

pkgs/npm/[email protected]/lib/packets/index.js:60

  if (process.env.NODE_DEBUG) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

nanoid

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #bdd1828d6dea5cc5 — Filesystem access.

pkgs/npm/[email protected]/bin/nanoid.js:18

  let json = readFileSync(join(import.meta.dirname, '..', 'package.json'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

node-cron

npm dependency

expand_more 14 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #b67f60be0403a833 — Filesystem access.

pkgs/npm/[email protected]__reposrc/rollup.config.js:5

import { rmSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #876821a018199554 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/rollup.config.js:31

    noEmitOnError: process.env.NODE_ENV !== "development",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e8b9a7635314e373 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/env-var-run-coordinator.test.ts:5

    delete process.env.NODE_CRON_RUN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d624c925e1b57cee — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/env-var-run-coordinator.test.ts:6

    delete process.env.CUSTOM_RUN_FLAG;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #27c4cd591f61d9fc — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/env-var-run-coordinator.test.ts:14

    process.env.NODE_CRON_RUN = 'yes';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d92ac753a547160e — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/env-var-run-coordinator.test.ts:19

    process.env.NODE_CRON_RUN = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b0fa11fc1bc9aba3 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/env-var-run-coordinator.test.ts:25

    process.env.NODE_CRON_RUN = 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b442fec908113640 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/env-var-run-coordinator.test.ts:31

    process.env.CUSTOM_RUN_FLAG = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #04c2fd86308c206f — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/env-var-run-coordinator.test.ts:37

    process.env.NODE_CRON_RUN = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e46510faad56e5f1 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/env-var-run-coordinator.test.ts:39

    delete process.env.NODE_CRON_RUN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50a96b5ed3139aa0 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/env-var-run-coordinator.ts:25

    const value = process.env[this.envName];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c72a030755b3d8ae — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/run-coordinator.test.ts:123

      delete process.env.NODE_CRON_RUN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ee630a41f7ffcd19 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/coordinator/run-coordinator.test.ts:147

      process.env.NODE_CRON_RUN = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c8c6a90f6ea2a7e3 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/time/dst-fuzz.test.ts:9

const SEED = Number(process.env.FUZZ_SEED) || 0xC0FFEE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

nodemailer

npm dependency

expand_more 7 low-confidence finding(s)

low env_fs dependency Excluded from app score #d1881f1ae8257f0a — Filesystem access.

pkgs/npm/[email protected]/lib/dkim/index.js:10

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd676f25f5ee2ade — Filesystem access.

pkgs/npm/[email protected]/lib/mime-node/index.js:6

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36c06497232c5674 — Environment-variable access.

pkgs/npm/[email protected]/lib/nodemailer.js:15

const ETHEREAL_API = (process.env.ETHEREAL_API || 'https://api.nodemailer.com').replace(/\/+$/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf7c77739360857a — Environment-variable access.

pkgs/npm/[email protected]/lib/nodemailer.js:16

const ETHEREAL_WEB = (process.env.ETHEREAL_WEB || 'https://ethereal.email').replace(/\/+$/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87fd83e79a332faf — Environment-variable access.

pkgs/npm/[email protected]/lib/nodemailer.js:17

const ETHEREAL_API_KEY = (process.env.ETHEREAL_API_KEY || '').replace(/\s*/g, '') || null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08f0b698a02108d5 — Environment-variable access.

pkgs/npm/[email protected]/lib/nodemailer.js:18

const ETHEREAL_CACHE = ['true', 'yes', 'y', '1'].includes((process.env.ETHEREAL_CACHE || 'yes').toString().trim().toLowerCase());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d509897c1d7e7d3b — Filesystem access.

pkgs/npm/[email protected]/lib/shared/index.js:7

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

openai

npm dependency

expand_more 186 low-confidence finding(s)

low env_fs dependency Excluded from app score #dc1ad1b4b991b09b — Environment-variable access.

pkgs/npm/[email protected]/azure.js:44

                endpoint = process.env['AZURE_OPENAI_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #347eb21e2119b656 — Environment-variable access.

pkgs/npm/[email protected]/azure.mjs:40

                endpoint = process.env['AZURE_OPENAI_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #5b52abb0d6621d5f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/batches.js:19

        return this._client.get((0, path_1.path) `/batches/${batchID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7a6bfe60687eef29 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/batches.js:33

        return this._client.post((0, path_1.path) `/batches/${batchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c9d99b8a682a88ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/batches.mjs:16

        return this._client.get(path `/batches/${batchID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a351ecd14822b1ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/batches.mjs:30

        return this._client.post(path `/batches/${batchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a5e51029e607d218 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/assistants.js:28

        return this._client.get((0, path_1.path) `/assistants/${assistantID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f0e0bfd077a1e7a4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/assistants.js:39

        return this._client.post((0, path_1.path) `/assistants/${assistantID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dfae751fb189860a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/assistants.mjs:25

        return this._client.get(path `/assistants/${assistantID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8313a40091b08ebb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/assistants.mjs:36

        return this._client.post(path `/assistants/${assistantID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #aec5be388e758e71 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/chatkit/sessions.js:38

        return this._client.post((0, path_1.path) `/chatkit/sessions/${sessionID}/cancel`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2d9a9776261cd603 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/chatkit/sessions.mjs:35

        return this._client.post(path `/chatkit/sessions/${sessionID}/cancel`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9d2f2f5444ac6b91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/chatkit/threads.js:20

        return this._client.get((0, path_1.path) `/chatkit/threads/${threadID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2c1a9e4013d6cd73 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/chatkit/threads.mjs:17

        return this._client.get(path `/chatkit/threads/${threadID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #72e3278cabb152fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.js:19

        return this._client.post((0, path_1.path) `/threads/${threadID}/messages`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #862111b364a8e3ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.js:32

        return this._client.get((0, path_1.path) `/threads/${thread_id}/messages/${messageID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6ce7c2a18507f75d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.js:44

        return this._client.post((0, path_1.path) `/threads/${thread_id}/messages/${messageID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0e10ab13af90fc8d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.mjs:16

        return this._client.post(path `/threads/${threadID}/messages`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d892f612ad5289ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.mjs:29

        return this._client.get(path `/threads/${thread_id}/messages/${messageID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #34a9a5f82f1b4e13 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/messages.mjs:41

        return this._client.post(path `/threads/${thread_id}/messages/${messageID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b3ed33ee9267ed71 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:24

        return this._client.post((0, path_1.path) `/threads/${threadID}/runs`, {
            query: { include },
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f21543ee523cafcb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:39

        return this._client.get((0, path_1.path) `/threads/${thread_id}/runs/${runID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ff46eb84883fb97a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:51

        return this._client.post((0, path_1.path) `/threads/${thread_id}/runs/${runID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #96adeba263a31b8b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:76

        return this._client.post((0, path_1.path) `/threads/${thread_id}/runs/${runID}/cancel`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #787b9422935b128c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:155

        return this._client.post((0, path_1.path) `/threads/${thread_id}/runs/${runID}/submit_tool_outputs`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e1d505e4ae94ccb3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:20

        return this._client.post(path `/threads/${threadID}/runs`, {
            query: { include },
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #964762d67a9461bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:35

        return this._client.get(path `/threads/${thread_id}/runs/${runID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1b2626fa31aae8cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:47

        return this._client.post(path `/threads/${thread_id}/runs/${runID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #235fa3697f4cc9b5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:72

        return this._client.post(path `/threads/${thread_id}/runs/${runID}/cancel`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #70bd0b4ef6d23fea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:151

        return this._client.post(path `/threads/${thread_id}/runs/${runID}/submit_tool_outputs`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d455dcf12f63aa35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/steps.js:20

        return this._client.get((0, path_1.path) `/threads/${thread_id}/runs/${run_id}/steps/${stepID}`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2921ec1a04dc866d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/runs/steps.mjs:17

        return this._client.get(path `/threads/${thread_id}/runs/${run_id}/steps/${stepID}`, {
            query,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #918098b6ffb90d66 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/threads.js:41

        return this._client.get((0, path_1.path) `/threads/${threadID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ec8072122d375404 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/threads.js:52

        return this._client.post((0, path_1.path) `/threads/${threadID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b17669e719f6cfaa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/threads.mjs:37

        return this._client.get(path `/threads/${threadID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8af1f6de2bf4bc0b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/beta/threads/threads.mjs:48

        return this._client.post(path `/threads/${threadID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #de23755cae7c2649 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/chat/completions/completions.js:34

        return this._client.get((0, path_1.path) `/chat/completions/${completionID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1e152b24a47b5b4e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/chat/completions/completions.js:50

        return this._client.post((0, path_1.path) `/chat/completions/${completionID}`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e6011ff6f6140aef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/chat/completions/completions.mjs:30

        return this._client.get(path `/chat/completions/${completionID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #92eba126b37e00e2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/chat/completions/completions.mjs:46

        return this._client.post(path `/chat/completions/${completionID}`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1e941f214a70b163 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/containers.js:27

        return this._client.get((0, path_1.path) `/containers/${containerID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fa00f793c16225c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/containers.mjs:23

        return this._client.get(path `/containers/${containerID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dfa0fdb2f1476e59 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/content.js:14

        return this._client.get((0, path_1.path) `/containers/${container_id}/files/${fileID}/content`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/binary' }, options?.headers]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f9cf11d56dece986 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/content.mjs:11

        return this._client.get(path `/containers/${container_id}/files/${fileID}/content`, {
            ...options,
            headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ab2edfd59e5eb9d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/files.js:25

        return this._client.post((0, path_1.path) `/containers/${containerID}/files`, (0, uploads_1.multipartFormRequestOptions)({ body, ...options }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f0f536b769cb779a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/files.js:32

        return this._client.get((0, path_1.path) `/containers/${container_id}/files/${fileID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a8fe037a1c2a669d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/files.mjs:21

        return this._client.post(path `/containers/${containerID}/files`, multipartFormRequestOptions({ body, ...options }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7633b7e6c3578840 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/containers/files/files.mjs:28

        return this._client.get(path `/containers/${container_id}/files/${fileID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8499d786424ca9c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/conversations.js:25

        return this._client.get((0, path_1.path) `/conversations/${conversationID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2b235c44900b77dd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/conversations.js:31

        return this._client.post((0, path_1.path) `/conversations/${conversationID}`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8c797b43c401e698 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/conversations.mjs:21

        return this._client.get(path `/conversations/${conversationID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #57bf7f476393ebd7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/conversations.mjs:27

        return this._client.post(path `/conversations/${conversationID}`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2b09697586d6679a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/items.js:14

        return this._client.post((0, path_1.path) `/conversations/${conversationID}/items`, {
            query: { include },
            body,
            ...options,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0474edbccb28e270 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/items.js:25

        return this._client.get((0, path_1.path) `/conversations/${conversation_id}/items/${itemID}`, { query, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bf26f431cdf10eb8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/items.mjs:11

        return this._client.post(path `/conversations/${conversationID}/items`, {
            query: { include },
            body,
            ...options,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4e83b5fdf80aadaf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/conversations/items.mjs:22

        return this._client.get(path `/conversations/${conversation_id}/items/${itemID}`, { query, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #f1d15128f93384b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/evals.js:31

        return this._client.get((0, path_1.path) `/evals/${evalID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #5f716f3157a24902 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/evals.js:37

        return this._client.post((0, path_1.path) `/evals/${evalID}`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #93f97c9cc3e4e4a7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/evals.mjs:27

        return this._client.get(path `/evals/${evalID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #25a569d745cc444d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/evals.mjs:33

        return this._client.post(path `/evals/${evalID}`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #aa838c2735b94260 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/output-items.js:14

        return this._client.get((0, path_1.path) `/evals/${eval_id}/runs/${run_id}/output_items/${outputItemID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #60cf49a2224ef728 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/output-items.mjs:11

        return this._client.get(path `/evals/${eval_id}/runs/${run_id}/output_items/${outputItemID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ccd5a3627b8c631f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.js:22

        return this._client.post((0, path_1.path) `/evals/${evalID}/runs`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #6db20a330974f820 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.js:29

        return this._client.get((0, path_1.path) `/evals/${eval_id}/runs/${runID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #f1c85b4e7b781eee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.js:52

        return this._client.post((0, path_1.path) `/evals/${eval_id}/runs/${runID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #c93e77d2c3b4a583 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.mjs:18

        return this._client.post(path `/evals/${evalID}/runs`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b31ee7ac455c97d9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.mjs:25

        return this._client.get(path `/evals/${eval_id}/runs/${runID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #f973adc5999b11d3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/evals/runs/runs.mjs:48

        return this._client.post(path `/evals/${eval_id}/runs/${runID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b1d8e37e20521b90 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/files.js:42

        return this._client.get((0, path_1.path) `/files/${fileID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cb963b6127d1f7df — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/files.js:60

        return this._client.get((0, path_1.path) `/files/${fileID}/content`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/binary' }, options?.headers]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cdf07b49dc87b13a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/files.mjs:39

        return this._client.get(path `/files/${fileID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f46ac80308095fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/files.mjs:57

        return this._client.get(path `/files/${fileID}/content`, {
            ...options,
            headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b36999ef1ccc4c7a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/checkpoints/permissions.js:44

        return this._client.get((0, path_1.path) `/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, {
            query,
            ...options,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8a8f3c68ff29e509 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/checkpoints/permissions.mjs:41

        return this._client.get(path `/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, {
            query,
            ...options,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #889b1d39549c972f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:49

        return this._client.get((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4cf3a71ee22f7f70 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:76

        return this._client.post((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ee81e842b3769950 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:105

        return this._client.post((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}/pause`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c80f5f4ed4f7ce8d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:118

        return this._client.post((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}/resume`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f8afd3dd3090491f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:45

        return this._client.get(path `/fine_tuning/jobs/${fineTuningJobID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8d6bb703b439287b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:72

        return this._client.post(path `/fine_tuning/jobs/${fineTuningJobID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8f6b6a1cb046ac76 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:101

        return this._client.post(path `/fine_tuning/jobs/${fineTuningJobID}/pause`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9159d49ddac866b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:114

        return this._client.post(path `/fine_tuning/jobs/${fineTuningJobID}/resume`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #23105c2651010dd3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/models.js:14

        return this._client.get((0, path_1.path) `/models/${model}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a5be7935070f3725 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/models.mjs:11

        return this._client.get(path `/models/${model}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #27ca7e3075a7f621 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.js:21

        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/accept`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c67f63902a9304d9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.js:36

        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/hangup`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d0232cad9f56384e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.js:52

        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/refer`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ffecc9e7ead5b8d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.js:67

        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/reject`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9ae3f8665615f226 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.mjs:18

        return this._client.post(path `/realtime/calls/${callID}/accept`, {
            body,
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #f62fc88e44b46940 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.mjs:33

        return this._client.post(path `/realtime/calls/${callID}/hangup`, {
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #448508a3bb628e4f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.mjs:49

        return this._client.post(path `/realtime/calls/${callID}/refer`, {
            body,
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #30149ff4e8d17353 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/realtime/calls.mjs:64

        return this._client.post(path `/realtime/calls/${callID}/reject`, {
            body,
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8269c4697bee5911 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/responses/responses.js:30

        return this._client.get((0, path_1.path) `/responses/${responseID}`, {
            query,
            ...options,
            stream: query?.stream ?? false,
        })._thenUnwrap((rsp) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a4f9de62455877ec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/responses/responses.js:81

        return this._client.post((0, path_1.path) `/responses/${responseID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6219bac0c6f13803 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/responses/responses.mjs:26

        return this._client.get(path `/responses/${responseID}`, {
            query,
            ...options,
            stream: query?.stream ?? false,
        })._thenUnwrap((rsp) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #35aca20b9822f2f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/responses/responses.mjs:77

        return this._client.post(path `/responses/${responseID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d17a64946834f7aa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/parts.js:23

        return this._client.post((0, path_1.path) `/uploads/${uploadID}/parts`, (0, uploads_1.multipartFormRequestOptions)({ body, ...options }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #36f10e61d9fa5ef1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/parts.mjs:20

        return this._client.post(path `/uploads/${uploadID}/parts`, multipartFormRequestOptions({ body, ...options }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a5eb670926ece420 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/uploads.js:43

        return this._client.post((0, path_1.path) `/uploads/${uploadID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cea6a0828f2a5f4b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/uploads.js:61

        return this._client.post((0, path_1.path) `/uploads/${uploadID}/complete`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #765bdc5c01eb906d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/uploads.mjs:39

        return this._client.post(path `/uploads/${uploadID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4246487c8d192364 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/uploads/uploads.mjs:57

        return this._client.post(path `/uploads/${uploadID}/complete`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #452a7ff7355edbe6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.js:16

        return this._client.post((0, path_1.path) `/vector_stores/${vectorStoreID}/file_batches`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ac83851af1f39bf8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.js:27

        return this._client.get((0, path_1.path) `/vector_stores/${vector_store_id}/file_batches/${batchID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #171c373f73dd26cc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.js:38

        return this._client.post((0, path_1.path) `/vector_stores/${vector_store_id}/file_batches/${batchID}/cancel`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e4066708720c5e8d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.mjs:13

        return this._client.post(path `/vector_stores/${vectorStoreID}/file_batches`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3da37eb31ccea65e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.mjs:24

        return this._client.get(path `/vector_stores/${vector_store_id}/file_batches/${batchID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f4f495441b2d3d3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/file-batches.mjs:35

        return this._client.post(path `/vector_stores/${vector_store_id}/file_batches/${batchID}/cancel`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #69811ba7962827f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.js:17

        return this._client.post((0, path_1.path) `/vector_stores/${vectorStoreID}/files`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1b05951f5e30b50b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.js:28

        return this._client.get((0, path_1.path) `/vector_stores/${vector_store_id}/files/${fileID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #ca3404713e850447 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.js:38

        return this._client.post((0, path_1.path) `/vector_stores/${vector_store_id}/files/${fileID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d91b409d8a3a92ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.mjs:14

        return this._client.post(path `/vector_stores/${vectorStoreID}/files`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #70919a5b11dc9130 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.mjs:25

        return this._client.get(path `/vector_stores/${vector_store_id}/files/${fileID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #20ca36feccb89f40 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/files.mjs:35

        return this._client.post(path `/vector_stores/${vector_store_id}/files/${fileID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bb3c028a055ebad2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/vector-stores.js:34

        return this._client.get((0, path_1.path) `/vector_stores/${vectorStoreID}`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #cc9591e08e9a19c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/vector-stores.js:43

        return this._client.post((0, path_1.path) `/vector_stores/${vectorStoreID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #818d39e6e872b100 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/vector-stores.mjs:30

        return this._client.get(path `/vector_stores/${vectorStoreID}`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #848e9dc3a5f657af — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/vector-stores/vector-stores.mjs:39

        return this._client.post(path `/vector_stores/${vectorStoreID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #7e18bee267c57759 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.js:21

        return this._client.get((0, path_1.path) `/videos/${videoID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d5f59ff5ec901eea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.js:39

        return this._client.get((0, path_1.path) `/videos/${videoID}/content`, {
            query,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/binary' }, options?.headers]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #66f7fd9863e5f943 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.js:50

        return this._client.post((0, path_1.path) `/videos/${videoID}/remix`, (0, uploads_1.maybeMultipartFormRequestOptions)({ body, ...options }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8248473e009541c0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.mjs:18

        return this._client.get(path `/videos/${videoID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #34457d3462e11204 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.mjs:36

        return this._client.get(path `/videos/${videoID}/content`, {
            query,
            ...options,
            headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a70c7084ac3a9525 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/resources/videos.mjs:47

        return this._client.post(path `/videos/${videoID}/remix`, maybeMultipartFormRequestOptions({ body, ...options }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #215fb40183f9a93d — Environment-variable access.

pkgs/npm/[email protected]/src/azure.ts:97

        endpoint = process.env['AZURE_OPENAI_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #3d1e0ad0c129d03c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/batches.ts:23

    return this._client.get(path`/batches/${batchID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4dbfb3c2a6d143ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/batches.ts:42

    return this._client.post(path`/batches/${batchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #1f10dbddbbdc6666 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/assistants.ts:36

    return this._client.get(path`/assistants/${assistantID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #44505d15d56f5c6d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/assistants.ts:48

    return this._client.post(path`/assistants/${assistantID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fa7b306ae6680c3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/chatkit/sessions.ts:41

    return this._client.post(path`/chatkit/sessions/${sessionID}/cancel`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bdc70bab75e3a471 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/chatkit/threads.ts:26

    return this._client.get(path`/chatkit/threads/${threadID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #6b91d12ffa1c9da7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/messages.ts:22

    return this._client.post(path`/threads/${threadID}/messages`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #966cae933f6cab7e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/messages.ts:36

    return this._client.get(path`/threads/${thread_id}/messages/${messageID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #edd621ca4e26fd43 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/messages.ts:49

    return this._client.post(path`/threads/${thread_id}/messages/${messageID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #dbef6cf0b80b4ccf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:72

    return this._client.post(path`/threads/${threadID}/runs`, {
      query: { include },
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      stream: params.stream ?? false,
    }) as APIPromise<Run> | APIPromise<Stream<AssistantsAPI.AssistantStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #fce2c5fd0f7596cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:88

    return this._client.get(path`/threads/${thread_id}/runs/${runID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #4b1594fe145b4b38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:101

    return this._client.post(path`/threads/${thread_id}/runs/${runID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #70f1cae3c4467315 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:132

    return this._client.post(path`/threads/${thread_id}/runs/${runID}/cancel`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #58e289ee6bac8c3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:257

    return this._client.post(path`/threads/${thread_id}/runs/${runID}/submit_tool_outputs`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      stream: params.stream ?? false,
    }) as APIPromise<Run> | APIPromise<Stream<AssistantsAPI.AssistantStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5cce53475d1eca2e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/runs/steps.ts:23

    return this._client.get(path`/threads/${thread_id}/runs/${run_id}/steps/${stepID}`, {
      query,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5523e8d59de49b6a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/threads.ts:101

    return this._client.get(path`/threads/${threadID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a9b56ae9462dde5b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/beta/threads/threads.ts:113

    return this._client.post(path`/threads/${threadID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #710dba24d0d8a68a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/chat/completions/completions.ts:84

    return this._client.get(path`/chat/completions/${completionID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d77d1e20cc0b503a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/chat/completions/completions.ts:105

    return this._client.post(path`/chat/completions/${completionID}`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #95766c5a92f3baee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/containers/containers.ts:36

    return this._client.get(path`/containers/${containerID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #5e9c1207673c65b0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/containers/files/content.ts:15

    return this._client.get(path`/containers/${container_id}/files/${fileID}/content`, {
      ...options,
      headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #db26f83e8236e699 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/containers/files/files.ts:28

    return this._client.post(
      path`/containers/${containerID}/files`,
      multipartFormRequestOptions({ body, ...options }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #191fceacdc182f77 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/containers/files/files.ts:43

    return this._client.get(path`/containers/${container_id}/files/${fileID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #835829757a0d59e5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/conversations/conversations.ts:38

    return this._client.get(path`/conversations/${conversationID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2d43acd576907dd1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/conversations/conversations.ts:49

    return this._client.post(path`/conversations/${conversationID}`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #190e0ee07f5b92ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/conversations/items.ts:25

    return this._client.post(path`/conversations/${conversationID}/items`, {
      query: { include },
      body,
      ...options,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0dcd933321a284a5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/conversations/items.ts:41

    return this._client.get(path`/conversations/${conversation_id}/items/${itemID}`, { query, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #df0f455b8bb930fb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/evals.ts:49

    return this._client.get(path`/evals/${evalID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b62bbe8d85918b20 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/evals.ts:56

    return this._client.post(path`/evals/${evalID}`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #4f5d4ad95f5d5251 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/runs/output-items.ts:20

    return this._client.get(path`/evals/${eval_id}/runs/${run_id}/output_items/${outputItemID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #542529bfbb68ffd0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/runs/runs.ts:31

    return this._client.post(path`/evals/${evalID}/runs`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #2fc63f322c91d6ff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/runs/runs.ts:43

    return this._client.get(path`/evals/${eval_id}/runs/${runID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #647e35d3331bee1f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/evals/runs/runs.ts:73

    return this._client.post(path`/evals/${eval_id}/runs/${runID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3051b7a8e7a41711 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/files.ts:45

    return this._client.get(path`/files/${fileID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8cbdcc5312f24b6f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/files.ts:69

    return this._client.get(path`/files/${fileID}/content`, {
      ...options,
      headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #bd9e5b0d2ca97e1e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/fine-tuning/checkpoints/permissions.ts:58

    return this._client.get(path`/fine_tuning/checkpoints/${fineTunedModelCheckpoint}/permissions`, {
      query,
      ...options,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a6d4a3eb626f7ddb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:55

    return this._client.get(path`/fine_tuning/jobs/${fineTuningJobID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #632280a99703369e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:87

    return this._client.post(path`/fine_tuning/jobs/${fineTuningJobID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #77b0cec230a03720 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:126

    return this._client.post(path`/fine_tuning/jobs/${fineTuningJobID}/pause`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #29f878739a9e234a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:140

    return this._client.post(path`/fine_tuning/jobs/${fineTuningJobID}/resume`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #163bea883329b735 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/models.ts:15

    return this._client.get(path`/models/${model}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #b54c02fc71c89b1c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/realtime/calls.ts:24

    return this._client.post(path`/realtime/calls/${callID}/accept`, {
      body,
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #94ea46925d97b9ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/realtime/calls.ts:40

    return this._client.post(path`/realtime/calls/${callID}/hangup`, {
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #48d62a3602d49b86 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/realtime/calls.ts:57

    return this._client.post(path`/realtime/calls/${callID}/refer`, {
      body,
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #75d01d1323598ba8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/realtime/calls.ts:77

    return this._client.post(path`/realtime/calls/${callID}/reject`, {
      body,
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e028bc9b88613ce4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/responses/responses.ts:145

      this._client.get(path`/responses/${responseID}`, {
        query,
        ...options,
        stream: query?.stream ?? false,
      }) as APIPromise<Response> | APIPromise<Stream<ResponseStreamEvent>>

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #558c044b05656de9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/responses/responses.ts:208

    return this._client.post(path`/responses/${responseID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #0f6fb854a3ce7f96 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/uploads/parts.ts:25

    return this._client.post(
      path`/uploads/${uploadID}/parts`,
      multipartFormRequestOptions({ body, ...options }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2a57f538830bba68 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/uploads/uploads.ts:43

    return this._client.post(path`/uploads/${uploadID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a359659deb94539b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/uploads/uploads.ts:62

    return this._client.post(path`/uploads/${uploadID}/complete`, { body, ...options });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3ef6cfd446d348fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/file-batches.ts:25

    return this._client.post(path`/vector_stores/${vectorStoreID}/file_batches`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e60d12a2203091e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/file-batches.ts:41

    return this._client.get(path`/vector_stores/${vector_store_id}/file_batches/${batchID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #856fd51c7371500c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/file-batches.ts:57

    return this._client.post(path`/vector_stores/${vector_store_id}/file_batches/${batchID}/cancel`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #19d2862a7a869ba1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/files.ts:24

    return this._client.post(path`/vector_stores/${vectorStoreID}/files`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #42b9d38b1d066818 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/files.ts:40

    return this._client.get(path`/vector_stores/${vector_store_id}/files/${fileID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #2ebb8cfe4e88582c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/files.ts:51

    return this._client.post(path`/vector_stores/${vector_store_id}/files/${fileID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #85aaabffde68ec69 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/vector-stores.ts:54

    return this._client.get(path`/vector_stores/${vectorStoreID}`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #87cdd5d267ec513b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/vector-stores/vector-stores.ts:68

    return this._client.post(path`/vector_stores/${vectorStoreID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #d0904c99d2f2271a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/videos.ts:24

    return this._client.get(path`/videos/${videoID}`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a7e88782de08722e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/videos.ts:52

    return this._client.get(path`/videos/${videoID}/content`, {
      query,
      ...options,
      headers: buildHeaders([{ Accept: 'application/binary' }, options?.headers]),
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c5c2bc57f7ea3c54 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/src/resources/videos.ts:64

    return this._client.post(
      path`/videos/${videoID}/remix`,
      maybeMultipartFormRequestOptions({ body, ...options }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

pg

npm dependency

expand_more 6 low-confidence finding(s)

low env_fs dependency Excluded from app score #3d836c0174d7302a — Environment-variable access.

pkgs/npm/[email protected]/lib/connection-parameters.js:15

    envVar = process.env['PG' + key.toUpperCase()]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e49afafd5bda3798 — Environment-variable access.

pkgs/npm/[email protected]/lib/connection-parameters.js:19

    envVar = process.env[envVar]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e25ffb2aedc8db28 — Environment-variable access.

pkgs/npm/[email protected]/lib/connection-parameters.js:26

  switch (process.env.PGSSLMODE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2f7a492098b399f — Environment-variable access.

pkgs/npm/[email protected]/lib/connection-parameters.js:127

      this.connect_timeout = process.env.PGCONNECT_TIMEOUT || 0

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a11d705345e53334 — Environment-variable access.

pkgs/npm/[email protected]/lib/defaults.js:5

  user = process.platform === 'win32' ? process.env.USERNAME : process.env.USER

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c34656a61ee518d0 — Environment-variable access.

pkgs/npm/[email protected]/lib/index.js:41

  forceNative = !!process.env.NODE_PG_FORCE_NATIVE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

prom-client

npm dependency

expand_more 6 low-confidence finding(s)

low env_fs dependency Excluded from app score #fd7c9f967297d59a — Filesystem access.

pkgs/npm/[email protected]/lib/metrics/osMemoryHeapLinux.js:4

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed7e13d244ee7dbb — Filesystem access.

pkgs/npm/[email protected]/lib/metrics/osMemoryHeapLinux.js:53

				const stat = fs.readFileSync('/proc/self/status', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a0148226c54994d — Filesystem access.

pkgs/npm/[email protected]/lib/metrics/processMaxFileDescriptors.js:4

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5433843c847f7736 — Filesystem access.

pkgs/npm/[email protected]/lib/metrics/processMaxFileDescriptors.js:14

			const limits = fs.readFileSync('/proc/self/limits', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #500a5453cac79c96 — Filesystem access.

pkgs/npm/[email protected]/lib/metrics/processOpenFileDescriptors.js:4

const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #0213e2783f99dccc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/pushgateway.js:74

		const req = httpModule.request(options, resp => {
			let body = '';
			resp.setEncoding('utf8');
			resp.on('data', chunk => {
				body += chunk;
			});
			resp.on('end', () => {
				if (resp.statusCode >= 400) {
					reject(
						new Error(`push failed with status ${resp.statusCode}, ${body}`),
					);
				} else {
					resolve({ resp, body });
				}
			});
		});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

s3-streamlogger

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #8ba7f8d2c91531ef — Environment-variable access.

pkgs/npm/[email protected]/index.js:18

    if(!(options.bucket || process.env.BUCKET_NAME))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #820b36d9562c5d56 — Environment-variable access.

pkgs/npm/[email protected]/index.js:21

    this.bucket                 = options.bucket || process.env.BUCKET_NAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

sqlite3

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #cc882b4e9939da80 — Filesystem access.

pkgs/npm/[email protected]/deps/extract.js:2

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

stripe

npm dependency

expand_more 12 low-confidence finding(s)

low egress dependency Excluded from app score #bd3f3551dd574f00 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/cjs/net/NodeHttpClient.js:37

            const req = (isInsecureConnection ? http : https).request({
                host: host,
                port: port,
                path,
                method,
                agent,
                headers,
                ciphers: 'DEFAULT:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2:!MD5',
            });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #944bfc4abb6d299f — Filesystem access.

pkgs/npm/[email protected]/cjs/platform/NodePlatformFunctions.js:5

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e82153668da1784c — Filesystem access.

pkgs/npm/[email protected]/cjs/platform/NodePlatformFunctions.js:65

            const content = fs.readFileSync(filePath, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ec30673c6afa959 — Filesystem access.

pkgs/npm/[email protected]/cjs/platform/NodePlatformFunctions.js:78

            fs.writeFileSync(filePath, newId, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #565230ccdfe621b7 — Environment-variable access.

pkgs/npm/[email protected]/cjs/platform/NodePlatformFunctions.js:89

            const appData = process.env.APPDATA;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a29ba11154a2d80 — Environment-variable access.

pkgs/npm/[email protected]/cjs/platform/NodePlatformFunctions.js:94

        const xdg = process.env.XDG_CONFIG_HOME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #25c6458e6371cc35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/esm/net/NodeHttpClient.js:34

            const req = (isInsecureConnection ? http : https).request({
                host: host,
                port: port,
                path,
                method,
                agent,
                headers,
                ciphers: 'DEFAULT:!aNULL:!eNULL:!LOW:!EXPORT:!SSLv2:!MD5',
            });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #3857a17fefe0ba76 — Filesystem access.

pkgs/npm/[email protected]/esm/platform/NodePlatformFunctions.js:2

import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6aae2e5e0753756a — Filesystem access.

pkgs/npm/[email protected]/esm/platform/NodePlatformFunctions.js:62

            const content = fs.readFileSync(filePath, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0cc44eb050bdba50 — Filesystem access.

pkgs/npm/[email protected]/esm/platform/NodePlatformFunctions.js:75

            fs.writeFileSync(filePath, newId, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0454b3b4f79de45 — Environment-variable access.

pkgs/npm/[email protected]/esm/platform/NodePlatformFunctions.js:86

            const appData = process.env.APPDATA;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6643325438639185 — Environment-variable access.

pkgs/npm/[email protected]/esm/platform/NodePlatformFunctions.js:91

        const xdg = process.env.XDG_CONFIG_HOME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

typeorm

npm dependency

expand_more 30 low-confidence finding(s)

low egress dependency Excluded from app score #a5c509168203cac8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/browser/cache/RedisQueryResultCache.js:94

        const result = await this.client.get(key);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #14a9e7b1d86429a0 — Environment-variable access.

pkgs/npm/[email protected]/browser/cli-ts-node-esm.js:5

if ((process.env["NODE_OPTIONS"] ?? "").includes("--loader ts-node"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e467cd31b0b2925 — Environment-variable access.

pkgs/npm/[email protected]/browser/cli-ts-node-esm.js:13

                process.env["NODE_OPTIONS"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7d88f679e2de804 — Environment-variable access.

pkgs/npm/[email protected]/browser/driver/oracle/OracleDriver.js:221

            process.env.ORA_SDTZ = "UTC";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #779626f97117d8a2 — Environment-variable access.

pkgs/npm/[email protected]/browser/driver/postgres/PostgresDriver.js:273

            process.env.PGTZ = "UTC";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c61d1e01f79cadb — Filesystem access.

pkgs/npm/[email protected]/browser/driver/sqljs/SqljsDriver.js:66

                    const database = PlatformTools_1.PlatformTools.readFileSync(fileNameOrLocalStorageOrData);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84f5ccdbfb73be9d — Filesystem access.

pkgs/npm/[email protected]/browser/driver/sqljs/SqljsDriver.js:135

                await PlatformTools_1.PlatformTools.writeFile(path, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16b4fe3a0b5d6dfe — Filesystem access.

pkgs/npm/[email protected]/browser/platform/PlatformTools.d.ts:3

export { ReadStream } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b43723129c60f1ed — Filesystem access.

pkgs/npm/[email protected]/browser/platform/PlatformTools.js:8

const fs_1 = tslib_1.__importDefault(require("fs"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ffe1b28dd56ce232 — Filesystem access.

pkgs/npm/[email protected]/browser/platform/PlatformTools.js:13

var fs_2 = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba4d502635d6054a — Filesystem access.

pkgs/npm/[email protected]/browser/platform/PlatformTools.js:137

        return fs_1.default.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23d3bef7d567c20b — Filesystem access.

pkgs/npm/[email protected]/browser/platform/PlatformTools.js:143

        return fs_1.default.promises.writeFile(path, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b04a1ef77315c17 — Filesystem access.

pkgs/npm/[email protected]/browser/util/ImportUtils.js:88

                const parsedPackage = JSON.parse(await promises_1.default.readFile(potentialPackageJson, "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #f1c16551cce3d30a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/cache/RedisQueryResultCache.js:94

        const result = await this.client.get(key);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #61fad84ae2f9489e — Environment-variable access.

pkgs/npm/[email protected]/cli-ts-node-esm.js:5

if ((process.env["NODE_OPTIONS"] ?? "").includes("--loader ts-node"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ab50fd4d59effd8 — Environment-variable access.

pkgs/npm/[email protected]/cli-ts-node-esm.js:13

                process.env["NODE_OPTIONS"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdcb9e0a882fc169 — Filesystem access.

pkgs/npm/[email protected]/commands/CommandUtils.js:71

        await promises_1.default.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9237f3b34ac42317 — Filesystem access.

pkgs/npm/[email protected]/commands/CommandUtils.js:79

        const file = await promises_1.default.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e329cec0d2d56031 — Filesystem access.

pkgs/npm/[email protected]/commands/InitCommand.js:79

            const packageJsonContents = await CommandUtils_1.CommandUtils.readFile(basePath + "/package.json");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd669f68a3ffa7b9 — Filesystem access.

pkgs/npm/[email protected]/commands/InitCommand.js:597

        const ourPackageJson = JSON.parse(await CommandUtils_1.CommandUtils.readFile(node_path_1.default.resolve(__dirname, "..", "package.json")));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d11e44c7f6a01c3c — Environment-variable access.

pkgs/npm/[email protected]/driver/oracle/OracleDriver.js:221

            process.env.ORA_SDTZ = "UTC";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #188a4881c19f7586 — Environment-variable access.

pkgs/npm/[email protected]/driver/postgres/PostgresDriver.js:273

            process.env.PGTZ = "UTC";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec153a9f9c343328 — Filesystem access.

pkgs/npm/[email protected]/driver/sqljs/SqljsDriver.js:66

                    const database = PlatformTools_1.PlatformTools.readFileSync(fileNameOrLocalStorageOrData);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #285ce8b3161a7507 — Filesystem access.

pkgs/npm/[email protected]/driver/sqljs/SqljsDriver.js:135

                await PlatformTools_1.PlatformTools.writeFile(path, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8a9172ede8f8945 — Filesystem access.

pkgs/npm/[email protected]/platform/PlatformTools.d.ts:3

export { ReadStream } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #791b5d77fa2fdfe4 — Filesystem access.

pkgs/npm/[email protected]/platform/PlatformTools.js:8

const fs_1 = tslib_1.__importDefault(require("fs"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #298460c6b9cce11b — Filesystem access.

pkgs/npm/[email protected]/platform/PlatformTools.js:13

var fs_2 = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a68ed71b1932a00 — Filesystem access.

pkgs/npm/[email protected]/platform/PlatformTools.js:137

        return fs_1.default.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdcd8a0b9e142ed8 — Filesystem access.

pkgs/npm/[email protected]/platform/PlatformTools.js:143

        return fs_1.default.promises.writeFile(path, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b79e4576ad87c45 — Filesystem access.

pkgs/npm/[email protected]/util/ImportUtils.js:88

                const parsedPackage = JSON.parse(await promises_1.default.readFile(potentialPackageJson, "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

winston-daily-rotate-file

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #408d47d157ba219f — Filesystem access.

pkgs/npm/[email protected]/daily-rotate-file.js:1

const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

@keyv/redis prod — dist-only: no readable source
@types/bcryptjs prod — no javascript source
cache-manager prod — dist-only: no readable source
geoip-lite prod — tarball exceeds byte cap
@elastic/elasticsearch prod — scan budget exceeded
@elevenlabs/elevenlabs-js prod — scan budget exceeded
@getzep/zep-cloud prod — scan budget exceeded
@getzep/zep-js prod — scan budget exceeded
@gomomento/sdk prod — scan budget exceeded
@gomomento/sdk-core prod — scan budget exceeded
@google-ai/generativelanguage prod — scan budget exceeded
@google-cloud/storage prod — scan budget exceeded
@google/generative-ai prod — scan budget exceeded
@grpc/grpc-js prod — scan budget exceeded
@huggingface/inference prod — scan budget exceeded
@ibm-cloud/watsonx-ai prod — scan budget exceeded
@langchain/anthropic prod — scan budget exceeded
@langchain/aws prod — scan budget exceeded
@langchain/baidu-qianfan prod — scan budget exceeded
@langchain/classic prod — scan budget exceeded
@langchain/cloudflare prod — scan budget exceeded
@langchain/cohere prod — scan budget exceeded
@langchain/community prod — scan budget exceeded
@langchain/core prod — scan budget exceeded
@langchain/deepseek prod — scan budget exceeded
@langchain/exa prod — scan budget exceeded
@langchain/google-genai prod — scan budget exceeded
@langchain/google-vertexai prod — scan budget exceeded
@langchain/groq prod — scan budget exceeded
@langchain/langgraph prod — scan budget exceeded
@langchain/mistralai prod — scan budget exceeded
@langchain/mongodb prod — scan budget exceeded
@langchain/ollama prod — scan budget exceeded
@langchain/openai prod — scan budget exceeded
@langchain/pinecone prod — scan budget exceeded
@langchain/qdrant prod — scan budget exceeded
@langchain/redis prod — scan budget exceeded
@langchain/tavily prod — scan budget exceeded
@langchain/textsplitters prod — scan budget exceeded
@langchain/weaviate prod — scan budget exceeded
@langchain/xai prod — scan budget exceeded
@mem0/community prod — scan budget exceeded
@mendable/firecrawl-js prod — scan budget exceeded
@mistralai/mistralai prod — scan budget exceeded
@modelcontextprotocol/server-postgres prod — scan budget exceeded
@modelcontextprotocol/server-sequential-thinking prod — scan budget exceeded
@modelcontextprotocol/server-slack prod — scan budget exceeded
@notionhq/client prod — scan budget exceeded
@opensearch-project/opensearch prod — scan budget exceeded
@pinecone-database/pinecone prod — scan budget exceeded
@qdrant/js-client-rest prod — scan budget exceeded
@stripe/agent-toolkit prod — scan budget exceeded
@supabase/supabase-js prod — scan budget exceeded
@types/js-yaml prod — scan budget exceeded
@types/jsdom prod — scan budget exceeded
@upstash/redis prod — scan budget exceeded
@upstash/vector prod — scan budget exceeded
@zilliz/milvus2-sdk-node prod — scan budget exceeded
apify-client prod — scan budget exceeded
assemblyai prod — scan budget exceeded
cheerio prod — scan budget exceeded
chromadb prod — scan budget exceeded
cohere-ai prod — scan budget exceeded
composio-core prod — scan budget exceeded
couchbase prod — scan budget exceeded
css-what prod — scan budget exceeded
d3-dsv prod — scan budget exceeded
epub2 prod — scan budget exceeded
exa-js prod — scan budget exceeded
faiss-node prod — scan budget exceeded
fast-json-patch prod — scan budget exceeded
form-data prod — scan budget exceeded
google-auth-library prod — scan budget exceeded
graphql prod — scan budget exceeded
groq-sdk prod — scan budget exceeded
html-to-text prod — scan budget exceeded
ioredis prod — scan budget exceeded
ipaddr.js prod — scan budget exceeded
jsdom prod — scan budget exceeded
json5 prod — scan budget exceeded
jsonpointer prod — scan budget exceeded
jsonrepair prod — scan budget exceeded
langchain prod — scan budget exceeded
langfuse prod — scan budget exceeded
langfuse-langchain prod — scan budget exceeded
langsmith prod — scan budget exceeded
langwatch prod — scan budget exceeded
linkifyjs prod — scan budget exceeded
llamaindex prod — scan budget exceeded
lunary prod — scan budget exceeded
mammoth prod — scan budget exceeded
meilisearch prod — scan budget exceeded
mongodb prod — scan budget exceeded
neo4j-driver prod — scan budget exceeded
node-fetch prod — scan budget exceeded
node-html-markdown prod — scan budget exceeded
notion-to-md prod — scan budget exceeded

verified_user Application data leak confirmed

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Confirmed data exfiltration in application code

</> First-Party Code

first-party (npm): packages/components

first-party (npm): packages/server

first-party (npm)

first-party (npm): packages/agentflow

first-party (npm): packages/ui

</> Dependencies

axios

flowise-components

posthog-node

@brave/brave-search-mcp-server

winston

winston-azure-blob

@anthropic-ai/sdk

@apidevtools/json-schema-ref-parser

@datastax/astra-db-ts

@dqbd/tiktoken

@e2b/code-interpreter

@modelcontextprotocol/sdk

@oclif/core

bullmq

connect-pg-simple

connect-redis

dotenv

express

express-mysql-session

express-session

flowise-nim-container-manager

flowise-ui

global-agent

handlebars

multer

multer-azure-blob-storage

multer-cloud-storage

mysql2

nanoid

node-cron

nodemailer

openai

pg

prom-client

s3-streamlogger

sqlite3

stripe

typeorm

winston-daily-rotate-file

Skipped dependencies