Close Open Privacy Scan
App Privacy Score
Low risk · 1126 finding(s)
Based on: 2 first-party package(s) · 33/40 deps analyzed
Dependency score: 42 (High risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz Application data flows
No application data flows were found. See dependency data flows below.
hub Dependency data flows (1)
- 1source
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 - 2sink
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514
</> First-Party Code
first-party (python)
python first-partyexpand_more 75 low-confidence finding(s)
low env_fs — Filesystem access. 63 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 7 locations
low env_fs — Environment-variable access. 5 locations
</> Dependencies
trainer
python dependency self.run.track(value, name=title, step=step, context=self.context)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
self.run.track(
Text(text), # Pass a string you want to track
name=title, # The name of distributions
step=step, # Step index (optional)
context=self.context,
)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
self.run.track(
Image(figure, title), # Pass image data and/or caption
name=title, # The name of image set
step=step, # Step index (optional)
context=self.context,
)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
self.run.track(
Audio(audio), # Pass audio file or numpy array
name=title, # The name of distributions
step=step, # Step index (optional)
context=self.context,
)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
self.run.track(value, name="{}-{}".format(scope_name, key), step=step, context=self.context)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
self.run.track(
Image(value, title), # Pass image data and/or caption
name=title, # The name of image set
step=step, # Step index (optional)
context=self.context,
)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
self.run.track(
Audio(value), # Pass audio file or numpy array
name=title, # The name of distributions
step=step, # Step index (optional)
context=self.context,
)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 20 low-confidence finding(s)
low env_fs — Filesystem access. 7 locations
low env_fs — Environment-variable access. 12 locations
_ = requests.get(URL, timeout=5)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
transformers
python dependency logger.debug(f"[Kubeflow] Token file not found: {token_path}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 399 low-confidence finding(s)
low env_fs — Filesystem access. 249 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 13 locations
low env_fs — Environment-variable access. 136 locations
img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
aiohttp
python dependencyexpand_more 30 low-confidence finding(s)
low env_fs — Filesystem access. 10 locations
low env_fs — Environment-variable access. 9 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 6 locations
anyascii
python dependencyexpand_more 1 low-confidence finding(s)
return files(package).joinpath(resource).read_bytes()Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
bnnumerizer
python dependencyexpand_more 1 low-confidence finding(s)
long_description=open('README.md',encoding='utf-8').read() + '\n\n' + open('CHANGELOG.txt',encoding='utf-8').read(),Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
bnunicodenormalizer
python dependencyexpand_more 1 low-confidence finding(s)
long_description=open('README.md',encoding='utf-8').read() + '\n\n' + open('CHANGELOG.txt',encoding='utf-8').read(),Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
coqpit
python dependencyexpand_more 6 low-confidence finding(s)
low env_fs — Filesystem access. 6 locations
cython
python dependencyexpand_more 155 low-confidence finding(s)
low env_fs — Environment-variable access. 37 locations
low env_fs — Filesystem access. 114 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations
with urlopen("https://api.github.com/rate_limit") as p:Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
encodec
python dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Filesystem access. 4 locations
flask
python dependencyexpand_more 21 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
low env_fs — Environment-variable access. 12 locations
fsspec
python dependencyexpand_more 70 low-confidence finding(s)
low env_fs — Filesystem access. 31 locations
low env_fs — Environment-variable access. 2 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 37 locations
g2pkk
python dependencyexpand_more 5 low-confidence finding(s)
gruut
python dependencyexpand_more 12 low-confidence finding(s)
low env_fs — Filesystem access. 10 locations
maybe_config_home = os.environ.get("XDG_CONFIG_HOME")Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
with urlopen(uri, context=ssl_context) as response:Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
hangul_romanize
python dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
jamo
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
jieba
python dependencyexpand_more 8 low-confidence finding(s)
low env_fs — Filesystem access. 8 locations
librosa
python dependencyexpand_more 8 low-confidence finding(s)
low env_fs — Environment-variable access. 6 locations
low env_fs — Filesystem access. 2 locations
mutagen
python dependencyexpand_more 10 low-confidence finding(s)
low env_fs — Filesystem access. 10 locations
nltk
python dependencyexpand_more 93 low-confidence finding(s)
low env_fs — Filesystem access. 67 locations
low env_fs — Environment-variable access. 22 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 4 locations
num2words
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
numba
python dependencyexpand_more 69 low-confidence finding(s)
low env_fs — Filesystem access. 41 locations
low env_fs — Environment-variable access. 28 locations
packaging
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
pandas
python dependencyexpand_more 29 low-confidence finding(s)
low env_fs — Filesystem access. 12 locations
low env_fs — Environment-variable access. 16 locations
return urllib.request.urlopen(*args, **kwargs) # noqa: TID251Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
pypinyin
python dependencyexpand_more 6 low-confidence finding(s)
low env_fs — Environment-variable access. 2 locations
pyyaml
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
scikit-learn
python dependencyexpand_more 52 low-confidence finding(s)
low env_fs — Environment-variable access. 25 locations
low env_fs — Filesystem access. 25 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations
soundfile
python dependencyexpand_more 5 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 2 locations
tqdm
python dependencyexpand_more 20 low-confidence finding(s)
low env_fs — Filesystem access. 10 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low env_fs — Environment-variable access. 5 locations
umap-learn
python dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
unidecode
python dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
Skipped dependencies
Production
- numpy prod — extract failed: not a gzip file
- scipy prod — sdist exceeds byte cap
- torch prod — no sdist (wheels only)
- torchaudio prod — no sdist (wheels only)
- pysbd prod — no sdist (wheels only)
- matplotlib prod — sdist exceeds byte cap
- spacy prod — no sdist (wheels only)