Close Open Privacy Scan
App Privacy Score
82
/100
Low privacy risk
Low risk · 2391 finding(s)
Based on: 5 first-party package(s) · 110/125 deps analyzed
Dependency score: 42 (High risk)
bar_chart Score Breakdown
egress
−15
env_fs
−3
list Scan Summary
0 high
6 medium
2385 low
First-party packages:
3
Dependency packages:
30
Ecosystem:
python
swap_horiz Application data flows
No application data flows were found. See dependency data flows below.
hub Dependency data flows (1)
medium
transformers
dependency
PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
- 1source
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 - 2sink
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514
</> First-Party Code
first-party (npm): invokeai/frontend/web/scripts
python first-partyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
first-party (python)
python first-partyexpand_more 65 low-confidence finding(s)
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
low env_fs — Filesystem access. 39 locations
low env_fs — Environment-variable access. 12 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 12 locations
first-party (python): invokeai/backend/image_util/normal_bae/nets/submodules/efficientnet_repo
python first-partyexpand_more 8 low-confidence finding(s)
</> Dependencies
fastapi-events
python dependency
medium
telemetry
dependency
Excluded from app score
#2447341b6f3529c0
capability detected · no path traced
—
Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/fastapi_events/otel/__init__.py:3
from opentelemetry import propagate, trace # type: ignoreA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium
telemetry
dependency
Excluded from app score
#26d0d2ba8bbc3155
capability detected · no path traced
—
Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/fastapi_events/otel/propagate/__init__.py:4
from opentelemetry import propagate # type: ignoreA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium
telemetry
dependency
Excluded from app score
#5abe278bc2d6c952
capability detected · no path traced
—
Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/fastapi_events/otel/trace/__init__.py:4
from opentelemetry import traceA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 4 low-confidence finding(s)
low env_fs — Environment-variable access. 2 locations
low env_fs — Filesystem access. 2 locations
accelerate
python dependency
medium
telemetry
dependency
Excluded from app score
#4247198bc265db2a
capability detected · no path traced
—
Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/accelerate/tracking.py:650
self.writer.track(value, name=key, step=step, **kwargs)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium
telemetry
dependency
Excluded from app score
#87701df8f772ed66
capability detected · no path traced
—
Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/src/accelerate/tracking.py:682
self.writer.track(aim_image, name=key, step=step, **track_kw)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 226 low-confidence finding(s)
low env_fs — Filesystem access. 31 locations
low env_fs — Environment-variable access. 195 locations
transformers
python dependency
medium
pii_flow
dependency
Excluded from app score
#2823c9e8e5759c7f
—
PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514
· flow /tmp/closeopen-nqbwf546/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2512 → /tmp/closeopen-nqbwf546/pkgs/python/[email protected]/src/transformers/integrations/integration_utils.py:2514
logger.debug(f"[Kubeflow] Token file not found: {token_path}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 399 low-confidence finding(s)
low env_fs — Filesystem access. 249 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 13 locations
low env_fs — Environment-variable access. 136 locations
low
egress
dependency
Excluded from app score
#172e81a5b1dd0ac7
capability detected · no path traced
—
Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/transformers/utils/attention_visualizer.py:183
img = Image.open(io.BytesIO(httpx.get(img, follow_redirects=True).content))Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
PyWavelets
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 5 locations
low env_fs — Environment-variable access. 3 locations
low
egress
dependency
Excluded from app score
#4b4e1700b0768139
capability detected · no path traced
—
Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/util/gh_lists.py:158
return urlopen(req, timeout=60)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
blake3
python dependencyexpand_more 2 low-confidence finding(s)
low
env_fs
dependency
Excluded from app score
#d1f724807fff8ad2
capability detected · no path traced
—
Environment-variable access.
pkgs/python/[email protected]/c_impl/setup.py:69
return os.environ.get("FORCE_INTRINSICS") == "1"Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low
env_fs
dependency
Excluded from app score
#c84f986a4ae020a6
capability detected · no path traced
—
Filesystem access.
pkgs/python/[email protected]/c_impl/setup.py:259
long_description=open("README.md").read(),Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
diffusers
python dependencyexpand_more 98 low-confidence finding(s)
low env_fs — Filesystem access. 50 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 10 locations
low env_fs — Environment-variable access. 37 locations
low
egress
dependency
Excluded from app score
#84ea47abb7b7fccb
capability detected · no path traced
—
Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/src/diffusers/utils/dynamic_modules_utils.py:48
releases = json.loads(request.urlopen(url).read())["releases"].keys()Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
dnspython
python dependencyexpand_more 16 low-confidence finding(s)
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 4 locations
low env_fs — Filesystem access. 10 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
email-validator
python dependencyexpand_more 4 low-confidence finding(s)
fastapi
python dependencyexpand_more 78 low-confidence finding(s)
low env_fs — Filesystem access. 37 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 32 locations
low env_fs — Environment-variable access. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 4 locations
gguf
python dependencyexpand_more 29 low-confidence finding(s)
low env_fs — Filesystem access. 20 locations
low env_fs — Environment-variable access. 8 locations
low
egress
dependency
Excluded from app score
#6c2cad1dc8400b9b
capability detected · no path traced
—
Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/gguf/utility.py:236
response = requests.get(url, allow_redirects=True, headers=headers)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
huggingface-hub
python dependencyexpand_more 185 low-confidence finding(s)
low env_fs — Filesystem access. 64 locations
low env_fs — Environment-variable access. 57 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 62 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
numpy
python dependencyexpand_more 982 low-confidence finding(s)
low env_fs — Filesystem access. 618 locations
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57
low env_fs — Environment-variable access. 356 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
onnx
python dependencyexpand_more 90 low-confidence finding(s)
low env_fs — Filesystem access. 58 locations
low env_fs — Environment-variable access. 30 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations
passlib
python dependencyexpand_more 18 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
low env_fs — Filesystem access. 10 locations
picklescan
python dependencyexpand_more 4 low-confidence finding(s)
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations
low env_fs — Filesystem access. 2 locations
pip-tools
python dependencyexpand_more 17 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
low env_fs — Filesystem access. 7 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations
pipdeptree
python dependencyexpand_more 5 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 2 locations
prompt-toolkit
python dependencyexpand_more 20 low-confidence finding(s)
low env_fs — Filesystem access. 7 locations
low env_fs — Environment-variable access. 13 locations
pydantic
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 5 locations
pydantic-settings
python dependencyexpand_more 3 low-confidence finding(s)
low
env_fs
dependency
Excluded from app score
#96547f6d254b8e00
capability detected · no path traced
—
Environment-variable access.
pkgs/python/[email protected]/pydantic_settings/sources/providers/env.py:75
return parse_env_vars(os.environ, self.case_sensitive, self.env_ignore_empty, self.env_parse_none_str)Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs — Filesystem access. 2 locations
pypatchmatch
python dependencyexpand_more 3 low-confidence finding(s)
low
egress
dependency
Excluded from app score
#670913ebb0675a76
capability detected · no path traced
—
Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/patchmatch/patch_match.py:85
u = urlopen(req)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low
egress
dependency
Excluded from app score
#58ed469c84119dba
capability detected · no path traced
—
Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/patchmatch/patch_match.py:131
release_response = urlopen(release_url)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low
env_fs
dependency
Excluded from app score
#c5a2fcba46645c68
capability detected · no path traced
—
Environment-variable access.
pkgs/python/[email protected]/patchmatch/patch_match.py:170
if os.environ.get("INVOKEAI_DEBUG_PATCHMATCH"):Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
python-multipart
python dependencyexpand_more 1 low-confidence finding(s)
low
env_fs
dependency
Excluded from app score
#100ed7919a764053
capability detected · no path traced
—
Filesystem access.
pkgs/python/[email protected]/python_multipart/multipart.py:516
tmp_file = open(path, "w+b")Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
requests
python dependencyexpand_more 8 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
safetensors
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
semver
python dependencyexpand_more 3 low-confidence finding(s)
low
env_fs
tooling
Excluded from app score
unreachable
#3c7960fec09d1fc3
capability detected · no path traced
—
Filesystem access.
pkgs/python/[email protected]/docs/conf.py:33
content = Path(path).read_text(encoding="utf-8")Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs — Environment-variable access. 2 locations
sentencepiece
python dependencyexpand_more 1 low-confidence finding(s)
low
env_fs
dependency
Excluded from app score
#7c40108c6c12d161
capability detected · no path traced
—
Filesystem access.
pkgs/python/[email protected]/setup.py:35
exec(open('src/sentencepiece/_version.py').read())Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
torchsde
python dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
twine
python dependencyexpand_more 12 low-confidence finding(s)
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low env_fs — Filesystem access. 5 locations
low env_fs — Environment-variable access. 2 locations
uvicorn
python dependencyexpand_more 5 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 2 locations
xformers
python dependencyexpand_more 67 low-confidence finding(s)
low env_fs — Environment-variable access. 34 locations
low env_fs — Filesystem access. 33 locations
Skipped dependencies
Production
- @atlaskit/pragmatic-drag-and-drop prod — dist-only: no readable source
- @atlaskit/pragmatic-drag-and-drop-auto-scroll prod — dist-only: no readable source
- @xyflow/react prod — dist-only: no readable source
- react-virtuoso prod — dist-only: no readable source
- bitsandbytes prod — no sdist (wheels only)
- mediapipe prod — no sdist (wheels only)
- onnxruntime prod — no sdist (wheels only)
- opencv-contrib-python prod — sdist exceeds byte cap
- torch prod — no sdist (wheels only)
- torchvision prod — no sdist (wheels only)
- dynamicprompts prod — no sdist (wheels only)
- pillow prod — sdist exceeds byte cap
- triton-rocm prod — no sdist (wheels only)
- onnxruntime-gpu prod — no sdist (wheels only)
- onnxruntime-directml prod — no sdist (wheels only)