Close Open Privacy Scan

link https://github.com/apify/apify-mcp-server

bolt Snapshot: commit a1946f0

science engine v1.22

schedule 2026-07-22T07:10:35.010214+00:00

smart_toy MCP server detected: @modelcontextprotocol/ext-apps, @modelcontextprotocol/sdk — detected in dependencies, not a safety judgment.

App Privacy Score

57 /100

Medium privacy risk

Medium risk · 377 finding(s)

Dependency score: 12 (High risk)

bar_chart Score Breakdown

telemetry −25

egress −15

env_fs −3

list Scan Summary

0 high 24 medium 353 low

First-party packages: 2

Dependency packages: 14

Ecosystem: npm

swap_horiz Application data flows

No application data flows were found. See dependency data flows below.

hub Dependency data flows (3)

medium axios dependency Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/lib/adapters/http.js:861 → pkgs/npm/[email protected]/lib/adapters/http.js:1062

medium @modelcontextprotocol/ext-apps tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:62 → pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:489

medium @modelcontextprotocol/ext-apps tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:62 → pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:566

</> First-Party Code

first-party (npm)

npm first-party

medium telemetry production #a0c77cfccb9a5e4f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/instrument.ts:10

import * as Sentry from '@sentry/node';

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #6dacafc5737b0336 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/telemetry.ts:3

import { Analytics } from '@segment/analytics-node';

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #4a5d376c74897baf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/telemetry.ts:90

        client?.track({
            ...(userId ? { userId } : { anonymousId: properties.mcp_session_id || crypto.randomUUID() }),
            event: SEGMENT_EVENTS.TOOL_CALL,
            properties,
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry production #ee79325042ee233a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

repo/src/telemetry.ts:140

        client?.track({
            ...(userId ? { userId } : { anonymousId: properties.mcp_session_id || crypto.randomUUID() }),
            event: SEGMENT_EVENTS.REPORTED_PROBLEM,
            properties,
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 47 low-confidence finding(s)

low env_fs test-only Excluded from app score #531841a3678a932f — Filesystem access.

repo/.github/scripts/before-beta-release.js:9

const pkgJson = JSON.parse(readFileSync(PKG_JSON_PATH, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #21d344feaab298ff — Filesystem access.

repo/.github/scripts/before-beta-release.js:18

writeFileSync(PKG_JSON_PATH, `${JSON.stringify(pkgJson, null, 2)}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b18f9650661ee91b — Filesystem access.

repo/evals/config.ts:23

    const raw = readFileSync(join(dir, 'test_cases.json'), 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #278f846f8b35e71c — Environment-variable access.

repo/evals/config.ts:206

        PHOENIX_BASE_URL: process.env.PHOENIX_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #448d127191591c3e — Environment-variable access.

repo/evals/config.ts:207

        PHOENIX_API_KEY: process.env.PHOENIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b864b9e95bd8cb1d — Environment-variable access.

repo/evals/config.ts:208

        OPENROUTER_API_KEY: process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #69adebd0cc91688e — Environment-variable access.

repo/evals/create_dataset.ts:96

            baseUrl: process.env.PHOENIX_BASE_URL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8e194985c9a7026a — Environment-variable access.

repo/evals/create_dataset.ts:97

            headers: { Authorization: `Bearer ${sanitizeEnvValue(process.env.PHOENIX_API_KEY)}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #fe9d3ff9a577c04c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/evals/create_dataset.ts:111 · flow /tmp/closeopen-2t6u9r1d/repo/evals/create_dataset.ts:97 → /tmp/closeopen-2t6u9r1d/repo/evals/create_dataset.ts:111

        log.info(`Dataset '${datasetName}' created with ID: ${datasetId}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs test-only Excluded from app score #dcc2b055279c9eca — Environment-variable access.

repo/evals/evaluation_utils.ts:44

    const apifyClient = new ApifyClient({ token: process.env.APIFY_API_TOKEN || '' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f23198fc83659f87 — Environment-variable access.

repo/evals/run_evaluation.ts:190

            baseUrl: process.env.PHOENIX_BASE_URL!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1adf586b8a9fc5ba — Environment-variable access.

repo/evals/run_evaluation.ts:191

            headers: { Authorization: `Bearer ${sanitizeEnvValue(process.env.PHOENIX_API_KEY)}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #58bdd6606242b2ce — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.

repo/evals/run_evaluation.ts:216 · flow /tmp/closeopen-2t6u9r1d/repo/evals/run_evaluation.ts:191 → /tmp/closeopen-2t6u9r1d/repo/evals/run_evaluation.ts:216

    log.info(`Loaded dataset "${datasetName}" with ID: ${datasetId}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

low env_fs test-only Excluded from app score #f50f9cdd70e2aad1 — Environment-variable access.

repo/evals/run_evaluation.ts:230

        const prNumber = process.env.GITHUB_PR_NUMBER || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d94e283d7bbfcd26 — Environment-variable access.

repo/evals/shared/config.ts:11

    baseURL: sanitizeEnvValue(process.env.OPENROUTER_BASE_URL) || 'https://openrouter.ai/api/v1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c6c211a56f273a14 — Environment-variable access.

repo/evals/shared/config.ts:12

    apiKey: sanitizeEnvValue(process.env.OPENROUTER_API_KEY) || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9ea7090e9772f40d — Environment-variable access.

repo/evals/shared/config.ts:21

        OPENROUTER_API_KEY: process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #75050d817b082836 — Environment-variable access.

repo/evals/shared/config.ts:68

        const raw = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3d1504c80c4bf5a6 — Environment-variable access.

repo/evals/shared/config.ts:72

            process.env[key] = sanitized;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #64479bb982f7ac2c — Filesystem access.

repo/evals/shared/test_case_loader.ts:31

    const fileContent = readFileSync(testCasesPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7656c198bfe91334 — Filesystem access.

repo/evals/workflows/results_writer.ts:60

        const fileContent = readFileSync(filePath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #21862b399aac8c80 — Filesystem access.

repo/evals/workflows/results_writer.ts:89

        writeFileSync(filePath, json, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #293dfc51fb230860 — Environment-variable access.

repo/evals/workflows/run_workflow_evals.ts:225

    const apifyToken = sanitizeEnvValue(process.env.APIFY_TOKEN);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #60a16d0e4b58285c — Environment-variable access.

repo/evals/workflows/run_workflow_evals.ts:226

    const openrouterKey = sanitizeEnvValue(process.env.OPENROUTER_API_KEY);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #529b94d79f15da27 — Filesystem access.

repo/evals/workflows/test_cases_loader.ts:101

    const fileContent = fs.readFileSync(testCasesPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #93518dd18146fb22 — Filesystem access.

repo/scripts/check-agents-links.mjs:36

    const body = readFileSync(doc, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #40e9db262a7196d1 — Environment-variable access.

repo/src/apify_client.ts:21

    if (process.env.APIFY_IS_AT_HOME) return 'https://api.apify.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8108ab0c0787680e — Environment-variable access.

repo/src/apify_client.ts:22

    return process.env.APIFY_API_BASE_URL || 'https://api.apify.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #891259488f5636ed — Environment-variable access.

repo/src/dev_server.ts:30

process.env.TELEMETRY_ENV ??= 'DEV';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c0b96de7eaa46efc — Environment-variable access.

repo/src/dev_server.ts:137

                    parseBooleanOrNull(process.env.TELEMETRY_ENABLED) ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6f33c0d578e4112 — Environment-variable access.

repo/src/dev_server.ts:141

                const serverMode = uiParam !== null ? parseServerMode(uiParam) : parseServerMode(process.env.UI_MODE);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #26ed4ca1b69cf7d7 — Environment-variable access.

repo/src/dev_server.ts:292

    const HOST = process.env.HOST ?? 'http://localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90d4b9964b835ecc — Environment-variable access.

repo/src/dev_server.ts:293

    const PORT = Number(process.env.PORT) || 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d5868567544ca89f — Environment-variable access.

repo/src/instrument.ts:19

    process.env.TELEMETRY_ENABLED === 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ab2e6591a634d892 — Environment-variable access.

repo/src/mcp/actors.ts:47

        process.env.HOSTNAME === 'mcp-securitybyobscurity.apify.com'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #f0f4ad14eb4c8c73 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/mcp/client.ts:93

                return fetch(input, { ...init, headers });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #fabf2f7cedca2503 — Environment-variable access.

repo/src/mcp/server.ts:266

            const envEnabled = parseBooleanOrNull(process.env.TELEMETRY_ENABLED);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87ba7e7d1d9d72d7 — Environment-variable access.

repo/src/mcp/server.ts:273

            telemetryEnv = getTelemetryEnv(this.options.telemetry?.env ?? process.env.TELEMETRY_ENV);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e63bdc5d9029f9ea — Environment-variable access.

repo/src/payments/const.ts:6

const SKYFIRE_SELLER_ID = process.env.SKYFIRE_SELLER_SERVICE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #c04f7fb4260bfb29 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/payments/x402.ts:136

            const response = await fetch(url, {
                method: 'GET',
                headers: { [PAYMENT_PROTOCOL_HEADER]: 'x402' },
                signal: controller.signal,
            });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #47992328e93ceb2a — Filesystem access.

repo/src/resources/resource_service.ts:125

                const widgetJs = readFileSync(widget.jsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #05db40a1a5e597e5 — Filesystem access.

repo/src/stdio.ts:77

        const content = readFileSync(authPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #fa819119222a3d8b — Environment-variable access.

repo/src/stdio.ts:141

            return parseServerMode((normalized as string) || process.env.UI_MODE);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62690faf1bc918fd — Environment-variable access.

repo/src/stdio.ts:174

const apifyToken = process.env.APIFY_TOKEN || getTokenFromAuthFile();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #884fae6da0a803a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

repo/src/tools/docs/fetch_apify_docs.ts:110

                const response = await fetch(mdUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #0623c1729f1454ad — Environment-variable access.

repo/src/utils/console_link.ts:8

    return process.env.HOSTNAME === STAGING_MCP_HOSTNAME ? CONSOLE_BASE_URL_STAGING : CONSOLE_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da89cf3abfafe136 — Filesystem access.

repo/src/utils/generic.ts:17

    return JSON.parse(readFileSync(jsonPath, 'utf-8')) as T;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): src/web

npm first-party

expand_more 1 low-confidence finding(s)

low env_fs production #ecec38d9975f8fbc — Filesystem access.

repo/src/web/build.js:26

            const cssContent = await fs.readFile(args.path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

@segment/analytics-node

npm dependency

medium telemetry dependency Excluded from app score #cecf39de30a02c45 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/analytics-node.ts:1

import { CoreAnalytics, bindAll, pTimeout } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #65bde3f064d66071 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/analytics-node.ts:306

    const segmentEvent = this._eventFactory.track(event, properties, {
      context,
      userId,
      anonymousId,
      timestamp,
      integrations,
      messageId,
    })

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f6ebcb46f85a15bc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/context.ts:3

import { CoreContext } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bd711ad4f72c5583 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/dispatch-emit.ts:1

import { dispatch } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1a531066f5e25d31 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/emitter.ts:1

import type { CoreEmitterContract } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2f3bf5599e2e7775 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/emitter.ts:2

import { Emitter } from '@segment/analytics-generic-utils'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a945975c3a52c9a6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/event-factory.ts:1

import { assertUserIdentity, CoreEventFactory } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #62b9b19af49c277b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/event-queue.ts:1

import { CoreEventQueue, PriorityQueue } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #7ed024a548f0404c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/settings.ts:1

import { ValidationError } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #408fc9d837cd547f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/types/params.ts:1

import type {
  GroupTraits,
  UserTraits,
  CoreExtraContext,
  EventProperties,
  IntegrationsOptions,
  Timestamp,
} from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #606cf80e0c4e2444 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/types/plugin.ts:1

import type { CorePlugin } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a1d8121fca63dd52 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/app/types/segment-event.ts:1

import type { CoreSegmentEvent } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e6831db1acf64bbf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/lib/abort.ts:4

import { Emitter } from '@segment/analytics-generic-utils'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #134e7b4604987e4f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/lib/token-manager.ts:4

import { backoff, sleep } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4f89003ac3590313 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/lib/token-manager.ts:5

import { Emitter } from '@segment/analytics-generic-utils'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #26e5f58806046ff0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/plugins/segmentio/publisher.ts:1

import { backoff } from '@segment/analytics-core'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ea0024ed87409e22 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/npm/@[email protected]/src/plugins/segmentio/publisher.ts:4

import { createDeferred } from '@segment/analytics-generic-utils'

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

@modelcontextprotocol/ext-apps

npm dependency

medium pii_flow tooling Excluded from app score unknown #3ca1b2f3ca1de734 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:489 · flow /tmp/closeopen-2t6u9r1d/pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:62 → /tmp/closeopen-2t6u9r1d/pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:489

    console.log(
      `[auth] refreshed access token (sid=${refreshClaims.sid}, ttl=${accessTtl}s)`,
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #93ec9a4f360032e0 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:566 · flow /tmp/closeopen-2t6u9r1d/pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:62 → /tmp/closeopen-2t6u9r1d/pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:566

  console.log(
    `[auth] exchanged code → token (client_id=${stored.client_id}, scope=${scope}, sid=${sid}, access_ttl=${accessTtl}s, refresh_ttl=${refreshTtl}s)`,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 187 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #77567e4b12e1be35 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-host/serve.ts:22

const HOST_PORT = parseInt(process.env.HOST_PORT || "8080", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #64d1c8b580c9bf9d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-host/serve.ts:23

const SANDBOX_PORT = parseInt(process.env.SANDBOX_PORT || "8081", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d92f5a6fb379ba1c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-host/serve.ts:25

const SERVERS: string[] = process.env.SERVERS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #60cc550a54253fe8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-host/serve.ts:26

  ? JSON.parse(process.env.SERVERS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f2e1e764e8e914cf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-host/vite.config.ts:5

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #132f0877717bbbf4 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-host/vite.config.ts:10

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #944fe3717ad922b8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-preact/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #507a14ce33a81ab3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-preact/server.ts:46

      const html = await fs.readFile(path.join(DIST_DIR, "mcp-app.html"), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4f7317120b0b31f0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-preact/vite.config.ts:5

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #59051485297d27c8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-preact/vite.config.ts:10

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #51ca009a1e134a01 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-react/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3bcf345674bed807 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-react/server.ts:47

      const html = await fs.readFile(path.join(DIST_DIR, "mcp-app.html"), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e3ecf2b532d530f7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-react/vite.config.ts:5

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2b5c70ee310ecc62 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-react/vite.config.ts:10

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fec1859e6656c2d9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-solid/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4b6be53b3ae52281 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-solid/server.ts:46

      const html = await fs.readFile(path.join(DIST_DIR, "mcp-app.html"), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1c0eac6370cbbe19 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-solid/vite.config.ts:5

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #55b4665be1331e02 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-solid/vite.config.ts:10

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5ff69feebdf5daba — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-svelte/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #187c0c50574324b0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-svelte/server.ts:46

      const html = await fs.readFile(path.join(DIST_DIR, "mcp-app.html"), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4bb899386387fada — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-svelte/vite.config.ts:5

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6e4528839f2b36f6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-svelte/vite.config.ts:10

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c22ca1cd87c1678e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-vanillajs/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #901e9b8545e777c5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-vanillajs/server.ts:53

      const html = await fs.readFile(path.join(DIST_DIR, "mcp-app.html"), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ada0817fd02352f6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-vanillajs/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e1ba1e1b56dd0b1f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-vanillajs/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3359141b7451ddb7 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-vue/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3c3ae63def67e214 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-vue/server.ts:46

      const html = await fs.readFile(path.join(DIST_DIR, "mcp-app.html"), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bd25590b009d448d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-vue/vite.config.ts:5

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #97c281e2d0cf71c9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/basic-server-vue/vite.config.ts:10

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a82a7ee527822105 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/budget-allocator-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9215475b5ef44a89 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/budget-allocator-server/server.ts:320

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7b6d974274f40c71 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/budget-allocator-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7753501ad24853bd — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/budget-allocator-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f1466851c7e9c3d2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/cohort-heatmap-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e3c6058b6c524d10 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/cohort-heatmap-server/server.ts:206

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8595b344c0536594 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/cohort-heatmap-server/vite.config.ts:5

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4eb2420b67b8158a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/cohort-heatmap-server/vite.config.ts:10

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a9553ea92e93cd6e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/customer-segmentation-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5da8be8a3ff71d3e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/customer-segmentation-server/server.ts:126

        const html = await fs.readFile(
          path.join(DIST_DIR, "mcp-app.html"),
          "utf-8",
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8ce2de88d7a49bce — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/customer-segmentation-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2d0e68349ebb6513 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/customer-segmentation-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #016d85af01c15fc3 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/debug-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0198544f7ff6e462 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/debug-server/server.ts:31

  return process.env.DEBUG_LOG_FILE ?? DEFAULT_LOG_FILE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1ee94479051deba6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/debug-server/server.ts:280

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7c3a58edce54b06a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/debug-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #aa8e7290f6b38263 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/debug-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #17f8f03b36f03c5b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/integration-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a0d23fd5316eb905 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/integration-server/server.ts:62

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d6a5c5568be1af2a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/integration-server/vite.config.ts:5

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f03a626ac1f5367a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/integration-server/vite.config.ts:10

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #443074873052c038 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:50

export const PORT = parseInt(process.env.PORT ?? "3097", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c07b3b7951044a9a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:52

  process.env.JWT_SECRET ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6a50c027d301a3bb — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:62

  process.env.ACCESS_TOKEN_TTL_SECONDS ?? "30",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8642d24885acfdac — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:66

  process.env.REFRESH_TOKEN_TTL_SECONDS ?? "300",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b93e5ee75b0cf0b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:75

const REACTIVE_AUTH_ONLY = process.env.REACTIVE_AUTH_ONLY === "1";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #daaa0c9533f3c031 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:100

  const envUrl = process.env.PUBLIC_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2353983d0b26d7ba — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:621

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #84872f07873d3647 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/server.ts:667

      const html = await fs.readFile(
        path.join(DIST_DIR, "secret-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7eebe543d4c7663f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c3bbb5b4eeef1e83 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/lazy-auth-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #40cb494a46a9fb39 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/map-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #9e129cb68434fd1b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/examples/map-server/server.ts:68

  const response = await fetch(
    `https://nominatim.openstreetmap.org/search?${params}`,
    {
      headers: {
        "User-Agent":
          "MCP-CesiumMap-Example/1.0 (https://github.com/modelcontextprotocol)",
      },
    },
  );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #25d4dbcec7eeccb5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/map-server/server.ts:124

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0443e8d1996ad5b8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/map-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ba06dc80d8ac11ed — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/map-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #6fe94a47d2b1e36d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/build-mcpb.mjs:30

const pkg = JSON.parse(readFileSync(path.join(here, "package.json"), "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e50cdb45cabaa105 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/build-mcpb.mjs:32

  readFileSync(path.join(here, "manifest.json"), "utf8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b7163a58b0fe480e — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/build-mcpb.mjs:42

writeFileSync(
  path.join(stage, "manifest.json"),
  JSON.stringify(manifest, null, 2),
);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #95a58a4d94302551 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/build-mcpb.mjs:46

writeFileSync(path.join(stage, "package.json"), JSON.stringify(pkg, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5bab007151427223 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/main.ts:35

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8e488429e89648fe — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:514

    const bytes = fs.readFileSync(
      path.join(__dirname, "../../tests/helpers/assets/fw9.pdf"),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #07ef782df3fa85c8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:546

    const prev = process.env.PDF_SERVER_ALLOW_LOOPBACK_HTTP;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #24fe0aab42b4a82a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:547

    process.env.PDF_SERVER_ALLOW_LOOPBACK_HTTP = "1";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #357cc05623641419 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:552

      if (prev === undefined) delete process.env.PDF_SERVER_ALLOW_LOOPBACK_HTTP;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3dbe75388bed1a8d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:553

      else process.env.PDF_SERVER_ALLOW_LOOPBACK_HTTP = prev;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #78c61c7c68e9d610 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:665

      fs.writeFileSync(testFile, "hello");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e9daaca32f07138c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:687

      fs.writeFileSync(testFile, "hello");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #690da1004b3c797d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:712

      fs.writeFileSync(testFile, "hello");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ad39a120f7d7585d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:935

    fs.writeFileSync(tmpFile, Buffer.from("%PDF-1.4\n%test\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7a03800449299cbe — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:956

    fs.writeFileSync(tmpFile, Buffer.from("%PDF-1.4\n%changed\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9aa1f2cfdfcc73f5 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:976

    fs.writeFileSync(tmpFile, Buffer.from("%PDF-1.4\n%a\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #17eb62103c339795 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:977

    fs.writeFileSync(tmpFile, Buffer.from("%PDF-1.4\n%b\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e01ba2ec55293586 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:978

    fs.writeFileSync(tmpFile, Buffer.from("%PDF-1.4\n%c\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #13bb31c6a437b784 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:997

    fs.writeFileSync(tmpFile, Buffer.from("%PDF-1.4\n%x\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #05399b83f933e9ea — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1045

    const original = fs.readFileSync(tmpFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a10e070e6a5e30f1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1057

    expect(fs.readFileSync(tmpFile)).toEqual(original);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1f6ba6e423cb48af — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1083

    expect(fs.readFileSync(tmpFile, "utf8")).toBe("%PDF-1.4\nvia-dir-root");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e08f4d8ba99b2e80 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1109

      fs.writeFileSync(tmpWrite, Buffer.from("%PDF-1.4\n%atomic\n"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bb5fb5c73e54958d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1362

      fs.writeFileSync(imgPath, png);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d5e80f7153f53b4f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1431

      fs.writeFileSync(source, "%PDF-1.4\noriginal");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #56ac5f53005e4f27 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1443

      expect(fs.readFileSync(source, "utf8")).toBe("%PDF-1.4\noriginal");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4e49b372718b011c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1453

      fs.writeFileSync(outside, "x");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8d26d2b48e835cf4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1479

      fs.writeFileSync(source, "%PDF-1.4\noriginal contents");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d02dc91991f6788d — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1501

      expect(fs.readFileSync(source, "utf8")).toBe("%PDF-1.4\nannotated");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #383ba87005686b50 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1544

      fs.writeFileSync(target, "old contents");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e12f0346e3a77c70 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1558

      expect(fs.readFileSync(target, "utf8")).toBe("old contents");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c430a371d01c1b9f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1597

      expect(fs.readFileSync(target, "utf8")).toBe(pdfBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #12937ebbf7f8c038 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1607

      fs.writeFileSync(target, "old contents");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8a94874553060afb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.test.ts:1631

      expect(fs.readFileSync(target, "utf8")).toBe("%PDF-1.4\nnew");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a011c0c724973e00 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.ts:648

      process.env.PDF_SERVER_ALLOW_LOOPBACK_HTTP &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #756c290423701446 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.ts:823

    let response = await fetch(normalized, {
      headers: {
        Range: `bytes=${offset}-${offset + clampedByteCount - 1}`,
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #e22dfe90dd9a01ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.ts:831

      response = await fetch(normalized);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #347d1c27bc731f4f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.ts:1859

          const resp = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #7523adee87ac952b — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.ts:1867

          imgBytes = await fs.promises.readFile(path.resolve(filePath));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e01bc4cb23c371eb — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.ts:2332

            await fs.promises.writeFile(resolved, bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #52244f3f601507f1 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.ts:2883

        await fs.promises.writeFile(resolved, bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #80dcd2195723207c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/server.ts:2913

      const html = (cachedAppHtml ??= await fs.promises.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      ));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c0de5da4f5a0fe45 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ae5ca520208efe4c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/pdf-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4c5f5790dc21fbac — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/quickstart/main.ts:17

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bef4f7a681e49745 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/quickstart/server.ts:49

      const html = await fs.readFile(path.join(DIST_DIR, "mcp-app.html"), "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b20b7daa17312e6f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/quickstart/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #351d46cc2f124188 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/quickstart/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8a7563251e894dda — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/run-all.ts:14

import { readdirSync, statSync, existsSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #121a3d9eceb3b74d — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/run-all.ts:21

const EXAMPLE_FILTER = process.env.EXAMPLE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e80c1bf5d8fb9e31 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/scenario-modeler-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a516f56bea95b863 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/scenario-modeler-server/server.ts:351

        const html = await fs.readFile(
          path.join(DIST_DIR, "mcp-app.html"),
          "utf-8",
        );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7cda7b0a6806f689 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/scenario-modeler-server/vite.config.ts:5

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #176754f074370181 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/scenario-modeler-server/vite.config.ts:10

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c2e837888023ccc9 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/shadertoy-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #befa1cc5e434f347 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/shadertoy-server/server.ts:144

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #307ad3938302a947 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/shadertoy-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1bad7f7ce7acce32 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/shadertoy-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cde1c75a0f6db118 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/sheet-music-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fcfa87c2c4cc7199 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/sheet-music-server/server.ts:91

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4e870910321ee41c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/sheet-music-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b2638dd3c025eaf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/sheet-music-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0d7d002674b42940 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/system-monitor-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9f53908f0fdb0d2c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/system-monitor-server/server.ts:178

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #534270acd29ad7e1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/system-monitor-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9285f01a934bb82c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/system-monitor-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b3a7dedd2c2c8870 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/threejs-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dc3b872800df0902 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/threejs-server/server.ts:211

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b5dff289d6813b5b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/threejs-server/vite.config.ts:5

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #86a513208915f26b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/threejs-server/vite.config.ts:10

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #76668e6d07346559 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/transcript-server/main.ts:21

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5aeb538ce53a42b2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/transcript-server/server.ts:61

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #44030f427ddce539 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/transcript-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #098b017071f77063 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/transcript-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5c6652532afc8f0b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/video-resource-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #c6a0e64e19119658 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/examples/video-resource-server/server.ts:98

      const response = await fetch(video.url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #6495ec872462e546 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/video-resource-server/server.ts:175

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #29b86113cd230f89 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/video-resource-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0a0da4666071a64c — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/video-resource-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a400fe1c193dd5ab — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/wiki-explorer-server/main.ts:23

  const port = parseInt(process.env.PORT ?? "3001", 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #8c0478d12e36ea01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/examples/wiki-explorer-server/server.ts:122

        const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #5c63af512aeaef17 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/examples/wiki-explorer-server/server.ts:157

      const html = await fs.readFile(
        path.join(DIST_DIR, "mcp-app.html"),
        "utf-8",
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #608f08b85ed011b1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/wiki-explorer-server/vite.config.ts:4

const INPUT = process.env.INPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #27e100e31fe18886 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/examples/wiki-explorer-server/vite.config.ts:9

const isDevelopment = process.env.NODE_ENV === "development";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e20675e3a39fdb2b — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/playwright.config.ts:9

  testIgnore: process.env.GENERATE_SCREENSHOTS

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d8160d7259cd05ea — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/playwright.config.ts:13

  forbidOnly: !!process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #242aebbb291b6067 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/playwright.config.ts:14

  retries: process.env.CI ? 2 : 0,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2e5af2cd8e4e9c66 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/playwright.config.ts:15

  workers: process.env.CI ? 2 : 16, // Parallel execution now works with factory pattern

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #94777d72f3a6beaf — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/playwright.config.ts:17

  reporter: process.env.CI ? "list" : "html",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f13c4abaec8c89e2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/playwright.config.ts:33

        ...(process.env.PW_CHANNEL ? { channel: process.env.PW_CHANNEL } : {}),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #42dbb6e492b3f51f — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/playwright.config.ts:49

      EXAMPLE: process.env.EXAMPLE ?? "",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f2d89a9fdbcd746f — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/bump-version.mjs:32

const pkgName = JSON.parse(readFileSync("package.json", "utf-8")).name;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #abdab47977f9a0f8 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/check-versions.mjs:9

import { readFileSync, readdirSync, statSync, existsSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #49603ab2c048a050 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/check-versions.mjs:12

const rootPkg = JSON.parse(readFileSync("package.json", "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b4a89be46aa96bd0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/check-versions.mjs:59

  const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d480ce41c54ec359 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-schemas.ts:88

  const sourceText = readFileSync(SPEC_TYPES_FILE, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ff7a6b2036a31bc4 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-schemas.ts:113

  writeFileSync(SCHEMA_OUTPUT_FILE, schemasContent, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #af0fc42ace0f1390 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-schemas.ts:122

    writeFileSync(SCHEMA_TEST_OUTPUT_FILE, processedTests, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #df7ce00896d845a6 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/generate-schemas.ts:175

  writeFileSync(
    JSON_SCHEMA_OUTPUT_FILE,
    JSON.stringify(jsonSchema, null, 2) + "\n",
    "utf-8",
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9586f75be1517f9c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/link-self.mjs:8

import { cpSync, existsSync, lstatSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0d804a0d104f1f20 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/run-bun.mjs:8

import { existsSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7572368c4d81d639 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/sync-snippets.ts:317

      fileContent = readFileSync(absoluteExamplePath, "utf-8").trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #5e9c0cd37aef75a2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/sync-snippets.ts:377

    content = readFileSync(filePath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dd705dedb4bfcade — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/sync-snippets.ts:431

    writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #085cf4a8169175cd — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/typedoc-plugin-seo.mjs:245

      let sitemap = fs.readFileSync(sitemapPath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9180be17c2697e32 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/typedoc-plugin-seo.mjs:249

      fs.writeFileSync(sitemapPath, sitemap);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0a161ecfd455d196 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/typedoc-plugin-seo.mjs:264

  let content = fs.readFileSync(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #1032370819e6609a — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/typedoc-plugin-seo.mjs:288

  fs.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d1fac2c30bd7eba2 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/typedoc-plugin-seo.mjs:302

      let content = fs.readFileSync(fullPath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8b09ebc02c1a5ae0 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/typedoc-plugin-seo.mjs:311

        fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #500c6c9b15a6d130 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/app-bridge.examples.ts:224

    return mcpClient.request(
      { method: "tools/call", params },
      CallToolResultSchema,
      { signal: extra.signal },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #9f7bc14457045a43 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/app-bridge.examples.ts:262

    return mcpClient.request(
      { method: "resources/list", params },
      ListResourcesResultSchema,
      { signal: extra.signal },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #8c90dc7e829db36e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/app-bridge.examples.ts:280

    return mcpClient.request(
      { method: "resources/read", params },
      ReadResourceResultSchema,
      { signal: extra.signal },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #c2de0fc2364f8291 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/app-bridge.examples.ts:298

    return mcpClient.request(
      { method: "prompts/list", params },
      ListPromptsResultSchema,
      { signal: extra.signal },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #07ffb511e82333ff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/app-bridge.examples.ts:447

  const result = await mcpClient.request(
    { method: "tools/call", params: { name: "get_weather", arguments: args } },
    CallToolResultSchema,
  );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #57a5c6377b56cff9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/app-bridge.ts:1863

          return this._client!.request(
            { method: "tools/call", params },
            CallToolResultSchema,
            { signal: extra.signal },
          );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #075963f16385787d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/app-bridge.ts:1878

          return this._client!.request(
            { method: "resources/list", params },
            ListResourcesResultSchema,
            { signal: extra.signal },
          );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #90b12811e22f5642 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/app-bridge.ts:1885

          return this._client!.request(
            { method: "resources/templates/list", params },
            ListResourceTemplatesResultSchema,
            { signal: extra.signal },
          );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #42f948d4003cec23 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/app-bridge.ts:1892

          return this._client!.request(
            { method: "resources/read", params },
            ReadResourceResultSchema,
            { signal: extra.signal },
          );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #3228a04bfafa5190 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/app-bridge.ts:1907

          return this._client!.request(
            { method: "prompts/list", params },
            ListPromptsResultSchema,
            { signal: extra.signal },
          );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #a45b414312e2ddb3 — Filesystem access.

pkgs/npm/@[email protected]__reposrc/src/server/index.examples.ts:158

          text: await fs.readFile("dist/view.html", "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

axios

npm dependency

medium pii_flow dependency Excluded from app score #70c6470ac887d094 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.

pkgs/npm/[email protected]/lib/adapters/http.js:1062 · flow /tmp/closeopen-2t6u9r1d/pkgs/npm/[email protected]/lib/adapters/http.js:861 → /tmp/closeopen-2t6u9r1d/pkgs/npm/[email protected]/lib/adapters/http.js:1062

      req = transport.request(options, function handleResponse(res) {
        clearConnectPhaseTimer();

        if (req.destroyed) return;

        const streams = [res];

        const responseLength = utils.toFiniteNumber(res.headers['content-length']);

        if (onDownloadProgress || maxDownloadRate) {
          const transformStream = new AxiosTransformStream({
            maxRate: utils.toFiniteNumber(maxDownloadRate),
          });

          onDownloadProgress &&
            transformStream.on(
              'progress',
              flushOnFinish(
                transformStream,
                progressEventDecorator(
                  responseLength,
                  progressEventReducer(asyncDecorator(onDownloadProgress), true, 3)
                )
              )
            );

          streams.push(transformStream);
        }

        // decompress the response body transparently if required
        let responseStream = res;

        // return the last request in case of redirects
        const lastRequest = res.req || req;

        // if decompress disabled we should not decompress
        if (decompress !== false && res.headers['content-encoding']) {
          // if no content, but headers still say that it is encoded,
          // remove the header not confuse downstream operations
          if (method === 'HEAD' || res.statusCode === 204) {
            delete res.headers['content-encoding'];
          }

          switch ((res.headers['content-encoding'] || '').toLowerCase()) {
            /*eslint default-case:0*/
            case 'gzip':
            case 'x-gzip':
            case 'compress':
            case 'x-compress':
              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'deflate':
              streams.push(new ZlibHeaderTransformStream());

              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'br':
              if (isBrotliSupported) {
                streams.push(zlib.createBrotliDecompress(brotliOptions));
                delete res.headers['content-encoding'];
              }
              break;
            case 'zstd':
              if (isZstdSupported) {
                streams.push(zlib.createZstdDecompress(zstdOptions));
                delete res.headers['content-encoding'];
              }
              break;
          }
        }

        responseStream = streams.length > 1 ? stream.pipeline(streams, utils.noop) : streams[0];

        const response = {
          status: res.statusCode,
          statusText: res.statusMessage,
          headers: new AxiosHeaders(res.headers),
          config,
          request: lastRequest,
        };

        if (responseType === 'stream') {
          // Enforce maxContentLength on streamed responses; previously this
          // was applied only to buffered responses.
          if (maxContentLength > -1) {
            const limit = maxContentLength;
            const source = responseStream;
            async function* enforceMaxContentLength() {
              let totalResponseBytes = 0;
              for await (const chunk of source) {
                totalResponseBytes += chunk.length;
                if (totalResponseBytes > limit) {
                  throw new AxiosError(
                    'maxContentLength size of ' + limit + ' exceeded',
                    AxiosError.ERR_BAD_RESPONSE,
                    config,
                    lastRequest
                  );
                }
                yield chunk;
              }
            }
            responseStream = stream.Readable.from(enforceMaxContentLength(), {
              objectMode: false,
            });
          }
          response.data = responseStream;
          settle(resolve, reject, response);
        } else {
          const responseBuffer = [];
          let totalResponseBytes = 0;

          responseStream.on('data', function handleStreamData(chunk) {
            responseBuffer.push(chunk);
            totalResponseBytes += chunk.length;

            // make sure the content length is not over the maxContentLength if specified
            if (maxContentLength > -1 && totalResponseBytes > maxContentLength) {
              // stream.destroy() emit aborted event before calling reject() on Node.js v16
              rejected = true;
              responseStream.destroy();
              abort(
                new AxiosError(
                  'maxContentLength size of ' + maxContentLength + ' exceeded',
                  AxiosError.ERR_BAD_RESPONSE,
                  config,
                  lastRequest
                )
              );
            }
          });

          responseStream.on('aborted', function handlerStreamAborted() {
            if (rejected) {
              return;
            }

            const err = new AxiosError(
              'stream has been aborted',
              AxiosError.ERR_BAD_RESPONSE,
              config,
              lastRequest,
              response
            );
            responseStream.destroy(err);
            reject(err);
          });

          responseStream.on('error', function handleStreamError(err) {
            if (rejected) return;
            reject(AxiosError.from(err, null, config, lastRequest, response));
          });

          responseStream.on('end', function handleStreamEnd() {
            try {
              let responseData =
                responseBuffer.length === 1 ? responseBuffer[0] : Buffer.concat(responseBuffer);
              if (responseType !== 'arraybuffer') {
                responseData = responseData.toString(responseEncoding);
                if (!responseEncoding || responseEncoding === 'utf8') {
                  responseData = utils.stripBOM(responseData);
                }
              }
              response.data = responseData;
            } catch (err) {
              return reject(AxiosError.from(err, null, config, response.request, response));
            }
            settle(resolve, reject, response);
          });
        }

        abortEmitter.once('abort', (err) => {
          if (!responseStream.destroyed) {
            responseStream.emit('error', err);
            responseStream.destroy();
          }
        });
      });

A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.

expand_more 3 low-confidence finding(s)

low egress dependency Excluded from app score #9c738546e9772cee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/adapters/http.js:494

    const req = session.request(http2Headers);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e4325ea9cd9feb94 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]/lib/adapters/http.js:1062

      req = transport.request(options, function handleResponse(res) {
        clearConnectPhaseTimer();

        if (req.destroyed) return;

        const streams = [res];

        const responseLength = utils.toFiniteNumber(res.headers['content-length']);

        if (onDownloadProgress || maxDownloadRate) {
          const transformStream = new AxiosTransformStream({
            maxRate: utils.toFiniteNumber(maxDownloadRate),
          });

          onDownloadProgress &&
            transformStream.on(
              'progress',
              flushOnFinish(
                transformStream,
                progressEventDecorator(
                  responseLength,
                  progressEventReducer(asyncDecorator(onDownloadProgress), true, 3)
                )
              )
            );

          streams.push(transformStream);
        }

        // decompress the response body transparently if required
        let responseStream = res;

        // return the last request in case of redirects
        const lastRequest = res.req || req;

        // if decompress disabled we should not decompress
        if (decompress !== false && res.headers['content-encoding']) {
          // if no content, but headers still say that it is encoded,
          // remove the header not confuse downstream operations
          if (method === 'HEAD' || res.statusCode === 204) {
            delete res.headers['content-encoding'];
          }

          switch ((res.headers['content-encoding'] || '').toLowerCase()) {
            /*eslint default-case:0*/
            case 'gzip':
            case 'x-gzip':
            case 'compress':
            case 'x-compress':
              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'deflate':
              streams.push(new ZlibHeaderTransformStream());

              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'br':
              if (isBrotliSupported) {
                streams.push(zlib.createBrotliDecompress(brotliOptions));
                delete res.headers['content-encoding'];
              }
              break;
            case 'zstd':
              if (isZstdSupported) {
                streams.push(zlib.createZstdDecompress(zstdOptions));
                delete res.headers['content-encoding'];
              }
              break;
          }
        }

        responseStream = streams.length > 1 ? stream.pipeline(streams, utils.noop) : streams[0];

        const response = {
          status: res.statusCode,
          statusText: res.statusMessage,
          headers: new AxiosHeaders(res.headers),
          config,
          request: lastRequest,
        };

        if (responseType === 'stream') {
          // Enforce maxContentLength on streamed responses; previously this
          // was applied only to buffered responses.
          if (maxContentLength > -1) {
            const limit = maxContentLength;
            const source = responseStream;
            async function* enforceMaxContentLength() {
              let totalResponseBytes = 0;
              for await (const chunk of source) {
                totalResponseBytes += chunk.length;
                if (totalResponseBytes > limit) {
                  throw new AxiosError(
                    'maxContentLength size of ' + limit + ' exceeded',
                    AxiosError.ERR_BAD_RESPONSE,
                    config,
                    lastRequest
                  );
                }
                yield chunk;
              }
            }
            responseStream = stream.Readable.from(enforceMaxContentLength(), {
              objectMode: false,
            });
          }
          response.data = responseStream;
          settle(resolve, reject, response);
        } else {
          const responseBuffer = [];
          let totalResponseBytes = 0;

          responseStream.on('data', function handleStreamData(chunk) {
            responseBuffer.push(chunk);
            totalResponseBytes += chunk.length;

            // make sure the content length is not over the maxContentLength if specified
            if (maxContentLength > -1 && totalResponseBytes > maxContentLength) {
              // stream.destroy() emit aborted event before calling reject() on Node.js v16
              rejected = true;
              responseStream.destroy();
              abort(
                new AxiosError(
                  'maxContentLength size of ' + maxContentLength + ' exceeded',
                  AxiosError.ERR_BAD_RESPONSE,
                  config,
                  lastRequest
                )
              );
            }
          });

          responseStream.on('aborted', function handlerStreamAborted() {
            if (rejected) {
              return;
            }

            const err = new AxiosError(
              'stream has been aborted',
              AxiosError.ERR_BAD_RESPONSE,
              config,
              lastRequest,
              response
            );
            responseStream.destroy(err);
            reject(err);
          });

          responseStream.on('error', function handleStreamError(err) {
            if (rejected) return;
            reject(AxiosError.from(err, null, config, lastRequest, response));
          });

          responseStream.on('end', function handleStreamEnd() {
            try {
              let responseData =
                responseBuffer.length === 1 ? responseBuffer[0] : Buffer.concat(responseBuffer);
              if (responseType !== 'arraybuffer') {
                responseData = responseData.toString(responseEncoding);
                if (!responseEncoding || responseEncoding === 'utf8') {
                  responseData = utils.stripBOM(responseData);
                }
              }
              response.data = responseData;
            } catch (err) {
              return reject(AxiosError.from(err, null, config, response.request, response));
            }
            settle(resolve, reject, response);
          });
        }

        abortEmitter.once('abort', (err) => {
          if (!responseStream.destroyed) {
            responseStream.emit('error', err);
            responseStream.destroy();
          }
        });
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #f50ba3e2dfc37717 — Environment-variable access.

pkgs/npm/[email protected]/lib/helpers/shouldBypassProxy.js:168

  const noProxy = (process.env.no_proxy || process.env.NO_PROXY || '').toLowerCase();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@apify/log

npm dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #a5e83267ba4c05bc — Environment-variable access.

pkgs/npm/@[email protected]/cjs/index.cjs:133

  const envVar = process.env[import_consts.APIFY_ENV_VARS.LOG_LEVEL];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a65db715a6ac1e9 — Environment-variable access.

pkgs/npm/@[email protected]/cjs/index.cjs:141

  const envVar = process.env[import_consts.APIFY_ENV_VARS.LOG_FORMAT] || "TEXT" /* TEXT */;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76b62feb63572b0d — Environment-variable access.

pkgs/npm/@[email protected]/esm/index.mjs:77

  const envVar = process.env[APIFY_ENV_VARS.LOG_LEVEL];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43f3de3ebb11d32b — Environment-variable access.

pkgs/npm/@[email protected]/esm/index.mjs:85

  const envVar = process.env[APIFY_ENV_VARS.LOG_FORMAT] || "TEXT" /* TEXT */;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@apify/ui-icons

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #333eb496db8e8667 — Filesystem access.

pkgs/npm/@[email protected]/scripts/create-barrel-file.mjs:8

    fs.writeFileSync(`${directory}/${file}`, 'export {};\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #46d1f0c9289ec3e0 — Filesystem access.

pkgs/npm/@[email protected]/scripts/validate-assets.mjs:13

    const content = fs.readFileSync(path.join(ASSETS_DIR, file), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@apify/ui-library

npm dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #ca194e3545028e54 — Filesystem access.

pkgs/npm/@[email protected]/src/codemods/generate_typograpy_tokens_files.mjs:8

const code = readFileSync('./src/design_system/supernova_typography_tokens.json', 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90ea166621e0cf1a — Filesystem access.

pkgs/npm/@[email protected]/src/codemods/generate_typograpy_tokens_files.mjs:132

writeFileSync('./src/design_system/typography_theme.ts', printedCode);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@apify/utilities

npm dependency

expand_more 2 low-confidence finding(s)

low egress dependency Excluded from app score #5ff1783c604f3d18 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/cjs/index.cjs:1834

    const given = await client.get(key);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #a683e4700f22d0b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]/esm/index.mjs:1747

    const given = await client.get(key);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@modelcontextprotocol/sdk

npm dependency

expand_more 38 low-confidence finding(s)

low egress tooling Excluded from app score unknown #41cb3587eb4faf98 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/scripts/cli.ts:54

    await client.request({ method: 'resources/list' }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3a09eb73b280b87c — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:16

    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #493df8540804f3bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:32

    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #eee33158cb6aeb8c — Filesystem access.

pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:77

        writeFileSync(outputPath, fullContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d352dc2ba3cbd7f8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/client/stdio.ts:71

        const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #5a46678562f3c3d7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/elicitationUrlExample.ts:632

        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ce9c9af11313ad0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/elicitationUrlExample.ts:663

        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ba0c32795a320ea3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/multipleClientsParallel.ts:64

        const result = await client.request(toolRequest, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #acfe2bc83bb6801c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:95

        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #493e3fc1a27604c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:167

            return client
                .request(request, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #a7229d8383c5e2c8 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:26

const DEFAULT_SERVER_URL = process.env.MCP_SERVER_URL || 'http://localhost:3000/mcp';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f9c128b42e6cb983 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:29

    const clientId = process.env.MCP_CLIENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c28227a0e73ba095 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:36

    const privateKeyPem = process.env.MCP_CLIENT_PRIVATE_KEY_PEM;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #45371106b8bf3f91 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:38

        const algorithm = process.env.MCP_CLIENT_ALGORITHM || 'RS256';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #54dfdcca2a74d6f1 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:48

    const clientSecret = process.env.MCP_CLIENT_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #6494ffcbe93d0740 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:232

            const result = await this.client.request(request, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3ebab4d37a01dc7a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:290

            const result = await this.client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #ec36198f63d8386e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:510

                const resourcesResult = await client.request(
                    {
                        method: 'resources/list',
                        params: {}
                    },
                    ListResourcesResultSchema
                );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #55f908cf9f9ac4ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:601

        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #f2c513dc26f0a202 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:632

        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d2695c33abf157d7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:719

        const result = await client.request(request, CallToolResultSchema, {
            resumptionToken: notificationsToolLastEventId,
            onresumptiontoken: onLastEventIdUpdate
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #85b7773c5215f064 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:748

        const promptsResult = await client.request(promptsRequest, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #9c213c27971009db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:777

        const promptResult = await client.request(promptRequest, GetPromptResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #08794c4e0a46b21c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:798

        const resourcesResult = await client.request(resourcesRequest, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d54440054c4b17eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:826

        const result = await client.request(request, ReadResourceResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #1fef5d07ef82daa9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/ssePollingClient.ts:75

        const result = await client.request(
            {
                method: 'tools/call',
                params: {
                    name: 'long-task',
                    arguments: {}
                }
            },
            CallToolResultSchema,
            {
                // Track resumption tokens for debugging
                onresumptiontoken: token => {
                    lastEventId = token;
                    console.log(`[Event ID] ${token}`);
                }
            }
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b9ed3ad81b5d3593 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:139

        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #04e5f8bc0a7c235f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:172

        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #b4a63248f8b80904 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationFormExample.ts:350

    const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #420a15e1c8877320 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:215

const MCP_PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ca6a9e8e2777360a — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:216

const AUTH_PORT = process.env.MCP_AUTH_PORT ? parseInt(process.env.MCP_AUTH_PORT, 10) : 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #c7bcde76f34c8849 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:245

        const response = await fetch(endpoint, {
            method: 'POST',
            headers: {
                'Content-Type': 'application/x-www-form-urlencoded'
            },
            body: new URLSearchParams({
                token: token
            }).toString()
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #e2f3e0fd4a8a84fc — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/honoWebStandardStreamableHttp.ts:69

const PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f90ce8581849dec2 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:621

const MCP_PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #33a622d4c2cf481e — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:622

const AUTH_PORT = process.env.MCP_AUTH_PORT ? parseInt(process.env.MCP_AUTH_PORT, 10) : 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #00ea969019eb9ba3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:643

            const response = await fetch(endpoint, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded'
                },
                body: new URLSearchParams({
                    token: token
                }).toString()
            });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #8d464c1107f741f6 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleTaskInteractive.ts:448

const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 8000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2302b520df59c8c0 — Environment-variable access.

pkgs/npm/@[email protected]__reposrc/src/server/auth/router.ts:12

    process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL === 'true' || process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

apify-client

npm dependency

expand_more 8 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #2d08c80daf1ebbcb — Filesystem access.

pkgs/npm/[email protected]__reposrc/.github/scripts/before-beta-release.js:18

fs.writeFileSync(PKG_JSON_PATH, `${JSON.stringify(pkgJson, null, 2)}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37f9cdf04f6d8d4c — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/apify_client.ts:554

        const runId = process.env[ACTOR_ENV_VARS.RUN_ID];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0de9670397935d05 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/http_client.ts:56

        this.workflowKey = options.workflowKey || process.env[APIFY_ENV_VARS.WORKFLOW_KEY];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcb80f06431614f2 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/src/http_client.ts:161

        const isAtHome = !!process.env[APIFY_ENV_VARS.IS_AT_HOME];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #85eeaca8894a0498 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.

pkgs/npm/[email protected]__reposrc/src/http_client.ts:217

                response = await this.axios.request(config);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #c1a6ef4c2e394ced — Environment-variable access.

pkgs/npm/[email protected]__reposrc/website/docusaurus.config.js:113

                writeKey: process.env.SEGMENT_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5702532ee007e2e7 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/website/src/plugins/docusaurus-plugin-segment/index.js:14

            if (process.env.NODE_ENV !== 'production' && !allowedInDev) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51c3915996fb3e98 — Environment-variable access.

pkgs/npm/[email protected]__reposrc/website/src/plugins/docusaurus-plugin-segment/segment.js:37

                  if (process.env.NODE_ENV === 'production' && window.analytics) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

dotenv

npm dependency

expand_more 18 low-confidence finding(s)

low env_fs dependency Excluded from app score #4bb1aee5964873dd — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:4

if (process.env.DOTENV_CONFIG_ENCODING != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d90f8b74cb96fd0 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:5

  options.encoding = process.env.DOTENV_CONFIG_ENCODING

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ec2f604d79113e4 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:8

if (process.env.DOTENV_CONFIG_PATH != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9cbbd7755a7a4f6c — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:9

  options.path = process.env.DOTENV_CONFIG_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2fa491c96408caa — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:12

if (process.env.DOTENV_CONFIG_QUIET != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d86700dcdbe99387 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:13

  options.quiet = process.env.DOTENV_CONFIG_QUIET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc8d56768b38774a — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:16

if (process.env.DOTENV_CONFIG_DEBUG != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae321f75cadafc38 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:17

  options.debug = process.env.DOTENV_CONFIG_DEBUG

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19b5ce477b8907df — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:20

if (process.env.DOTENV_CONFIG_OVERRIDE != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f198f2446534f3e2 — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:21

  options.override = process.env.DOTENV_CONFIG_OVERRIDE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #043324701163cb2c — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:24

if (process.env.DOTENV_CONFIG_DOTENV_KEY != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eebbdda76b08cc2c — Environment-variable access.

pkgs/npm/[email protected]/lib/env-options.js:25

  options.DOTENV_KEY = process.env.DOTENV_CONFIG_DOTENV_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f960b09c20cdad4b — Filesystem access.

pkgs/npm/[email protected]/lib/main.js:1

const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdaa0f9d6b679539 — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:141

  if (process.env.DOTENV_KEY && process.env.DOTENV_KEY.length > 0) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12e7ffbd239b697c — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:142

    return process.env.DOTENV_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #368f32c72efcec42 — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:221

  const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || (options && options.debug))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27424f9bbd38278e — Environment-variable access.

pkgs/npm/[email protected]/lib/main.js:222

  const quiet = parseBoolean(process.env.DOTENV_CONFIG_QUIET || (options && options.quiet))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6cfd6d927773ece5 — Filesystem access.

pkgs/npm/[email protected]/lib/main.js:277

      const parsed = DotenvModule.parse(fs.readFileSync(path, { encoding }))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

express

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #6f254faa1eeff984 — Environment-variable access.

pkgs/npm/[email protected]/lib/application.js:91

  var env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

react

npm dependency

expand_more 14 low-confidence finding(s)

low env_fs dependency Excluded from app score #0669448c0ebdfcc5 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-compiler-runtime.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b12a0c543c37270e — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-jsx-dev-runtime.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7e215990de5e111 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-jsx-dev-runtime.react-server.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a3d391734af0e42 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-jsx-runtime.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0cbf9f25d6f454c — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-jsx-runtime.react-server.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f759f54ba6cd077 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d3398f94be6a792 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react.react-server.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2120e41c4584d14 — Environment-variable access.

pkgs/npm/[email protected]/compiler-runtime.js:10

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d96e30c87c5bdf1a — Environment-variable access.

pkgs/npm/[email protected]/index.js:3

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2b0c37890cc7c9e — Environment-variable access.

pkgs/npm/[email protected]/jsx-dev-runtime.js:3

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49cb80900e03d8eb — Environment-variable access.

pkgs/npm/[email protected]/jsx-dev-runtime.react-server.js:3

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d96be606bb1feacc — Environment-variable access.

pkgs/npm/[email protected]/jsx-runtime.js:3

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2f5a2ae39199b03 — Environment-variable access.

pkgs/npm/[email protected]/jsx-runtime.react-server.js:3

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8ae9eb3620d8511 — Environment-variable access.

pkgs/npm/[email protected]/react.react-server.js:3

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

react-dom

npm dependency

expand_more 25 low-confidence finding(s)

low env_fs dependency Excluded from app score #ee8c426968fafca9 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-dom-client.development.js:15

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c24bd26cc135c972 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-dom-profiling.development.js:15

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de22f2566de6371c — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-dom-server-legacy.browser.development.js:36

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22d50014cb28c922 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-dom-server-legacy.node.development.js:36

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc4bdbfcb719ac82 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-dom-server.browser.development.js:36

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ca93e66673ad5c5 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-dom-server.edge.development.js:36

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #690035cb4ceca169 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-dom-server.node.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b75298788962d88d — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-dom-test-utils.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d831e2d3c40a519 — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-dom.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10876faf119bf94c — Environment-variable access.

pkgs/npm/[email protected]/cjs/react-dom.react-server.development.js:12

"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9d637a1dbb2b6b5 — Environment-variable access.

pkgs/npm/[email protected]/client.js:11

  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a13c2cfdf39e8e55 — Environment-variable access.

pkgs/npm/[email protected]/client.js:31

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89fd0d94f3952cf7 — Environment-variable access.

pkgs/npm/[email protected]/index.js:11

  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af65ae7aba5fe102 — Environment-variable access.

pkgs/npm/[email protected]/index.js:31

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74bab97ae3391468 — Environment-variable access.

pkgs/npm/[email protected]/profiling.js:11

  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9126f7deb40a1119 — Environment-variable access.

pkgs/npm/[email protected]/profiling.js:31

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01615228eaf47ecf — Environment-variable access.

pkgs/npm/[email protected]/react-dom.react-server.js:3

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5f183f78550ee38 — Environment-variable access.

pkgs/npm/[email protected]/server.browser.js:4

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e948c7cac1d6338 — Environment-variable access.

pkgs/npm/[email protected]/server.bun.js:5

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc465e20602a37e2 — Environment-variable access.

pkgs/npm/[email protected]/server.edge.js:5

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06e5446c0f9728ea — Environment-variable access.

pkgs/npm/[email protected]/server.node.js:4

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4c31288a153e5d7 — Environment-variable access.

pkgs/npm/[email protected]/static.browser.js:4

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcfeb8d485aa9e9d — Environment-variable access.

pkgs/npm/[email protected]/static.edge.js:4

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aba9f877b7553a52 — Environment-variable access.

pkgs/npm/[email protected]/static.node.js:4

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ceaa65d2200e30b6 — Environment-variable access.

pkgs/npm/[email protected]/test-utils.js:3

if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

yargs

npm dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #9ee95f95d81d085b — Environment-variable access.

pkgs/npm/[email protected]/lib/platform-shims/esm.mjs:29

    return process.env[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

verified_user No application data leak found

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Application data flows

</> First-Party Code

first-party (npm)

first-party (npm): src/web

</> Dependencies

@segment/analytics-node

@modelcontextprotocol/ext-apps

axios

@apify/log

@apify/ui-icons

@apify/ui-library

@apify/utilities

@modelcontextprotocol/sdk

apify-client

dotenv

express

react

react-dom

yargs