Close Open Privacy Scan

link https://github.com/tensorflow/tensorflow
bolt Snapshot: commit 5ce258b
science engine v1.5
schedule 2026-07-16T05:06:25.573736+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

Incomplete scan — only 0/9 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

97 /100
Low privacy risk

Low risk · 3 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 3 low
First-party packages: 2
Dependency packages: 0
Ecosystem: java

swap_horiz Application data flows

No high- or medium-confidence application data-flow findings in this scan.

</> First-Party Code

first-party (java): tensorflow/lite/java/demo/app

java first-party
expand_more 1 low-confidence finding(s)
low env_fs test-only #badf8731fe86e6d7 — Filesystem access.
repo/tensorflow/lite/java/demo/app/src/main/java/com/example/android/tflitecamerademo/ImageClassifier.java:230 
    FileInputStream inputStream = new FileInputStream(fileDescriptor.getFileDescriptor());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (java): tensorflow/lite/java/ovic/demo/app

java first-party
expand_more 2 low-confidence finding(s)
low env_fs test-only #4ace342b90f53d68 — Filesystem access.
repo/tensorflow/lite/java/ovic/demo/app/OvicBenchmarkerActivity.java:103 
    FileInputStream modelInputStream = new FileInputStream(fileDescriptor.getFileDescriptor());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c0239fadc8522a21 — Filesystem access.
repo/tensorflow/lite/java/ovic/demo/app/OvicBenchmarkerActivity.java:257 
      bufReader = new BufferedReader(new FileReader(file));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • com.android.support:appcompat-v7 prod — no sources jar (404)
  • com.android.support.constraint:constraint-layout prod — no sources jar (404)
  • com.android.support:design prod — no sources jar (404)
  • com.android.support:support-annotations prod — no sources jar (404)
  • com.android.support:support-v13 prod — no sources jar (404)
  • org.tensorflow:tensorflow-lite prod — no sources jar (404)
  • org.tensorflow:tensorflow-lite-gpu prod — no sources jar (404)
  • org.tensorflow:tensorflow-lite-local prod — no sources jar (404)
  • org.tensorflow:tensorflow-android prod — no sources jar (404)