Close Open Privacy Scan
App Privacy Score
Low risk · 2515 finding(s)
Based on: 2 first-party package(s) · 27/31 deps analyzed
Dependency score: 47 (High risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz Application data flows
External domains:
aclanthology.orgaggregate.ee.engr.uky.eduanalyticphysics.comapi-inference.huggingface.coapi.github.comapi.gradio.appapi.ipify.orgapi.nuget.orgapp.neptune.aiapp.sigopt.comarstechnica.comarxiv.orgblog.eleuther.aiblog.famzah.netblogs.mathworks.combootlin.combugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcc0textures.comcdn-datasets.huggingface.cocdn-media.huggingface.cocdn.huggingface.cocdn.jsdelivr.netcdn.mathjax.orgcdn.struffelproductions.comcellprofiler.orgcens.ioc.eecheckip.amazonaws.comciteseerx.ist.psu.educlear.mlclip-cn-beijing.oss-cn-beijing.aliyuncs.comcloud.google.comcmm.ensmp.frcmp.felk.cvut.czcode.activestate.comcolab.research.google.comcolab.sandbox.google.comcolmap.github.iocommonmark.orgcommons.wikimedia.orgconversationhub.blob.core.windows.netcrates.iocseweb.ucsd.educvg-data.inf.ethz.chcvlab.epfl.chdagshub.comdashboard.ngrok.comdata-apis.orgdatahub.iodatatracker.ietf.orgdev-discuss.pytorch.orgdeveloper.intel.comdevelopers.google.comdigitalassets.lib.berkeley.edudiscord.ggdiscuss.huggingface.codiscuss.pytorch.orgdl.fbaipublicfiles.comdmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.enthought.comdocs.neptune.aidocs.nvidia.comdocs.opencv.orgdocs.pydantic.devdocs.pytest.orgdocs.python.orgdocs.pytorch.orgdocs.ray.iodocs.rsdocs.scipy.orgdocs.wandb.aidocs.wandb.comdoi.orgdownload.ni.comdownload.openmmlab.comdownload.pytorch.orgdrive.google.comdvc.orgen.wikipedia.orgen.wiktionary.orgenergy-based-model.github.ioentropymine.comes.wikipedia.orgfarm3.staticflickr.comfarm4.staticflickr.comfastapi.tiangolo.comfiji.scfiles.is.tue.mpg.defilterpy.readthedocs.iofki.tic.heia-fr.chflax.readthedocs.ioflic.krflyte.orgfonts.googleapis.comforum.image.scftp.iis.sinica.edu.twgcc.gnu.orggiou.stanford.edugist.github.comgit-lfs.github.comgit-scm.comgit.kernel.orggithub.bloggithub.comgitlab.comgitlab.freedesktop.orggoogle.comgradio-static-files.s3.us-west-2.amazonaws.comgradio.appgradio.s3-us-west-2.amazonaws.comgraphics.stanford.edugroups.google.comguillaumejaume.github.iogum.cohal.archives-ouvertes.frhal.inria.frhdl.handle.nethf.cohtml.spec.whatwg.orghttpbin.orghub-ci.huggingface.cohubblesite.orghuggingface.coi.postimg.ccieeexplore.ieee.orgimageio.readthedocs.ioimagej.netimages-wixmp-ed30a86b8c4ca887773594c2.wixmp.comimages.cocodataset.orgingmec.ual.esipython.orgj3-fortran.orgjax.readthedocs.iojsonargparse.readthedocs.iokatex.orgkeras.iokornia.github.iokornia.readthedocs.iolara.epfl.chlark-parser.readthedocs.iolayoutlm.blob.core.windows.netlear.inrialpes.frlearn.microsoft.comlibsdl.orglightning.ailil.nlp.cornell.edulink.springer.comlinuxdevcenter.comlocalhost.tiangolo.commail.python.orgmarkfairchild.orgmathworld.wolfram.commatplotlib.orgmedium.commembers.chello.atmesonbuild.commetacpan.orgmlflow.orgmplab.ucsd.edumrl.nyu.edumybinder.orgnicolas.limare.netninja-build.orgnlp.stanford.edunumpy.orgnumpydoc.readthedocs.ionvidia.github.ioobject.pouta.csc.fiogunlao.github.ioold.vscht.czonnxruntime.aiopenaipublic.azureedge.netopenclipart.orgoptuna.readthedocs.ioowasp.orgpackages.msys2.orgpandas.pydata.orgpaperswithcode.compaulbourke.netpeople.eecs.berkeley.edupersonal.math.ubc.capillow.readthedocs.iopillow.readthedocs.orgpivchallenge.orgplanning.cs.uiuc.edupoynton.capraeclarumjj3.github.ioprism.ucalgary.caproceedings.mlr.pressprojects4jw.blob.core.windows.netptak.felk.cvut.czpublicgit.blob.core.windows.netpubtables1m.blob.core.windows.netpyinstaller.readthedocs.iopypi.ngc.nvidia.compypi.orgpypi.python.orgpytorch-extension.intel.compytorch-lightning.rtfd.iopytorch.orgpytorch_lightning.airaw.githubusercontent.comrepositories.cdlib.orgrequests.readthedocs.ioresearch.nvidia.comrich.readthedocs.iorrc.cvc.uab.esrwightman.github.ios3.amazonaws.comschemas.microsoft.comscikit-image.orgscikit-learn.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgserverfault.comsethmlarson.devsimpleitk.orgsipi.usc.eduslurm.schedmd.comsourceware.orgspdx.devstackoverflow.comstarlette.devstatus.gradio.appstorage.googleapis.comswagger.iotel.archives-ouvertes.frtest.pypi.orgtestpypi.python.orgtinyurl.comtog.acm.orgtorch.chtowardsdatascience.comtruststore.readthedocs.iotvm.apache.orgtwitter.comtyper.tiangolo.comtyping.python.orgufldl.stanford.eduui.perfetto.devunpkg.comuser-images.githubusercontent.comuser.engineering.uiowa.eduusers.cs.cf.ac.ukusers.polytech.unice.frvega.github.ioviews.scientific-python.orgvis-www.cs.umass.eduvision.in.tum.devita.had.co.nzwandb.meweb.archive.orgweb.math.ucsb.eduwiki.python.orgwixtoolset.orgwrapdb.mesonbuild.comww3.math.ucla.eduwww.ams.orgwww.apache.orgwww.astropy.orgwww.bramvandersanden.comwww.brooklynmuseum.orgwww.brucelindbloom.comwww.busim.ee.boun.edu.trwww.cambridgeincolour.comwww.cbsr.ia.ac.cnwww.clear.rice.eduwww.codinghorror.comwww.comet.comwww.comet.mlwww.cs.cmu.eduwww.cs.qub.ac.ukwww.cs.ubc.cawww.deepspeed.aiwww.deviantart.comwww.dirkpadfield.comwww.dropbox.comwww.easyrgb.comwww.ece.rochester.eduwww.ece.ucsb.eduwww.ecma-international.orgwww.edwardrosten.comwww.epfl.chwww.flickr.comwww.gdal.orgwww.geeksforgeeks.orgwww.github.comwww.google.comwww.grantjenks.comwww.graphviz.orgwww.ilankelman.orgwww.intel.comwww.ipol.imwww.itu.intwww.iwaenc.orgwww.janeriksolem.netwww.kubeflow.orgwww.mapbox.comwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.mecourse.comwww.merl.comwww.microsoft.comwww.mlflow.orgwww.nasa.govwww.oasis-open.orgwww.openblas.netwww.osapublishing.orgwww.poynton.comwww.python.orgwww.rdocumentation.orgwww.researchgate.netwww.sciencedirect.comwww.scipy.orgwww.stixfonts.orgwww.systutorials.comwww.tandfonline.comwww.tensorflow.orgwww.tu-chemnitz.dewww.tysto.comwww.verlab.dcc.ufmg.brwww.vision.cs.chubu.ac.jpwww.w3.orgwww.wandb.comwww.xyz.eduwww.youtube.comwww5.cs.fau.dex.comyadda.icm.edu.pl
- 1source
pkgs/python/[email protected]/src/transformers/tools/agents.py:631 - 2sink
pkgs/python/[email protected]/src/transformers/tools/agents.py:637
hub Dependency data flows (1)
- 1source
pkgs/python/[email protected]/src/transformers/models/regnet/convert_regnet_seer_10b_to_pytorch.py:240 - 2sink
pkgs/python/[email protected]/src/transformers/models/regnet/convert_regnet_seer_10b_to_pytorch.py:240
</> First-Party Code
first-party (python)
python first-partyexpand_more 91 low-confidence finding(s)
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations
low env_fs — Environment-variable access. 44 locations
low env_fs — Filesystem access. 43 locations
commits = requests.get('https://api.github.com/repos/AUTOMATIC1111/stable-diffusion-webui/branches/master').json()Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
</> Dependencies
accelerate
python dependency self.writer.track(value, name=key, step=step, **kwargs)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
self.writer.track(aim_image, name=key, step=step, **track_kw)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 226 low-confidence finding(s)
low env_fs — Filesystem access. 31 locations
low env_fs — Environment-variable access. 195 locations
transformers
python dependency logger.info(f"Token is {os.environ['HF_TOKEN']}")PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.
Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
response = requests.post(self.url_endpoint, json=inputs, headers=headers)A credential (read from the environment/filesystem, or parsed from the request URL) is applied as authorization on the same outbound request. This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.
Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 671 low-confidence finding(s)
low env_fs — Filesystem access. 490 locations
pkgs/python/[email protected]/src/transformers/models/bert_japanese/tokenization_bert_japanese.py:89
pkgs/python/[email protected]/src/transformers/models/convnextv2/convert_convnextv2_to_pytorch.py:71
pkgs/python/[email protected]/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:61
pkgs/python/[email protected]/src/transformers/models/marian/convert_marian_tatoeba_to_pytorch.py:63
low env_fs — Environment-variable access. 115 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 13 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 53 locations
pkgs/python/[email protected]/src/transformers/models/blip/convert_blip_original_pytorch_to_hf.py:41
pkgs/python/[email protected]/src/transformers/models/mobilevitv2/convert_mlcvnets_to_pytorch.py:229
GitPython
python dependencyexpand_more 55 low-confidence finding(s)
low env_fs — Filesystem access. 32 locations
low env_fs — Environment-variable access. 23 locations
diskcache
python dependencyexpand_more 6 low-confidence finding(s)
low env_fs — Filesystem access. 6 locations
facexlib
python dependencyexpand_more 7 low-confidence finding(s)
low env_fs — Filesystem access. 6 locations
v = os.environ.get(k)Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
fastapi
python dependencyexpand_more 70 low-confidence finding(s)
low env_fs — Filesystem access. 55 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 12 locations
os.environ["DYLD_FALLBACK_LIBRARY_PATH"] = "/opt/homebrew/lib"Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
gradio
python dependencyexpand_more 71 low-confidence finding(s)
low env_fs — Environment-variable access. 22 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 14 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
low env_fs — Filesystem access. 32 locations
inflection
python dependencyexpand_more 2 low-confidence finding(s)
on_rtd = os.environ.get('READTHEDOCS', None) == 'True'Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
long_description=open('README.rst').read(),Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
jsonmerge
python dependencyexpand_more 1 low-confidence finding(s)
long_description=open("README.rst").read(),Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
kornia
python dependencyexpand_more 8 low-confidence finding(s)
low env_fs — Environment-variable access. 2 locations
low env_fs — Filesystem access. 5 locations
response = requests.get(url, timeout=10) # type:ignoreData is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
lark
python dependencyexpand_more 12 low-confidence finding(s)
low env_fs — Filesystem access. 12 locations
numpy
python dependencyexpand_more 982 low-confidence finding(s)
low env_fs — Filesystem access. 618 locations
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57
low env_fs — Environment-variable access. 356 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
omegaconf
python dependencyexpand_more 6 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 3 locations
open-clip-torch
python dependencyexpand_more 31 low-confidence finding(s)
low env_fs — Filesystem access. 13 locations
with urllib.request.urlopen(url) as source, open(download_target, "wb") as output:Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs — Environment-variable access. 17 locations
pillow-avif-plugin
python dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
protobuf
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
with open(os.path.join('google', 'protobuf', '__init__.py')) as version_file:Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
psutil
python dependencyexpand_more 28 low-confidence finding(s)
low env_fs — Filesystem access. 19 locations
low env_fs — Environment-variable access. 7 locations
res = requests.get(url, timeout=REQUEST_TIMEOUT)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
req = urlopen(URL, **kwargs)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
pytorch_lightning
python dependencyexpand_more 187 low-confidence finding(s)
low env_fs — Filesystem access. 24 locations
low env_fs — Environment-variable access. 160 locations
f.write(requests.get(url).text)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations
requests
python dependencyexpand_more 8 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
safetensors
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
scikit-image
python dependencyexpand_more 25 low-confidence finding(s)
low env_fs — Environment-variable access. 6 locations
low env_fs — Filesystem access. 18 locations
with urllib.request.urlopen(resource_name) as u:Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
tomesd
python dependencyexpand_more 1 low-confidence finding(s)
long_description=open("README.md", "r", encoding="utf-8").read(),Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
torchdiffeq
python dependencyexpand_more 1 low-confidence finding(s)
with open(os.path.join(here, 'torchdiffeq', '__init__.py')) as f:Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
torchsde
python dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
Skipped dependencies
Production
- Pillow prod — sdist exceeds byte cap
- clean-fid prod — no sdist (wheels only)
- piexif prod — extract failed: not a gzip file
- torch prod — no sdist (wheels only)