Close Open Privacy Scan
App Privacy Score
Low risk · 1222 finding(s)
Based on: 1 first-party package(s) · 8/10 deps analyzed
Dependency score: 82 (Low risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
academic.oup.comaclweb.orgaddress.localaggregate.ee.engr.uky.edualtair-viz.github.ioapi.nuget.orgarchive.ics.uci.eduarrow.apache.orgartowen.su.domainsarxiv.orgavro.apache.orgbitbucket.orgbmva-archive.org.ukboto3.amazonaws.combugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcdn.datatables.netcdn.jsdelivr.netcdn.mathjax.orgcens.ioc.eecgi.di.uoa.grciteseerx.ist.psu.educode.google.comcode.jquery.comcollaboration.cmc.ec.gc.cacran.r-project.orgcrates.iocs.nyu.educseweb.ucsd.educve.mitre.orgdata-apis.orgdata.iana.orgdelta-io.github.iodeveloper.mozilla.orgdigitalassets.lib.berkeley.edudl.acm.orgdmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.bodo.aidocs.columnar.techdocs.dask.orgdocs.pola.rsdocs.pytest.orgdocs.python.orgdocs.rapids.aidocs.rsdocs.scipydocs.scipy.orgdocs.sqlalchemy.orgdocs.tiledb.iodoi.orgdspace.mit.eduduckdb.orgen.wikipedia.orgen.wikiversity.orgepub.ub.uni-muenchen.deepubs.siam.orgexslt.orgfa.bianp.netfastavro.readthedocs.iofastexcel.toucantoco.devfilesystem-spec.readthedocs.ioflake8.pycqa.orggcc.gnu.orggithub.comgitlab.comgitlab.freedesktop.orggoessner.netgoogle.comgraphics.stanford.edugraphviz.orggraphviz.readthedocs.iogroups.google.comhal.archives-ouvertes.frhal.inria.frhastie.su.domainshg.python.orghome.olemiss.eduhomepages.ecs.vuw.ac.nzhtml.spec.whatwg.orgi.stanford.eduieeexplore.ieee.orgimageio.readthedocs.ioinf.ufrgs.bripython.orgipython.readthedocs.ioj3-fortran.orgjax.readthedocs.iojmlr.csail.mit.edujmlr.orgjoblib.readthedocs.iojournals.plos.orgjs.cytoscape.orglib.stat.cmu.edulibsdl.orglightgbm.readthedocs.iolink.springer.comlivelovely.comlvdmaaten.github.iomathworld.wolfram.commatplotlib.orgmedium.commesonbuild.commetacpan.orgmicrosoft.commitpress.mit.edumybinder.orgmypy.readthedocs.ionarwhals-dev.github.ionbviewer.orgndownloader.figshare.comnicolas.limare.netnlp.stanford.edunumba.readthedocs.ionumexpr.readthedocs.ionumpy.orgnumpydoc.readthedocs.ioopenpyxl.readthedocs.ioopensource.orgpackages.msys2.orgpages.cs.wisc.edupandas.pydata.orgpapers.nips.ccparquet.apache.orgpeople.cs.umass.edupeople.csail.mit.edupeople.eecs.berkeley.edupeople.iee.ihu.grpeps.python.orgpersonal.math.ubc.capillow.readthedocs.iopola.rsposit-dev.github.iopresbrey.mit.eduproceedings.neurips.ccprojecteuclid.orgpy.iceberg.apache.orgpyinstaller.readthedocs.iopyperclip.readthedocs.iopypi.anaconda.orgpypi.orgpytest.orgraw.githubusercontent.comrob.schapire.netschemas.microsoft.comscikit-image.orgscikit-learn.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgseaborn.pydata.orgsfu-db.github.ioskops.readthedocs.iosourceware.orgsparse.pydata.orgspecs.frictionlessdata.iostackoverflow.comstat.uw.edustats.stackexchange.comstatweb.stanford.edustorage.azure.comsupport.microsoft.comsupport.sas.comtinyurl.comtminka.github.iotruststore.readthedocs.iotyping.python.orgusers.iems.northwestern.eduusers.jyu.fiutopia.duth.grvassarstats.netviews.scientific-python.orgvis-www.cs.umass.eduvote.comweb.archive.orgweb.stanford.eduwixtoolset.orgwrapdb.mesonbuild.comwww.ams.orgwww.bestofmedia.comwww.cl.cam.ac.ukwww.cs.cornell.eduwww.cs.princeton.eduwww.cs.sfu.cawww.cs.technion.ac.ilwww.cs.toronto.eduwww.cs.ucl.ac.ukwww.cs.waikato.ac.nzwww.csie.ntu.edu.twwww.data-publica.comwww.dbs.ifi.lmu.dewww.di.ens.frwww.ecma-international.orgwww.eecs.tufts.eduwww.fordfoundation.orgwww.gaussianprocess.orgwww.godbole.netwww.google.comwww.googleapis.comwww.graphviz.orgwww.intel.comwww.isca-archive.orgwww.iucnredlist.orgwww.jmlr.orgwww.jstatsoft.orgwww.jstor.orgwww.mars.comwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.microsoft.comwww.miketipping.comwww.mit.eduwww.mitpressjournals.orgwww.mlpack.orgwww.ncbi.nlm.nih.govwww.oasis-open.orgwww.openblas.netwww.openml.orgwww.opm.govwww.python.orgwww.research.ibm.comwww.researchgate.netwww.robots.ox.ac.ukwww.sciencedirect.comwww.scipy.orgwww.sphinx-doc.orgwww.springer.comwww.sri.comwww.stat.berkeley.eduwww.stata.comwww.statsmodels.orgwww.stixfonts.orgwww.tandfonline.comwww.unicode.orgwww.utstat.toronto.eduwww.w3.orgwww.xyz.eduwww.yhat.comxarray.pydata.orgxlrd.readthedocs.ioxlsxwriter.readthedocs.iozarr.readthedocs.io
</> First-Party Code
first-party (python): python-package
python first-partyexpand_more 7 low-confidence finding(s)
low env_fs — Filesystem access. 5 locations
low env_fs — Environment-variable access. 2 locations
</> Dependencies
dask
python dependencyexpand_more 30 low-confidence finding(s)
low env_fs — Filesystem access. 20 locations
low env_fs — Environment-variable access. 10 locations
graphviz
python dependencyexpand_more 5 low-confidence finding(s)
on_rtd = os.environ.get('READTHEDOCS', None) == 'True'Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
narwhals
python dependencyexpand_more 1 low-confidence finding(s)
terminal_width = int(os.getenv("COLUMNS", 80)) # noqa: PLW1508Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
numpy
python dependencyexpand_more 982 low-confidence finding(s)
low env_fs — Filesystem access. 618 locations
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57
low env_fs — Environment-variable access. 356 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
pandas
python dependencyexpand_more 29 low-confidence finding(s)
low env_fs — Filesystem access. 12 locations
low env_fs — Environment-variable access. 16 locations
return urllib.request.urlopen(*args, **kwargs) # noqa: TID251Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
polars
python dependencyexpand_more 93 low-confidence finding(s)
low env_fs — Environment-variable access. 89 locations
low env_fs — Filesystem access. 3 locations
with urlopen(path) as f:Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
pyarrow
python dependencyexpand_more 23 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 4 locations
low pii_flow — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration. Non-production path — not application runtime. 2 locations
low env_fs — Environment-variable access. 8 locations
scikit-learn
python dependencyexpand_more 52 low-confidence finding(s)
low env_fs — Environment-variable access. 25 locations
low env_fs — Filesystem access. 25 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations
Skipped dependencies
Production
- scipy prod — sdist exceeds byte cap
- matplotlib prod — sdist exceeds byte cap