Close Open Privacy Scan

link https://github.com/RooCodeInc/Roo-Code
bolt Snapshot: commit b867ec9
science engine v1.14
schedule 2026-07-17T08:16:29.887793+00:00

verified_user Possible application data leak

Potential data exfiltration identified in application code.

smart_toy MCP server detected: @anthropic-ai/sdk, @mistralai/mistralai, @modelcontextprotocol/sdk, @qdrant/js-client-rest +1 more — detected in dependencies, not a safety judgment.

App Privacy Score

22 /100
High privacy risk — possible application leak

High risk · 2277 finding(s)

Dependency score: 22 (High risk)

bar_chart Score Breakdown

pii_flow −60
egress −15
env_fs −3

list Scan Summary

0 high 166 medium 2111 low
First-party packages: 10
Dependency packages: 35
Ecosystem: npm

swap_horiz Potential data exfiltration in application code

External domains: 169.254.169.254ai-gateway.vercel.shai.google.devaiplatform.eu.rep.googleapis.comaiplatform.googleapis.comaiplatform.us.rep.googleapis.comapi.anthropic.comapi.deepseek.comapi.fireworks.aiapi.getunbound.aiapi.github.comapi.minimax.ioapi.minimaxi.comapi.mistral.aiapi.moonshot.aiapi.moonshot.cnapi.openai.comapi.poe.comapi.sambanova.aiapi.x.aiapi.z.aiapp.baseten.coapp.requesty.aiauth.openai.comautopush-generativelanguage.sandbox.googleapis.comaws.amazon.combaseten.cobedrock-agent-runtime.us-west-2.amazonaws.combedrock-mantle.us-east-1.api.awsbedrock-runtime.us-east-1.amazonaws.combitcoin.orgbsky.appchat.qwen.aichatgpt.comcline.botcloud.google.comcloud.sambanova.aicode.visualstudio.comcodestral.mistral.aiconsole.anthropic.comconsole.cloud.google.comconsole.mistral.aidashscope.aliyuncs.comdashscope.console.aliyun.comdate-fns.orgdevelopers.google.comdocs.anthropic.comdocs.cloud.google.comdocs.expo.devdocs.litellm.aidocs.mistral.aidummy.comemscripten.orgfireworks.aigateway.getunbound.aigateway.my-company.comgemini-api-demos.uc.r.appspot.comgenerativelanguage.googleapis.comgit-scm.comgithub.comgoo.glgoogle.aip.devhelp.openai.comimg.clerk.cominference.baseten.cojson-schema.orglmstudio.aimanagement.azure.commarketplace.visualstudio.commetadata.google.internalminimax.chatnews.google.comnpm.imoauth2.googleapis.comollama.aiollama.comontheline.trincoll.eduopen-vsx.orgopen.bigmodel.cnopenrouter.aiplatform.claude.complatform.deepseek.complatform.minimax.ioplatform.minimaxi.complatform.moonshot.aiplatform.moonshot.cnplatform.openai.compoe.compptr.devpurl.oclc.orgpurl.orgraw.githubusercontent.comrequesty.airoocodeinc.github.ioroomote.devrouter.requesty.aisambanova.aischemas.microsoft.comschemas.openxmlformats.orgschemas.zwobble.orgstorage.googleapis.comstuk.github.iotanstack.comvercel.comvpce-xxx.bedrock.region.vpce.amazonaws.comwww.allrecipes.comwww.anthropic.comwww.foodnetwork.comwww.googleapis.comwww.minimax.iowww.unicode.orgwww.w3.orgx.aix.comz.ai

medium first-party (npm): src A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/src/api/providers/openai-compatible.ts:64 → repo/src/api/providers/openai-compatible.ts:61
medium first-party (npm): src A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/src/integrations/openai-codex/oauth.ts:236 → repo/src/integrations/openai-codex/oauth.ts:236
medium first-party (npm): src A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/src/integrations/openai-codex/oauth.ts:287 → repo/src/integrations/openai-codex/oauth.ts:287
medium first-party (npm): src A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/src/services/code-index/embedders/openai-compatible.ts:67 → repo/src/services/code-index/embedders/openai-compatible.ts:205
hub Dependency data flows (162)
medium axios dependency Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/lib/adapters/http.js:861 → pkgs/npm/[email protected]/lib/adapters/http.js:1062
medium openai dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/auth/workload-identity-auth.js:46 → pkgs/npm/[email protected]/auth/workload-identity-auth.js:53
medium openai dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/auth/workload-identity-auth.mjs:42 → pkgs/npm/[email protected]/auth/workload-identity-auth.mjs:49
medium openai dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/src/auth/workload-identity-auth.ts:60 → pkgs/npm/[email protected]/src/auth/workload-identity-auth.ts:69
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:27
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:19
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:19
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:83
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:103
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:109
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:117
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:124
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:133
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:161
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:163
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:52
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:66
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:76
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:80
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:82
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:84
medium @google/genai dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:296 → pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:305
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:76
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:84
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:87
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:19
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:21
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:25
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:36
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:42
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:46
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:21
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:23
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:21
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:25
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:34
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:40
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:47
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:59
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:76
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:96
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:97
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:118
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:131
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:16 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:80
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:9 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:31
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:25
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:26
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:32
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:58
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:55
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:10 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:52
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:29
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:24
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:27
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:38
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:9 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:42
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:36
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:23
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:20
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:19
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:20
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:24
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:26
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:24
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:36
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:19
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:70
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:92
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:94
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:56
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:79
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:81
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:19
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:22
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:38
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:42
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:66
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:38
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:41
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:64
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:55
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:59
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:52
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:56
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:22
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:31
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:34
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:54
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:22
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:21
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:22
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:52
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:21
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:29
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:49
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:22
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:21
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:184
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:13 → pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:152
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:9 → pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:37
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:9 → pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:45
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:41
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:44
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:46
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:52
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:61
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:69
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:76
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:80
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:85
medium @google/genai dependency PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:89
medium @anthropic-ai/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/lib/credentials/oidc-federation.js:39 → pkgs/npm/@[email protected]/lib/credentials/oidc-federation.js:42
medium @anthropic-ai/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/lib/credentials/oidc-federation.mjs:36 → pkgs/npm/@[email protected]/lib/credentials/oidc-federation.mjs:39
medium @anthropic-ai/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:91 → pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:94
medium @anthropic-ai/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:55 → pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:58
medium @anthropic-ai/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/src/lib/credentials/oidc-federation.ts:80 → pkgs/npm/@[email protected]/src/lib/credentials/oidc-federation.ts:83
medium @anthropic-ai/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:92 → pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:95
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:30
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:42
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:45
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:51
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:53
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:59
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:3 → pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:15
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:3 → pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:33
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:3 → pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:27
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:3 → pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:20
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → pkgs/npm/@[email protected]/examples/src/async_files.ts:24
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → pkgs/npm/@[email protected]/examples/src/async_files.ts:28
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → pkgs/npm/@[email protected]/examples/src/async_files.ts:32
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → pkgs/npm/@[email protected]/examples/src/async_files.ts:36
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:127
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:128
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:147
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:3 → pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:150
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:3 → pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:151
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_json_format.ts:3 → pkgs/npm/@[email protected]/examples/src/async_json_format.ts:16
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:6 → pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:33
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:3 → pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:15
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:4 → pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:52
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:4 → pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:70
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:3 → pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:27
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:3 → pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:23
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:3 → pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:38
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:107 → pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:153
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:162 → pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:213
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → pkgs/npm/@[email protected]/examples/src/reasoning.ts:35
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → pkgs/npm/@[email protected]/examples/src/reasoning.ts:42
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → pkgs/npm/@[email protected]/examples/src/reasoning.ts:47
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:14 → pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:61
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:14 → pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:74
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:7 → pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:30
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:7 → pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:32
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:30
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:47
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:50
medium @mistralai/mistralai tooling PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:18 → pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:35
medium @modelcontextprotocol/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:394 → pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:421
medium @modelcontextprotocol/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:455 → pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:480
medium @modelcontextprotocol/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:175 → pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:175
medium @modelcontextprotocol/sdk dependency A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:212 → pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:212

</> First-Party Code

first-party (npm): src

npm first-party
medium pii_flow production #0cfec5e3f3d910ea — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/src/api/providers/openai-compatible.ts:61 · flow /tmp/closeopen-vzna68el/repo/src/api/providers/openai-compatible.ts:64 → /tmp/closeopen-vzna68el/repo/src/api/providers/openai-compatible.ts:61 
		this.provider = createOpenAICompatible({
			name: config.providerName,
			baseURL: config.baseURL,
			apiKey: config.apiKey,
			headers: {
				...DEFAULT_HEADERS,
				...(config.headers || {}),
			},
		})

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #a8dc46579bcf1b2d — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/src/integrations/openai-codex/oauth.ts:236 · flow /tmp/closeopen-vzna68el/repo/src/integrations/openai-codex/oauth.ts:236 → /tmp/closeopen-vzna68el/repo/src/integrations/openai-codex/oauth.ts:236 
	const response = await fetch(OPENAI_CODEX_OAUTH_CONFIG.tokenEndpoint, {
		method: "POST",
		headers: {
			"Content-Type": "application/x-www-form-urlencoded",
		},
		body: body.toString(),
		signal: AbortSignal.timeout(30000),
	})

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #641170e3b8a4dab6 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/src/integrations/openai-codex/oauth.ts:287 · flow /tmp/closeopen-vzna68el/repo/src/integrations/openai-codex/oauth.ts:287 → /tmp/closeopen-vzna68el/repo/src/integrations/openai-codex/oauth.ts:287 
	const response = await fetch(OPENAI_CODEX_OAUTH_CONFIG.tokenEndpoint, {
		method: "POST",
		headers: {
			"Content-Type": "application/x-www-form-urlencoded",
		},
		body: body.toString(),
		signal: AbortSignal.timeout(30000),
	})

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #55595667666103b3 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/src/services/code-index/embedders/openai-compatible.ts:205 · flow /tmp/closeopen-vzna68el/repo/src/services/code-index/embedders/openai-compatible.ts:67 → /tmp/closeopen-vzna68el/repo/src/services/code-index/embedders/openai-compatible.ts:205 
		const response = await fetch(url, {
			method: "POST",
			headers: {
				"Content-Type": "application/json",
				// Azure OpenAI uses 'api-key' header, while OpenAI uses 'Authorization'
				// We'll try 'api-key' first for Azure compatibility
				"api-key": this.apiKey,
				Authorization: `Bearer ${this.apiKey}`,
			},
			body: JSON.stringify({
				input: batchTexts,
				model: model,
				encoding_format: "base64",
			}),
		})

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 436 low-confidence finding(s)
low env_fs test-only #07c3d1d0e2c26223 — Filesystem access.
repo/src/__mocks__/fs/promises.ts:153 
	constants: require("fs").constants,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3d36030e0b28c753 — Filesystem access.
repo/src/__tests__/dist_assets.spec.ts:3 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #516649cb759be56d — Filesystem access.
repo/src/__tests__/migrateSettings.spec.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fb5605befa20b76f — Filesystem access.
repo/src/api/providers/fetchers/__tests__/modelCache.spec.ts:49 
import * as fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e340c72fd4e839a — Filesystem access.
repo/src/api/providers/fetchers/modelCache.ts:2 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cf3e55310de8340 — Filesystem access.
repo/src/api/providers/fetchers/modelCache.ts:3 
import * as fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #534b73e45d77400a — Filesystem access.
repo/src/api/providers/fetchers/modelCache.ts:48 
	return exists ? JSON.parse(await fs.readFile(filePath, "utf8")) : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c509384ed5a0a794 — Filesystem access.
repo/src/api/providers/fetchers/modelCache.ts:277 
			const data = fsSync.readFileSync(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b672ebd506c5e4b — Filesystem access.
repo/src/api/providers/fetchers/modelEndpointCache.ts:2 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6fbfab20ecf9091e — Filesystem access.
repo/src/api/providers/fetchers/modelEndpointCache.ts:33 
	return exists ? JSON.parse(await fs.readFile(filePath, "utf8")) : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #6fefa772b711c5ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/api/providers/fetchers/ollama.ts:89 
					axios
						.post<OllamaModelInfoResponse>(
							`${baseUrl}/api/show`,
							{
								model: ollamaModel.model,
							},
							{ headers },
						)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ae3eb37675cfb425 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/api/providers/fetchers/unbound.ts:17 
		const response = await axios.get("https://api.getunbound.ai/models", { headers })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #285c92b04a72442c — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/api/providers/openai-codex.ts:515 
			const response = await fetch(url, {
				method: "POST",
				headers,
				body: JSON.stringify(requestBody),
				signal: this.abortController?.signal,
			})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #fb946820ec312fc9 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/api/providers/openai-codex.ts:1206 
			const response = await fetch(url, {
				method: "POST",
				headers,
				body: JSON.stringify(requestBody),
				signal: this.abortController.signal,
			})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #1470f57b230e9f1d — Filesystem access.
repo/src/api/providers/qwen-code.ts:86 
			const credsStr = await fs.readFile(keyFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #41089a5b5460221b — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/api/providers/qwen-code.ts:125 
		const response = await fetch(QWEN_OAUTH_TOKEN_ENDPOINT, {
			method: "POST",
			headers: {
				"Content-Type": "application/x-www-form-urlencoded",
				Accept: "application/json",
			},
			body: objectToUrlEncoded(bodyData),
		})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #5a6cfc2d01e34dfc — Filesystem access.
repo/src/api/providers/qwen-code.ts:155 
			await fs.writeFile(filePath, JSON.stringify(newCredentials, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40905e37bb5a92b8 — Filesystem access.
repo/src/core/config/CustomModesManager.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d8bf84909adf848 — Filesystem access.
repo/src/core/config/CustomModesManager.ts:185 
			const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61face05da69a17a — Filesystem access.
repo/src/core/config/CustomModesManager.ts:255 
			await this.queueWrite(() => fs.writeFile(filePath, yaml.stringify({ customModes: [] }, { lineWidth: 0 })))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59bd472b53ab12df — Environment-variable access.
repo/src/core/config/CustomModesManager.ts:263 
		if (process.env.NODE_ENV === "test") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa5603e080b5f84c — Filesystem access.
repo/src/core/config/CustomModesManager.ts:276 
				const content = await fs.readFile(settingsPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79291415d099f5b0 — Filesystem access.
repo/src/core/config/CustomModesManager.ts:469 
			content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c81862f7aa6ecb4b — Filesystem access.
repo/src/core/config/CustomModesManager.ts:493 
		await fs.writeFile(filePath, yaml.stringify(settings, { lineWidth: 0 }), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43fc12cbf8e03276 — Filesystem access.
repo/src/core/config/CustomModesManager.ts:606 
			await fs.writeFile(filePath, yaml.stringify({ customModes: [] }, { lineWidth: 0 }))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2456baf20572c996 — Filesystem access.
repo/src/core/config/CustomModesManager.ts:638 
						const roomodesContent = await fs.readFile(roomodesPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b420c929154991fe — Filesystem access.
repo/src/core/config/CustomModesManager.ts:689 
						const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7be04a025a6aede9 — Filesystem access.
repo/src/core/config/CustomModesManager.ts:733 
							const roomodesContent = await fs.readFile(roomodesPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74f47d4255672dc0 — Filesystem access.
repo/src/core/config/CustomModesManager.ts:788 
							const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89ff7acbfc0ad897 — Filesystem access.
repo/src/core/config/CustomModesManager.ts:915 
				await fs.writeFile(targetPath, ruleFile.content, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7f5d276051628ab5 — Filesystem access.
repo/src/core/config/__tests__/CustomModesManager.exportImportSlugChange.spec.ts:6 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #49b88e2286f4963f — Filesystem access.
repo/src/core/config/__tests__/CustomModesManager.spec.ts:6 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cca66a0c7c3fc786 — Environment-variable access.
repo/src/core/config/__tests__/CustomModesManager.spec.ts:684 
			const originalNodeEnv = process.env.NODE_ENV

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b1c1ef0f3e060a39 — Environment-variable access.
repo/src/core/config/__tests__/CustomModesManager.spec.ts:685 
			process.env.NODE_ENV = "development"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #62bdc8f0c9cc7b68 — Environment-variable access.
repo/src/core/config/__tests__/CustomModesManager.spec.ts:714 
				process.env.NODE_ENV = originalNodeEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8443f2549ddd692e — Filesystem access.
repo/src/core/config/__tests__/CustomModesManager.yamlEdgeCases.spec.ts:6 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b539f820e666484 — Filesystem access.
repo/src/core/config/__tests__/importExport.spec.ts:3 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88330d01f1e127a3 — Filesystem access.
repo/src/core/config/importExport.ts:4 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73bfc7382f3c6213 — Filesystem access.
repo/src/core/config/importExport.ts:91 
		const rawData = JSON.parse(await fs.readFile(filePath, "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aee6b95673cbed13 — Filesystem access.
repo/src/core/context-tracking/FileContextTracker.ts:7 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd58397ac31ae353 — Filesystem access.
repo/src/core/context-tracking/FileContextTracker.ts:120 
				return JSON.parse(await fs.readFile(filePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b3c55439d2f576b — Filesystem access.
repo/src/core/ignore/RooIgnoreController.ts:3 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #490846362b4a0460 — Filesystem access.
repo/src/core/ignore/RooIgnoreController.ts:4 
import fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e9e314412623edd — Filesystem access.
repo/src/core/ignore/RooIgnoreController.ts:70 
				const content = await fs.readFile(ignorePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ab33b2b5da37cf95 — Filesystem access.
repo/src/core/ignore/__tests__/RooIgnoreController.security.spec.ts:7 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dc73b32c02806b9c — Filesystem access.
repo/src/core/ignore/__tests__/RooIgnoreController.spec.ts:8 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a5342b0b469effd0 — Filesystem access.
repo/src/core/ignore/__tests__/RooIgnoreController.spec.ts:9 
import * as fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1165041d0c31479 — Filesystem access.
repo/src/core/mentions/index.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5fb32fd2dd5550ed — Filesystem access.
repo/src/core/prompts/__tests__/responses-rooignore.spec.ts:8 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #71e93697c509b3aa — Filesystem access.
repo/src/core/prompts/__tests__/utils.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #276affaacb5ab15c — Filesystem access.
repo/src/core/prompts/__tests__/utils.ts:2 
import { PathLike } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #53f4f9a7f6271a87 — Filesystem access.
repo/src/core/prompts/sections/__tests__/custom-instructions.spec.ts:56 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f0dee9b2ac9e1b02 — Filesystem access.
repo/src/core/prompts/sections/__tests__/custom-instructions.spec.ts:57 
import type { PathLike } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7069ec762db3c2a — Filesystem access.
repo/src/core/prompts/sections/custom-instructions.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12d10f7111c2fd25 — Filesystem access.
repo/src/core/prompts/sections/custom-instructions.ts:4 
import { Dirent } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #043ec6d217e77df4 — Filesystem access.
repo/src/core/prompts/sections/custom-instructions.ts:23 
		const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91b32195862fc864 — Filesystem access.
repo/src/core/task-persistence/TaskHistoryStore.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d42b068a34e15981 — Filesystem access.
repo/src/core/task-persistence/TaskHistoryStore.ts:2 
import * as fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8300df6312abff60 — Filesystem access.
repo/src/core/task-persistence/TaskHistoryStore.ts:371 
			const raw = await fs.readFile(indexPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c70e9dd6c324cefa — Filesystem access.
repo/src/core/task-persistence/TaskHistoryStore.ts:452 
			const raw = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #97c1064531ca9213 — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.crossInstance.spec.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ff659931d733612a — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.crossInstance.spec.ts:20 
		await fs.writeFile(filePath, JSON.stringify(data, null, "\t"), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3f6da807d4bea92f — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41e1c7bf9ba095a2 — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:20 
		await fs.writeFile(filePath, JSON.stringify(data, null, "\t"), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #106bc794b9f0b3d3 — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:70 
			await fs.writeFile(path.join(tasksDir, "task-1", GlobalFileNames.historyItem), JSON.stringify(item1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6360efee3aa9d6d5 — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:71 
			await fs.writeFile(path.join(tasksDir, "task-2", GlobalFileNames.historyItem), JSON.stringify(item2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #09e61427f0a1093e — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:79 
			await fs.writeFile(path.join(tasksDir, GlobalFileNames.historyIndex), JSON.stringify(index))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #59d4abc38ac130d8 — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:150 
			const raw = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8dd07b66a64d1de5 — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:244 
			await fs.writeFile(path.join(taskDir, GlobalFileNames.historyItem), JSON.stringify(item))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1b2a31c39a6842e5 — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:344 
			await fs.writeFile(path.join(taskDir, GlobalFileNames.historyItem), JSON.stringify(existingItem))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #019fe9c8aaf78d46 — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:355 
			const raw = await fs.readFile(path.join(taskDir, GlobalFileNames.historyItem), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f392b45a1cef2011 — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:384 
			const raw = await fs.readFile(indexPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4dba49f2cf72cbd9 — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:404 
			const raw = await fs.readFile(indexPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #332fde97b1c745fe — Filesystem access.
repo/src/core/task-persistence/__tests__/TaskHistoryStore.spec.ts:420 
			await fs.writeFile(filePath, JSON.stringify(updated))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c089e12ce169e127 — Filesystem access.
repo/src/core/task-persistence/__tests__/apiMessages.spec.ts:5 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #66ba9f4119f81b44 — Filesystem access.
repo/src/core/task-persistence/__tests__/apiMessages.spec.ts:21 
		await fs.writeFile(filePath, "<<<corrupt data>>>", "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8ae1d6f00cb0ad6a — Filesystem access.
repo/src/core/task-persistence/__tests__/apiMessages.spec.ts:38 
		await fs.writeFile(oldPath, "not json at all {[!", "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d2fb8d05dd66a56e — Filesystem access.
repo/src/core/task-persistence/__tests__/apiMessages.spec.ts:60 
		await fs.writeFile(filePath, JSON.stringify("hello"), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #edac2005e39583fb — Filesystem access.
repo/src/core/task-persistence/__tests__/apiMessages.spec.ts:77 
		await fs.writeFile(oldPath, JSON.stringify({ key: "value" }), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dcf4a06e88fce915 — Filesystem access.
repo/src/core/task-persistence/__tests__/taskMessages.spec.ts:4 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #17b2218048ae2571 — Filesystem access.
repo/src/core/task-persistence/__tests__/taskMessages.spec.ts:77 
		await fs.writeFile(filePath, "{not valid json!!!", "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #647ca5ebccd1b91a — Filesystem access.
repo/src/core/task-persistence/__tests__/taskMessages.spec.ts:92 
		await fs.writeFile(filePath, JSON.stringify("hello"), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7a0751635d9d012 — Filesystem access.
repo/src/core/task-persistence/apiMessages.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd6b34c13eb6c5a4 — Filesystem access.
repo/src/core/task-persistence/apiMessages.ts:51 
		const fileContent = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8aa74280e58dd5b — Filesystem access.
repo/src/core/task-persistence/apiMessages.ts:76 
			const fileContent = await fs.readFile(oldPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ddcd3d0a19ba4138 — Filesystem access.
repo/src/core/task-persistence/taskMessages.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fc066a9960df2c7 — Filesystem access.
repo/src/core/task-persistence/taskMessages.ts:27 
			const parsedData = JSON.parse(await fs.readFile(filePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e11a66e65b2ca0ab — Filesystem access.
repo/src/core/tools/ApplyDiffTool.ts:2 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71cf65ebac3a13db — Filesystem access.
repo/src/core/tools/ApplyDiffTool.ts:70 
			const originalContent: string = await fs.readFile(absolutePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab2808d298ac9e2e — Filesystem access.
repo/src/core/tools/ApplyPatchTool.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5301f5e57265d77 — Filesystem access.
repo/src/core/tools/ApplyPatchTool.ts:91 
				return await fs.readFile(absolutePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5878619bcaa2906 — Filesystem access.
repo/src/core/tools/ApplyPatchTool.ts:423 
				await fs.writeFile(moveAbsolutePath, newContent, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2897a59462356e9f — Filesystem access.
repo/src/core/tools/EditFileTool.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #743dd6b54e693898 — Filesystem access.
repo/src/core/tools/EditFileTool.ts:234 
					currentContent = await fs.readFile(absolutePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #777bd4a1b141f845 — Filesystem access.
repo/src/core/tools/EditTool.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a83de364e185599b — Filesystem access.
repo/src/core/tools/EditTool.ts:92 
				fileContent = await fs.readFile(absolutePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40bcc903ef99b445 — Filesystem access.
repo/src/core/tools/ExecuteCommandTool.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b86385ea0a2125c — Environment-variable access.
repo/src/core/tools/ExecuteCommandTool.ts:37 
	return process.env.ROO_CLI_RUNTIME === "1" ? 0 : requestedAgentTimeout

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0af8d357b3baefd3 — Filesystem access.
repo/src/core/tools/GenerateImageTool.ts:2 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f952a667598eb8f4 — Filesystem access.
repo/src/core/tools/GenerateImageTool.ts:87 
				const imageBuffer = await fs.readFile(inputImageFullPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52dd1bdbdea107b8 — Filesystem access.
repo/src/core/tools/GenerateImageTool.ts:237 
			await fs.writeFile(absolutePath, imageBuffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83395f38e8804315 — Filesystem access.
repo/src/core/tools/ReadCommandOutputTool.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a75009f9d44b7e1a — Filesystem access.
repo/src/core/tools/ReadFileTool.ts:12 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbaac5e72b16a9d3 — Filesystem access.
repo/src/core/tools/ReadFileTool.ts:217 
					const buffer = await fs.readFile(fullPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e62dac4b727af4a — Filesystem access.
repo/src/core/tools/ReadFileTool.ts:770 
				const rawContent = await fs.readFile(fullPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3d52a1285b2c8b7 — Filesystem access.
repo/src/core/tools/SearchReplaceTool.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62ba2526b4d5ce35 — Filesystem access.
repo/src/core/tools/SearchReplaceTool.ts:97 
				fileContent = await fs.readFile(absolutePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5e952e438192e79 — Filesystem access.
repo/src/core/tools/WriteToFileTool.ts:3 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68ff511786a5cffd — Filesystem access.
repo/src/core/tools/WriteToFileTool.ts:115 
					task.diffViewProvider.originalContent = await fs.readFile(absolutePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5e3793dd477d9a91 — Filesystem access.
repo/src/core/tools/__tests__/ReadCommandOutputTool.test.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #46e6f8ab9d71934e — Filesystem access.
repo/src/core/tools/__tests__/editFileTool.spec.ts:2 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e2ce2ae3d0dff282 — Filesystem access.
repo/src/core/tools/__tests__/editTool.spec.ts:2 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #079958e9f0825257 — Filesystem access.
repo/src/core/tools/__tests__/executeCommand.spec.ts:5 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #583408fedba207ab — Environment-variable access.
repo/src/core/tools/__tests__/executeCommandTool.spec.ts:51 
	const originalCliRuntime = process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ea0001379f35d34d — Environment-variable access.
repo/src/core/tools/__tests__/executeCommandTool.spec.ts:111 
		process.env.ROO_CLI_RUNTIME = originalCliRuntime

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5bf622c3e530eedc — Environment-variable access.
repo/src/core/tools/__tests__/executeCommandTool.spec.ts:295 
			process.env.ROO_CLI_RUNTIME = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f254c6ba7ce8383d — Environment-variable access.
repo/src/core/tools/__tests__/executeCommandTool.spec.ts:300 
			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #45acd4d171b115bb — Filesystem access.
repo/src/core/tools/__tests__/generateImageTool.test.ts:5 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #55ae6fffd26db89f — Filesystem access.
repo/src/core/tools/__tests__/searchReplaceTool.spec.ts:2 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c3806671148cf23 — Filesystem access.
repo/src/core/tools/helpers/imageHelpers.ts:2 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd052ede93aa22c3 — Filesystem access.
repo/src/core/tools/helpers/imageHelpers.ts:76 
	const fileBuffer = await fs.readFile(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70cc7033f2cb7a38 — Filesystem access.
repo/src/core/webview/ClineProvider.ts:3 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #893cf685b000ed8a — Environment-variable access.
repo/src/core/webview/ClineProvider.ts:829 
		const isCliRuntime = process.env.ROO_CLI_RUNTIME === "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60048fdd7643e7ca — Filesystem access.
repo/src/core/webview/ClineProvider.ts:1061 
			const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf0eb054a6127472 — Filesystem access.
repo/src/core/webview/ClineProvider.ts:1066 
				localPort = fs.readFileSync(portFilePath, "utf8").trim()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #d18c2bc737003f7a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/core/webview/ClineProvider.ts:1584 
			const response = await axios.post(`${baseUrlDomain}/api/v1/auth/keys`, { code })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #b1a284e8e37ae079 — Filesystem access.
repo/src/core/webview/ClineProvider.ts:1660 
				apiConversationHistory = JSON.parse(await fs.readFile(apiConversationHistoryFilePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bdcc48f85f3c2c58 — Environment-variable access.
repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:181 
		originalRooCliRuntimeEnv = process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0b9c1747ed1319bb — Environment-variable access.
repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:182 
		delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c90a4ff741edd18 — Environment-variable access.
repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:269 
			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0e311736d6e594bf — Environment-variable access.
repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:271 
			process.env.ROO_CLI_RUNTIME = originalRooCliRuntimeEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4d14a6b745caa99e — Environment-variable access.
repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:479 
			process.env.ROO_CLI_RUNTIME = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3ff0ff3830630b2a — Environment-variable access.
repo/src/core/webview/__tests__/ClineProvider.sticky-profile.spec.ts:513 
			process.env.ROO_CLI_RUNTIME = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #75781a47314f22d5 — Filesystem access.
repo/src/core/webview/__tests__/diagnosticsHandler.spec.ts:48 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c9e9b8af82029289 — Filesystem access.
repo/src/core/webview/__tests__/webviewMessageHandler.readFileContent.spec.ts:64 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2f23195a39733f06 — Filesystem access.
repo/src/core/webview/__tests__/webviewMessageHandler.spec.ts:144 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #195f0bf1e8a544bf — Filesystem access.
repo/src/core/webview/diagnosticsHandler.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #484d984609821b71 — Filesystem access.
repo/src/core/webview/diagnosticsHandler.ts:46 
			const content = await fs.readFile(apiHistoryPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3324939553de50b — Filesystem access.
repo/src/core/webview/diagnosticsHandler.ts:79 
		await fs.writeFile(tempFilePath, fullContent, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6123f0e09f1e2825 — Filesystem access.
repo/src/core/webview/webviewMessageHandler.ts:4 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59e7e55a6b1e7558 — Filesystem access.
repo/src/core/webview/webviewMessageHandler.ts:1141 
				const content = await fs.readFile(absPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33fc7190c71a27c4 — Filesystem access.
repo/src/core/webview/webviewMessageHandler.ts:1985 
							await fs.writeFile(saveUri.fsPath, result.yaml, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d056f78a4c8f375 — Filesystem access.
repo/src/core/webview/webviewMessageHandler.ts:2063 
					const yamlContent = await fs.readFile(fileUri[0].fsPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #740a867433bed42a — Filesystem access.
repo/src/core/webview/webviewMessageHandler.ts:2738 
				await fs.writeFile(filePath, templateContent, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca905f095252014f — Filesystem access.
repo/src/core/webview/webviewMessageHandler.ts:2841 
					await fs.writeFile(tempFilePath, message.text, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03e33f635561cfd8 — Filesystem access.
repo/src/core/webview/webviewMessageHandler.ts:2910 
				const content = await fs.readFile(sourceFilePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7306d2367c0241a — Filesystem access.
repo/src/core/webview/webviewMessageHandler.ts:2929 
				await fs.writeFile(tempFilePath, prettifiedContent, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c026ec3ce4faefec — Filesystem access.
repo/src/esbuild.mjs:2 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0ad15f41be6e70a — Filesystem access.
repo/src/extension.ts:3 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #915dc4c59e821d4e — Environment-variable access.
repo/src/extension.ts:237 
	const socketPath = process.env.ROO_CODE_IPC_SOCKET_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a70e76ef12f2b20b — Environment-variable access.
repo/src/extension.ts:241 
	if (process.env.NODE_ENV === "development") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7da86d54be9afd4 — Filesystem access.
repo/src/extension/api.ts:2 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c56cec6e4c253c70 — Environment-variable access.
repo/src/i18n/setup.ts:7 
const isTestEnv = process.env.NODE_ENV === "test"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d8eb48f6491e093 — Filesystem access.
repo/src/i18n/setup.ts:13 
		const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be022ab84219eb7a — Filesystem access.
repo/src/i18n/setup.ts:54 
						const content = fs.readFileSync(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f0c88ec8c3df024 — Filesystem access.
repo/src/integrations/editor/DiffViewProvider.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #424a9f1c215057ed — Filesystem access.
repo/src/integrations/editor/DiffViewProvider.ts:70 
			this.originalContent = await fs.readFile(absolutePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52c350e15009eb61 — Filesystem access.
repo/src/integrations/editor/DiffViewProvider.ts:81 
			await fs.writeFile(absolutePath, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35dce4c1011157ff — Filesystem access.
repo/src/integrations/editor/DiffViewProvider.ts:660 
		await fs.writeFile(absolutePath, content, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #73ad7735e20a24c7 — Filesystem access.
repo/src/integrations/misc/__tests__/read-lines.spec.ts:1 
import { promises as fs } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8568e393478c3717 — Filesystem access.
repo/src/integrations/misc/__tests__/read-lines.spec.ts:11 
		await fs.writeFile(testFile, content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ca72ccf381157d74 — Filesystem access.
repo/src/integrations/misc/__tests__/read-lines.spec.ts:77 
			await fs.writeFile(filepath, content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f50818dd9d1aa95c — Filesystem access.
repo/src/integrations/misc/export-markdown.ts:59 
		await vscode.workspace.fs.writeFile(saveUri, Buffer.from(markdownContent))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcb7295bcacc9935 — Filesystem access.
repo/src/integrations/misc/extract-text-from-xlsx.ts:49 
		await workbook.xlsx.readFile(filePathOrWorkbook)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e864cd87f5b513a1 — Filesystem access.
repo/src/integrations/misc/extract-text.ts:5 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf22d400aab07256 — Filesystem access.
repo/src/integrations/misc/extract-text.ts:12 
	const dataBuffer = await fs.readFile(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f2a29455ec61f4c — Filesystem access.
repo/src/integrations/misc/extract-text.ts:23 
	const data = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2044d979174f68aa — Filesystem access.
repo/src/integrations/misc/extract-text.ts:108 
		const rawContent = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41ad7ef043a00845 — Filesystem access.
repo/src/integrations/misc/image-handler.ts:57 
		await vscode.workspace.fs.writeFile(vscode.Uri.file(tempFilePath), imageBuffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bfff4e582edb15d — Filesystem access.
repo/src/integrations/misc/image-handler.ts:62 
				const imageData = await vscode.workspace.fs.readFile(vscode.Uri.file(tempFilePath))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #458ac0450c7f93f9 — Filesystem access.
repo/src/integrations/misc/image-handler.ts:118 
		await vscode.workspace.fs.writeFile(saveUri, imageBuffer)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6eb2406162c36dfb — Filesystem access.
repo/src/integrations/misc/line-counter.ts:1 
import fs, { createReadStream } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3eef6750fd40e69c — Filesystem access.
repo/src/integrations/misc/open-file.ts:107 
				await vscode.workspace.fs.writeFile(uriToProcess, Buffer.from(contentToCreate, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0871b1eb246c0b2d — Filesystem access.
repo/src/integrations/misc/process-images.ts:2 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d2ea973aeb9eadc — Filesystem access.
repo/src/integrations/misc/process-images.ts:23 
			const buffer = await fs.readFile(imagePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22c66d2fdabdf1b3 — Filesystem access.
repo/src/integrations/misc/read-lines.ts:9 
import { createReadStream } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #33e002bf4f5d378b — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/integrations/openai-codex/rate-limits.ts:82 
	const response = await fetch(WHAM_USAGE_URL, { method: "GET", headers })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #86ccb9ea43d16c5f — Filesystem access.
repo/src/integrations/terminal/OutputInterceptor.ts:1 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77f49290b1da71aa — Environment-variable access.
repo/src/integrations/terminal/ShellIntegrationManager.ts:21 
		if (process.env.ZDOTDIR) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b3ad86f7382d81e — Environment-variable access.
repo/src/integrations/terminal/ShellIntegrationManager.ts:22 
			env.ROO_ZDOTDIR = process.env.ZDOTDIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f8814ff0ea5ac9f — Filesystem access.
repo/src/integrations/terminal/ShellIntegrationManager.ts:48 
				vscode.workspace.fs.writeFile(vscode.Uri.file(zshrcPath), Buffer.from(zshrcContent)).then(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1908662b8d3b30e7 — Filesystem access.
repo/src/integrations/terminal/ShellIntegrationManager.ts:81 
			const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #31258691a76069ce — Environment-variable access.
repo/src/integrations/terminal/__tests__/ExecaTerminalProcess.spec.ts:78 
			process.env.EXISTING_VAR = "existing"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e2fcc938c0896a8c — Environment-variable access.
repo/src/integrations/terminal/__tests__/ExecaTerminalProcess.spec.ts:87 
			process.env.LANG = "C"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d7e1c6500b2347fc — Environment-variable access.
repo/src/integrations/terminal/__tests__/ExecaTerminalProcess.spec.ts:88 
			process.env.LC_ALL = "POSIX"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #136e6ff33ee5309e — Filesystem access.
repo/src/integrations/terminal/__tests__/OutputInterceptor.test.ts:1 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #629b861e2d7b52d7 — Environment-variable access.
repo/src/integrations/terminal/__tests__/TerminalProcessExec.cmd.spec.ts:236 
		console.log(`Running CMD tests on Windows ${process.env.OS} ${process.arch}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5b21f10025a4a572 — Environment-variable access.
repo/src/integrations/terminal/__tests__/setupTerminalTests.ts:48 
	process.env.PWSH_AVAILABLE = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63a5c6bd9c1d675e — Filesystem access.
repo/src/integrations/theme/getTheme.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5aaca630e60c97e — Filesystem access.
repo/src/integrations/theme/getTheme.ts:49 
						currentTheme = await fs.readFile(themePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e5d4fc66917cbe0 — Filesystem access.
repo/src/integrations/theme/getTheme.ts:58 
			currentTheme = await fs.readFile(
				path.join(getExtensionUri().fsPath, "integrations", "theme", "default-themes", filename),
				"utf-8",
			)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b20597d6b1cd54e — Filesystem access.
repo/src/integrations/theme/getTheme.ts:68 
			const includeThemeString = await fs.readFile(
				path.join(getExtensionUri().fsPath, "integrations", "theme", "default-themes", parsed.include),
				"utf-8",
			)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8adfec9a591d197 — Filesystem access.
repo/src/services/checkpoints/ShadowCheckpointService.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf841c24f902dfc0 — Filesystem access.
repo/src/services/checkpoints/ShadowCheckpointService.ts:217 
		await fs.writeFile(path.join(this.dotGitDir, "info", "exclude"), patterns.join("\n"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bedbb96c7c58c5ac — Filesystem access.
repo/src/services/checkpoints/ShadowCheckpointService.ts:400 
				: await fs.readFile(absPath, "utf8").catch(() => "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6a80980a3af3d2ad — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:3 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3d4972c8572eb299 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:41 
	await fs.writeFile(testFile, textFileContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d349318b2c8f5c39 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:81 
				await fs.writeFile(testFile, "Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8a8c32edc9eb32ea — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:85 
				await fs.writeFile(testFile, "Goodbye, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #41aa6b9b4cda3489 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:113 
				await fs.writeFile(newFile, "New file content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #859cc232d7e8a0c9 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:126 
				await fs.writeFile(fileToDelete, "New file content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #63c29c3f0d050f84 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:144 
				await fs.writeFile(testFile, "Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aebdf06428f6bc68 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:151 
				await fs.writeFile(testFile, "Hola, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bccd16b18ed9e221 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:160 
				expect(await fs.readFile(testFile, "utf-8")).toBe("Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0580245ee1a5325d — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:164 
				expect(await fs.readFile(testFile, "utf-8")).toBe("Hola, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1fd8a76afad90fed — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:169 
				expect(await fs.readFile(testFile, "utf-8")).toBe("Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1b0514b0444e0df5 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:178 
				await fs.writeFile(unstagedFile, "Initial unstaged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #316415f3815df961 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:179 
				await fs.writeFile(stagedFile, "Initial staged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #906f0bf7f7fdf568 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:180 
				await fs.writeFile(mixedFile, "Initial mixed")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c132ed25a32b96b6 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:185 
				await fs.writeFile(unstagedFile, "Modified unstaged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4038f34566bc5474 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:187 
				await fs.writeFile(stagedFile, "Modified staged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3b7248190fcb4efa — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:190 
				await fs.writeFile(mixedFile, "Modified mixed - staged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #648d9d592fa3ba0f — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:192 
				await fs.writeFile(mixedFile, "Modified mixed - unstaged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f121cb1aa8b13579 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:212 
				expect(await fs.readFile(unstagedFile, "utf-8")).toBe("Modified unstaged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #14c3c0fe2716faab — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:213 
				expect(await fs.readFile(stagedFile, "utf-8")).toBe("Modified staged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e6e8581bf93737cc — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:214 
				expect(await fs.readFile(mixedFile, "utf-8")).toBe("Modified mixed - unstaged")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #62f97856cd9836da — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:231 
				await fs.writeFile(testFile, "Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5917dc49dc1353d6 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:242 
				await fs.writeFile(untrackedFile, "I am untracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8c8c336e7b731e63 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:254 
				await fs.writeFile(testFile, "Changed tracked file")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d8565e3b04965e8a — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:260 
				expect(await fs.readFile(untrackedFile, "utf-8")).toBe("I am untracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d68cdf2202d9e2c3 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:261 
				expect(await fs.readFile(testFile, "utf-8")).toBe("Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b3a913aef99e8f1b — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:266 
				expect(await fs.readFile(untrackedFile, "utf-8")).toBe("I am untracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5efc75cca786cf8f — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:267 
				expect(await fs.readFile(testFile, "utf-8")).toBe("Changed tracked file")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a6e6267163ced72d — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:271 
				await fs.writeFile(testFile, "I am tracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c25c0c6f27df8999 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:273 
				await fs.writeFile(untrackedFile, "I am untracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #56c8ee71de7c1a92 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:283 
				await expect(fs.readFile(testFile, "utf-8")).rejects.toThrow()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #47238ccd517070e3 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:284 
				await expect(fs.readFile(untrackedFile, "utf-8")).rejects.toThrow()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #087ff89bd76cbf03 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:288 
				expect(await fs.readFile(testFile, "utf-8")).toBe("I am tracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #93b61cdad45cba24 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:289 
				expect(await fs.readFile(untrackedFile, "utf-8")).toBe("I am untracked!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c50cf9540b585721 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:293 
				await expect(fs.readFile(testFile, "utf-8")).rejects.toThrow()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fe864ff6e4e053d9 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:294 
				await expect(fs.readFile(untrackedFile, "utf-8")).rejects.toThrow()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8f03728257fea761 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:300 
				await fs.writeFile(ignoredFile, "Initial ignored content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b6606b4a4c7a793e — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:305 
				await fs.writeFile(ignoredFile, "Modified ignored content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d1177d4741241cd4 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:310 
				expect(await fs.readFile(ignoredFile, "utf-8")).toBe("Modified ignored content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1cd8677b6e841d66 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:316 
				await fs.writeFile(gitattributesPath, "*.lfs filter=lfs diff=lfs merge=lfs -text")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6d7bbb5de1306f63 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:321 
				expect((await fs.readFile(excludesPath, "utf-8")).split("\n")).not.toContain("*.lfs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e3cd2ab3125aa9b5 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:323 
				expect((await fs.readFile(excludesPath, "utf-8")).split("\n")).toContain("*.lfs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2a8cbf1e3e73bd36 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:330 
				await fs.writeFile(lfsFile, "Binary file content simulation")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a223c4558a111149 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:335 
				await fs.writeFile(lfsFile, "Modified binary content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a82f4a983060599c — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:340 
				expect(await fs.readFile(lfsFile, "utf-8")).toBe("Modified binary content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b4ed8456255053ac — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:351 
				await fs.writeFile(newTestFile, "Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2c28b6f8154408f5 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:352 
				expect(await fs.readFile(newTestFile, "utf-8")).toBe("Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fc88b6f298401650 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:363 
				await fs.writeFile(newTestFile, "Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8024cd06d1bc27b6 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:366 
				expect(await fs.readFile(newTestFile, "utf-8")).toBe("Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d07330d1b2e88f39 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:370 
				expect(await fs.readFile(newTestFile, "utf-8")).toBe("Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cbc32c9587c67b63 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:374 
				expect(await fs.readFile(newTestFile, "utf-8")).toBe("Ahoy, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d7c434eac0874ab1 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:404 
				await fs.writeFile(nestedFile, "Content in nested repo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8821d5dadce5698e — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:410 
				await fs.writeFile(mainFile, "Content in main repo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #08adae84ead46215 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:417 
				await fs.writeFile(headFile, "HEAD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f0001e3cf80a9eb3 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:466 
				await fs.writeFile(mainFile, "Content in main repo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #81b62d0649d991ad — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:495 
				await fs.writeFile(newTestFile, "Testing events!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #18d35425c0d89437 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:544 
				await fs.writeFile(testFile, "Changed content for checkpoint event test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #12992d96d8f6a9c4 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:558 
				await fs.writeFile(testFile, "Content for restore test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4df6404c1ed08716 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:563 
				await fs.writeFile(testFile, "Changed after checkpoint")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #19e9b1234cb4e372 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:580 
				expect(await fs.readFile(testFile, "utf-8")).toBe("Content for restore test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #47aca35a9352f4c6 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:611 
				await fs.writeFile(testFile, "Content for multiple listeners test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fedf18705693089d — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:633 
				await fs.writeFile(testFile, "Content for remove listener test - part 1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7b4ba163f85ce09d — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:644 
				await fs.writeFile(testFile, "Content for remove listener test - part 2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #65df8c5ec9bd8bd0 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:675 
				await fs.writeFile(testFile, "Modified content for allowEmpty test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7a6bc956604c4a47 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:682 
				await fs.writeFile(testFile, "Another modification for allowEmpty test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ae7565c5f551001d — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:703 
				await fs.writeFile(testFile, "Setup content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d9999d229a10477 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:707 
				await fs.writeFile(testFile, "Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #05de15f784392ca6 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:758 
				await fs.writeFile(testFile, "Regular change")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #395bf8f5b3bc183a — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:767 
				await fs.writeFile(testFile, "Another regular change")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #54b6cca294a901e0 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:773 
				expect(await fs.readFile(testFile, "utf-8")).toBe("Regular change")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a32d29ab15c28014 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:777 
				expect(await fs.readFile(testFile, "utf-8")).toBe("Regular change")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #68ab6f770946747a — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:780 
				expect(await fs.readFile(testFile, "utf-8")).toBe("Another regular change")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8cdd5da100f30780 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:785 
				await fs.writeFile(testFile, "Content before empty")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fa975a338f99f2da — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:816 
				await fs.writeFile(testFile, "Work done in new task")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fa1735957f23e43d — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:824 
				expect(await fs.readFile(testFile, "utf-8")).toBe("Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6500c4d1e726352f — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:833 
				await fs.writeFile(path.join(hooksDir, "pre-commit"), "#!/bin/sh\nexit 1", { mode: 0o755 })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c6a8621450cd0450 — Environment-variable access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:839 
				const originalTemplateDir = process.env.GIT_TEMPLATE_DIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #359982ab1bec9f86 — Environment-variable access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:840 
				process.env.GIT_TEMPLATE_DIR = templateDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0c9fec87173fbb99 — Environment-variable access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:865 
						process.env.GIT_TEMPLATE_DIR = originalTemplateDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d21125d1b730ed22 — Environment-variable access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:867 
						delete process.env.GIT_TEMPLATE_DIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9a9927b7d4f4a000 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:892 
				await fs.writeFile(externalFile, "External content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2cc8e43e0be185ce — Environment-variable access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:908 
				const originalGitDir = process.env.GIT_DIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #db1f2fff60e5e800 — Environment-variable access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:910 
				process.env.GIT_DIR = externalDotGit

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #407ed3e58ff10904 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:926 
					await fs.writeFile(testWorkspaceFile, "Modified with GIT_DIR set")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aa69f02be81f5638 — Environment-variable access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:932 
					delete process.env.GIT_DIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0794da4454432268 — Environment-variable access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:937 
					process.env.GIT_DIR = externalDotGit

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f3d3a5795c9661c9 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:949 
					await fs.writeFile(testWorkspaceFile, "Another modification")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1f87bcc884a0cb87 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:951 
					expect(await fs.readFile(testWorkspaceFile, "utf-8")).toBe("Modified with GIT_DIR set")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #648ba82126948c77 — Environment-variable access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:955 
						process.env.GIT_DIR = originalGitDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #28e177415441f7e9 — Environment-variable access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:957 
						delete process.env.GIT_DIR

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a275cedff701af03 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:980 
			await fs.writeFile(path.join(workspaceDir, "main.txt"), "main content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a3b49e49aabf5975 — Filesystem access.
repo/src/services/checkpoints/__tests__/ShadowCheckpointService.spec.ts:1015 
			await fs.writeFile(path.join(workspaceDir, "main.txt"), "main content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ad1941a52364b670 — Filesystem access.
repo/src/services/checkpoints/__tests__/excludes.spec.ts:4 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5a6e49d13956f36 — Filesystem access.
repo/src/services/checkpoints/excludes.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1951ccdd7385eca — Filesystem access.
repo/src/services/checkpoints/excludes.ts:191 
			return (await fs.readFile(attributesPath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #412235ae7c71caed — Filesystem access.
repo/src/services/code-index/cache-manager.ts:38 
			const cacheData = await vscode.workspace.fs.readFile(this.cachePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #970ba0dda8aa906c — Filesystem access.
repo/src/services/code-index/manager.ts:12 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb2f235e5c668770 — Filesystem access.
repo/src/services/code-index/manager.ts:374 
			const content = await fs.readFile(ignorePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #136625fb0c5ebc36 — Filesystem access.
repo/src/services/code-index/processors/__tests__/parser.spec.ts:6 
import { readFile } from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5d0141a780917cf2 — Filesystem access.
repo/src/services/code-index/processors/__tests__/scanner.spec.ts:4 
import { stat } from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #525010b5a290a5ff — Filesystem access.
repo/src/services/code-index/processors/file-watcher.ts:446 
			const fileContent = await vscode.workspace.fs.readFile(vscode.Uri.file(filePath))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29a7e9b37eed1874 — Filesystem access.
repo/src/services/code-index/processors/parser.ts:1 
import { readFile } from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86e95256c4c0f26d — Filesystem access.
repo/src/services/code-index/processors/parser.ts:51 
				content = await readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b51b4f6a311a6f92 — Filesystem access.
repo/src/services/code-index/processors/scanner.ts:4 
import { stat } from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cdb8e5a0f7e9a62f — Filesystem access.
repo/src/services/code-index/processors/scanner.ts:141 
					const content = await vscode.workspace.fs
						.readFile(vscode.Uri.file(filePath))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a60894d5cdee6e39 — Filesystem access.
repo/src/services/command/__tests__/frontmatter-commands.spec.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ed5035e97a6e9add — Filesystem access.
repo/src/services/command/__tests__/symlink-commands.spec.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4480667100dba7c3 — Filesystem access.
repo/src/services/command/commands.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea670bf7e7be0288 — Filesystem access.
repo/src/services/command/commands.ts:3 
import { Dirent } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #271b3204e01ea1e0 — Filesystem access.
repo/src/services/command/commands.ts:195 
			content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed673f46a0b25b45 — Filesystem access.
repo/src/services/command/commands.ts:201 
					content = await fs.readFile(symlinkedPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0bc4e651a70ed3e — Filesystem access.
repo/src/services/command/commands.ts:299 
				const content = await fs.readFile(resolvedPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7b0e96e91b4f3abb — Filesystem access.
repo/src/services/glob/__tests__/gitignore-integration.spec.ts:2 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9672c317a328de1c — Filesystem access.
repo/src/services/glob/__tests__/gitignore-integration.spec.ts:56 
		await fs.promises.writeFile(path.join(tempDir, ".gitignore"), "node_modules/\nbuild/\ndist/\n*.log\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d35f7ced7e2ee833 — Filesystem access.
repo/src/services/glob/__tests__/gitignore-integration.spec.ts:59 
		await fs.promises.writeFile(path.join(tempDir, "src", "index.ts"), "console.log('hello')")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9026daea65bb4d8c — Filesystem access.
repo/src/services/glob/__tests__/gitignore-integration.spec.ts:60 
		await fs.promises.writeFile(path.join(tempDir, "allowed-dir", "file.txt"), "content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d4ff0afebf4b1acf — Filesystem access.
repo/src/services/glob/__tests__/gitignore-integration.spec.ts:114 
		await fs.promises.writeFile(path.join(tempDir, ".gitignore"), "node_modules/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #587aeaf9423eefde — Filesystem access.
repo/src/services/glob/__tests__/gitignore-integration.spec.ts:117 
		await fs.promises.writeFile(path.join(tempDir, "src", ".gitignore"), "temp/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #49f7cfe483047789 — Filesystem access.
repo/src/services/glob/__tests__/gitignore-integration.spec.ts:164 
		await fs.promises.writeFile(path.join(tempDir, ".gitignore"), "node_modules/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c7cce0ce69eaf6e2 — Filesystem access.
repo/src/services/glob/__tests__/gitignore-test.spec.ts:2 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #832ced7288e85e0f — Filesystem access.
repo/src/services/glob/__tests__/gitignore-test.spec.ts:55 
		await fs.promises.writeFile(path.join(tempDir, ".gitignore"), "node_modules/\nbuild/\nignored-dir/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f60318d656e2a716 — Filesystem access.
repo/src/services/glob/__tests__/gitignore-test.spec.ts:58 
		await fs.promises.writeFile(path.join(tempDir, "src", "index.ts"), "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #10e9ee07b27668b6 — Filesystem access.
repo/src/services/glob/__tests__/gitignore-test.spec.ts:59 
		await fs.promises.writeFile(path.join(tempDir, "node_modules", "package.json"), "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #556ee4132a391b35 — Filesystem access.
repo/src/services/glob/__tests__/gitignore-test.spec.ts:60 
		await fs.promises.writeFile(path.join(tempDir, "build", "output.js"), "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b71e79b8a77929b5 — Filesystem access.
repo/src/services/glob/__tests__/gitignore-test.spec.ts:61 
		await fs.promises.writeFile(path.join(tempDir, "ignored-dir", "file.txt"), "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e182f0c4e3449941 — Filesystem access.
repo/src/services/glob/__tests__/gitignore-test.spec.ts:108 
		await fs.promises.writeFile(path.join(tempDir, ".gitignore"), "node_modules/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ddeea3b4554c3fc1 — Filesystem access.
repo/src/services/glob/__tests__/gitignore-test.spec.ts:111 
		await fs.promises.writeFile(path.join(tempDir, "src", ".gitignore"), "temp/\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #04da7205f6faaa11 — Filesystem access.
repo/src/services/glob/__tests__/list-files-limit.spec.ts:2 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #af4bddc3fbcf5a89 — Filesystem access.
repo/src/services/glob/__tests__/list-files.spec.ts:55 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80cd0f9c33fb09f2 — Filesystem access.
repo/src/services/glob/list-files.ts:3 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5a14adfac8421c2 — Filesystem access.
repo/src/services/glob/list-files.ts:340 
			const content = await fs.promises.readFile(gitignoreFile, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc769011f6123bc0 — Filesystem access.
repo/src/services/mcp/McpHub.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ffeda246f5ae049 — Environment-variable access.
repo/src/services/mcp/McpHub.ts:286 
		if (process.env.NODE_ENV === "test") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #414b699011480660 — Filesystem access.
repo/src/services/mcp/McpHub.ts:326 
			const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e92ccaa7e8b263b4 — Environment-variable access.
repo/src/services/mcp/McpHub.ts:364 
		if (process.env.NODE_ENV === "test" || !vscode.workspace.createFileSystemWatcher) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e4e9ca6a95a7093 — Filesystem access.
repo/src/services/mcp/McpHub.ts:412 
			const content = await fs.readFile(projectMcpPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62c9085a51b74a15 — Filesystem access.
repo/src/services/mcp/McpHub.ts:498 
			await fs.writeFile(
				mcpSettingsFilePath,
				`{
  "mcpServers": {

  }
}`,
			)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0b8350edfea371d — Environment-variable access.
repo/src/services/mcp/McpHub.ts:512 
		if (process.env.NODE_ENV === "test" || !vscode.workspace.createFileSystemWatcher) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ea3da017b1fa2be — Filesystem access.
repo/src/services/mcp/McpHub.ts:555 
			const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #7798782358f5fabe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/services/mcp/McpHub.ts:989 
			const response = await connection.client.request({ method: "tools/list" }, ListToolsResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #58f489f2f0ba69d0 — Filesystem access.
repo/src/services/mcp/McpHub.ts:1005 
						const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6f3e1b868d95941 — Filesystem access.
repo/src/services/mcp/McpHub.ts:1011 
					const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #b6c49adf1fbaba6e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/services/mcp/McpHub.ts:1046 
			const response = await connection.client.request({ method: "resources/list" }, ListResourcesResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #52115cfa851d1330 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/services/mcp/McpHub.ts:1063 
			const response = await connection.client.request(
				{ method: "resources/templates/list" },
				ListResourceTemplatesResultSchema,
			)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #1e71c9730f7945e7 — Filesystem access.
repo/src/services/mcp/McpHub.ts:1324 
				const globalContent = await fs.readFile(globalPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13efa5d8d965ccf4 — Filesystem access.
repo/src/services/mcp/McpHub.ts:1336 
					const projectContent = await fs.readFile(projectPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fc8ee3909e40c9e — Filesystem access.
repo/src/services/mcp/McpHub.ts:1369 
		const content = await fs.readFile(settingsPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46a3095c255b9fe9 — Filesystem access.
repo/src/services/mcp/McpHub.ts:1378 
				const projectContent = await fs.readFile(projectMcpPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #909f4931092b057e — Filesystem access.
repo/src/services/mcp/McpHub.ts:1519 
		const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3133d3485d473e27 — Filesystem access.
repo/src/services/mcp/McpHub.ts:1571 
		const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08d423a45ec8b934 — Filesystem access.
repo/src/services/mcp/McpHub.ts:1675 
			const content = await fs.readFile(configPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c83c17211561ff06 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/services/mcp/McpHub.ts:1719 
		return await connection.client.request(
			{
				method: "resources/read",
				params: {
					uri,
				},
			},
			ReadResourceResultSchema,
		)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #78670a68f8ba5e7f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/services/mcp/McpHub.ts:1756 
		return await connection.client.request(
			{
				method: "tools/call",
				params: {
					name: toolName,
					arguments: toolArguments,
				},
			},
			CallToolResultSchema,
			{
				timeout,
			},
		)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #c37089c3840aabd6 — Filesystem access.
repo/src/services/mcp/McpHub.ts:1813 
		const content = await fs.readFile(normalizedPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #08fc88e2fb37d9c2 — Filesystem access.
repo/src/services/mcp/__tests__/McpHub.spec.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8726505ddbcf3b94 — Filesystem access.
repo/src/services/mcp/__tests__/McpHub.spec.ts:48 
		return fs.writeFile(filePath, JSON.stringify(data), "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52b88bb53651cf0f — Filesystem access.
repo/src/services/roo-config/index.ts:3 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27c3ded4458f6a72 — Filesystem access.
repo/src/services/roo-config/index.ts:147 
		return await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbcda019989b5cb5 — Filesystem access.
repo/src/services/search/file-search.ts:3 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecf047f3104df135 — Filesystem access.
repo/src/services/skills/SkillsManager.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a7f5509187c3b60 — Filesystem access.
repo/src/services/skills/SkillsManager.ts:102 
			const fileContent = await fs.readFile(skillMdPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69b0601a9f00f038 — Filesystem access.
repo/src/services/skills/SkillsManager.ts:276 
		const fileContent = await fs.readFile(skill.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81e0558e10c69373 — Filesystem access.
repo/src/services/skills/SkillsManager.ts:418 
		await fs.writeFile(skillMdPath, skillContent, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #417c6787699b137a — Filesystem access.
repo/src/services/skills/SkillsManager.ts:542 
		const fileContent = await fs.readFile(skill.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac0a707acf8f59e6 — Filesystem access.
repo/src/services/skills/SkillsManager.ts:558 
		await fs.writeFile(skill.path, newContent, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dc9a70086dde192 — Environment-variable access.
repo/src/services/skills/SkillsManager.ts:650 
		if (process.env.NODE_ENV === "test" || !vscode.workspace.createFileSystemWatcher) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #285b82de2012aa0d — Environment-variable access.
repo/src/services/skills/SkillsManager.ts:688 
		if (process.env.NODE_ENV === "test" || !vscode.workspace.createFileSystemWatcher) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d365579d787f480 — Filesystem access.
repo/src/services/tree-sitter/__tests__/helpers.ts:2 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #510415310f9459ca — Environment-variable access.
repo/src/services/tree-sitter/__tests__/helpers.ts:19 
export const DEBUG = process.env.DEBUG ? parseInt(process.env.DEBUG, 10) : 0

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e2494038e7cac2f2 — Filesystem access.
repo/src/services/tree-sitter/__tests__/markdownIntegration.spec.ts:13 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #695ae3e42632dc87 — Filesystem access.
repo/src/services/tree-sitter/index.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55285102d21aa885 — Filesystem access.
repo/src/services/tree-sitter/index.ts:122 
		const fileContent = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d90ca67956b31498 — Filesystem access.
repo/src/services/tree-sitter/index.ts:305 
	const fileContent = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #570930a8cd6e151b — Environment-variable access.
repo/src/shared/package.ts:11 
	name: process.env.PKG_NAME || name,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18c7397b7041c357 — Environment-variable access.
repo/src/shared/package.ts:12 
	version: process.env.PKG_VERSION || version,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27874ef7cc778768 — Environment-variable access.
repo/src/shared/package.ts:13 
	outputChannel: process.env.PKG_OUTPUT_CHANNEL || "Roo-Code",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6aa712e8bc8afb6 — Environment-variable access.
repo/src/shared/package.ts:14 
	sha: process.env.PKG_SHA,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #50ebed9ec59de3b5 — Filesystem access.
repo/src/utils/__tests__/autoImportSettings.spec.ts:76 
import fsPromises from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7479c2fe3e631752 — Environment-variable access.
repo/src/utils/__tests__/config.spec.ts:20 
		process.env.TEST_VAR = "testValue"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e9a805d5b6a41603 — Environment-variable access.
repo/src/utils/__tests__/config.spec.ts:28 
		process.env.API_KEY = "12345"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #988f1435a2c7148b — Environment-variable access.
repo/src/utils/__tests__/config.spec.ts:29 
		process.env.ENDPOINT = "https://example.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2eb81a20e8696ce — Environment-variable access.
repo/src/utils/__tests__/config.spec.ts:80 
		process.env.EXISTING_VAR = "exists"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #32d5528413e10af1 — Environment-variable access.
repo/src/utils/__tests__/config.spec.ts:116 
		process.env.MUTATE_TEST = "mutated"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c62e6c62fcf3a291 — Filesystem access.
repo/src/utils/__tests__/git.spec.ts:2 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f62e47df46472611 — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:67 
		delete process.env.GLOBAL_AGENT_HTTP_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f87b7ad3160c26bc — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:68 
		delete process.env.GLOBAL_AGENT_HTTPS_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d16e4fa0051fc609 — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:69 
		delete process.env.GLOBAL_AGENT_NO_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #af06eebea91f4060 — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:70 
		delete process.env.NODE_TLS_REJECT_UNAUTHORIZED

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #764130cf989a1a16 — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:103 
			expect(process.env.GLOBAL_AGENT_HTTP_PROXY).toBeUndefined()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1e0e7762390cda97 — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:104 
			expect(process.env.GLOBAL_AGENT_HTTPS_PROXY).toBeUndefined()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #28478594df1accde — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:118 
			expect(process.env.GLOBAL_AGENT_HTTP_PROXY).toBe("http://localhost:8080")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7ac1db440cf14797 — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:119 
			expect(process.env.GLOBAL_AGENT_HTTPS_PROXY).toBe("http://localhost:8080")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c055019a0fe67b44 — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:133 
			expect(process.env.NODE_TLS_REJECT_UNAUTHORIZED).toBeUndefined()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #534a3999a76f439c — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:147 
			expect(process.env.NODE_TLS_REJECT_UNAUTHORIZED).toBe("0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c83a2a0a4f1fb30 — Environment-variable access.
repo/src/utils/__tests__/networkProxy.spec.ts:305 
			expect(process.env.NODE_TLS_REJECT_UNAUTHORIZED).toBeUndefined()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3915a97b6226abb1 — Filesystem access.
repo/src/utils/__tests__/safeWriteJson.test.ts:1 
import * as actualFsPromises from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #af2aedc65b8b134a — Filesystem access.
repo/src/utils/__tests__/safeWriteJson.test.ts:2 
import * as fsSyncActual from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #44a166b0d3c370a4 — Filesystem access.
repo/src/utils/__tests__/safeWriteJson.test.ts:46 
import * as fs from "fs/promises" // This will now be the mocked version

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #096f535c93132732 — Filesystem access.
repo/src/utils/__tests__/safeWriteJson.test.ts:73 
		await fs.writeFile(currentTestFilePath, JSON.stringify({ initial: "content" }))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c636fa1d38d868df — Filesystem access.
repo/src/utils/__tests__/safeWriteJson.test.ts:86 
		const readContent = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5599ada026cc1c2f — Filesystem access.
repo/src/utils/__tests__/safeWriteJson.test.ts:384 
		await fs.writeFile(lockTestFilePath, JSON.stringify({ initial: "lock test content" }))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #610f3f240612c321 — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:55 
		delete process.env.SHELL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #db49b03e77848c9b — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:56 
		delete process.env.COMSPEC

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #435895abe10f69dc — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:128 
			process.env.COMSPEC = "C:\\Windows\\System32\\cmd.exe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #30647549016145c7 — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:192 
			process.env.COMSPEC = "D:\\CustomCmd\\cmd.exe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #06b9799434eee5d0 — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:244 
			process.env.SHELL = "/usr/local/bin/zsh"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5948f506906aca90 — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:300 
			process.env.SHELL = "/usr/bin/fish"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #908e5733accf1cdc — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:335 
			process.env.SHELL = "/bin/zsh"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1c93c93c9db48ed6 — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:347 
			delete process.env.SHELL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #89a79fe893de2811 — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:432 
			process.env.COMSPEC = "C:\\Windows\\System32\\cmd.exe"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0acef8406faa3c71 — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:462 
			process.env.SHELL = "/opt/custom/shell"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9bdd9f8ea6285d60 — Environment-variable access.
repo/src/utils/__tests__/shell.spec.ts:482 
			delete process.env.SHELL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aace123ff704ffc2 — Filesystem access.
repo/src/utils/fs.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d59622f8ce82cdf1 — Filesystem access.
repo/src/utils/git.ts:3 
import { promises as fs } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6eb6e15d6be383bf — Filesystem access.
repo/src/utils/git.ts:37 
			const configContent = await fs.readFile(configPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5afa730fc8c2c57f — Filesystem access.
repo/src/utils/git.ts:65 
				const headContent = await fs.readFile(headPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d12285264e89282 — Filesystem access.
repo/src/utils/logging/CompactTransport.ts:5 
import { writeFileSync, mkdirSync } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f0c62f1812b1748 — Filesystem access.
repo/src/utils/logging/CompactTransport.ts:65 
			writeFileSync(this.filePath, "", { flag: "w" })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a2825e04a585cb8 — Filesystem access.
repo/src/utils/logging/CompactTransport.ts:73 
			writeFileSync(this.filePath, JSON.stringify(sessionStart) + "\n", { flag: "w" })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27a2c6a253dd3e4e — Filesystem access.
repo/src/utils/logging/CompactTransport.ts:104 
			writeFileSync(this.filePath, output, { flag: "a" })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96be488cbd5f5e5c — Filesystem access.
repo/src/utils/logging/CompactTransport.ts:119 
			writeFileSync(this.filePath, JSON.stringify(sessionEnd) + "\n", { flag: "a" })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f323951a65929e18 — Filesystem access.
repo/src/utils/logging/__tests__/CompactTransport.spec.ts:4 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c30f9961d33a93d9 — Filesystem access.
repo/src/utils/logging/__tests__/CompactTransport.spec.ts:68 
			const fileContent = fs.readFileSync(testLogPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #615b964d86e48d85 — Filesystem access.
repo/src/utils/logging/__tests__/CompactTransport.spec.ts:95 
			const fileContent = fs.readFileSync(testLogPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #50b95d429fe14e4d — Filesystem access.
repo/src/utils/logging/__tests__/CompactTransport.spec.ts:112 
			const fileContent = fs.readFileSync(testLogPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e4142e2f7219d0b3 — Filesystem access.
repo/src/utils/logging/__tests__/CompactTransport.spec.ts:170 
			const fileContent = fs.readFileSync(testLogPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89aefb994237bb0d — Environment-variable access.
repo/src/utils/logging/index.ts:25 
export const logger = process.env.NODE_ENV === "test" ? new CompactLogger() : noopLogger

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e605de8a5bd98fd0 — Filesystem access.
repo/src/utils/migrateSettings.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4893b9915539f56 — Filesystem access.
repo/src/utils/migrateSettings.ts:92 
		const jsonContent = await fs.readFile(oldJsonPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02e6a3a740ea88d8 — Filesystem access.
repo/src/utils/migrateSettings.ts:102 
			await fs.writeFile(newYamlPath, yamlContent, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b036d78fb359e26 — Environment-variable access.
repo/src/utils/networkProxy.ts:78 
		process.env.NODE_TLS_REJECT_UNAUTHORIZED = originalNodeTlsRejectUnauthorized

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed02fae34409b3d2 — Environment-variable access.
repo/src/utils/networkProxy.ts:80 
		delete process.env.NODE_TLS_REJECT_UNAUTHORIZED

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40e84c1d9d2e497a — Environment-variable access.
repo/src/utils/networkProxy.ts:100 
		originalNodeTlsRejectUnauthorized = process.env.NODE_TLS_REJECT_UNAUTHORIZED

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e5f919274f310d6 — Environment-variable access.
repo/src/utils/networkProxy.ts:104 
	process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0" // lgtm[js/disabling-certificate-validation]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6f6010a99f1271e — Environment-variable access.
repo/src/utils/networkProxy.ts:324 
		process.env.GLOBAL_AGENT_HTTP_PROXY = config.serverUrl

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f50419f0f64ef3b9 — Environment-variable access.
repo/src/utils/networkProxy.ts:325 
		process.env.GLOBAL_AGENT_HTTPS_PROXY = config.serverUrl

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96f4aa8c66efa3ca — Environment-variable access.
repo/src/utils/networkProxy.ts:326 
		process.env.GLOBAL_AGENT_NO_PROXY = "" // Proxy all requests

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30d57b00147b07eb — Filesystem access.
repo/src/utils/safeWriteJson.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d07f1b932c546ee8 — Filesystem access.
repo/src/utils/safeWriteJson.ts:2 
import * as fsSync from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25e879bea3f9a469 — Filesystem access.
repo/src/utils/storage.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63a083757af41eb7 — Filesystem access.
repo/src/utils/storage.ts:4 
import { constants as fsConstants } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm)

npm first-party
expand_more 12 low-confidence finding(s)
low env_fs test-only #254b8cc98b817282 — Filesystem access.
repo/scripts/bootstrap.mjs:4 
import { existsSync, writeFileSync } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #54f123888685cb2c — Environment-variable access.
repo/scripts/bootstrap.mjs:6 
if (process.env.BOOTSTRAP_IN_PROGRESS) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #785ecf79ea5c24e6 — Environment-variable access.
repo/scripts/bootstrap.mjs:12 
if (process.env.npm_execpath && process.env.npm_execpath.includes("pnpm")) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #673a87aae18ea865 — Filesystem access.
repo/scripts/bootstrap.mjs:38 
		writeFileSync("package.json", JSON.stringify({ name: "temp", private: true }, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #820f759d0cc0b06f — Filesystem access.
repo/scripts/find-missing-i18n-key.js:1 
const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3d4f2e94c1b7c751 — Filesystem access.
repo/scripts/find-missing-i18n-key.js:104 
		const json = JSON.parse(fs.readFileSync(filePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7fc6282e0bcf8665 — Filesystem access.
repo/scripts/find-missing-i18n-key.js:130 
				const content = fs.readFileSync(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #544ccfa92e8fa7b5 — Filesystem access.
repo/scripts/find-missing-translations.js:15 
const { promises: fs } = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7edc1b294e8d1381 — Filesystem access.
repo/scripts/install-vsix.js:2 
const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f1e1ac0fa55f6f3e — Filesystem access.
repo/scripts/install-vsix.js:35 
				fs.readFileSync("./apps/vscode-nightly/package.nightly.json", "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dba83869bc8389b9 — Filesystem access.
repo/scripts/install-vsix.js:37 
			const srcPackageJson = JSON.parse(fs.readFileSync("./src/package.json", "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d529554fb2c55e5e — Filesystem access.
repo/scripts/install-vsix.js:42 
			const packageJson = JSON.parse(fs.readFileSync("./src/package.json", "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/cli

npm first-party
expand_more 92 low-confidence finding(s)
low env_fs test-only #8dc2e66f55280ca3 — Filesystem access.
repo/apps/cli/scripts/integration/cases/create-with-session-id-resume-loads-correct-session.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6d68afde06e8895f — Environment-variable access.
repo/apps/cli/scripts/integration/cases/create-with-session-id-resume-loads-correct-session.ts:317 
	const cliRoot = process.env.ROO_CLI_ROOT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0746a3dd655c6182 — Environment-variable access.
repo/apps/cli/scripts/integration/cases/create-with-session-id-resume-loads-correct-session.ts:318 
		? path.resolve(process.env.ROO_CLI_ROOT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a95d47c981ce9694 — Environment-variable access.
repo/apps/cli/scripts/integration/lib/stream-harness.ts:67 
	const cliRoot = process.env.ROO_CLI_ROOT ? path.resolve(process.env.ROO_CLI_ROOT) : defaultCliRoot

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6f65244c4e30b356 — Filesystem access.
repo/apps/cli/scripts/integration/run.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef3a7f6995fb1447 — Filesystem access.
repo/apps/cli/src/__tests__/index.test.ts:16 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #554820e65c5146f4 — Environment-variable access.
repo/apps/cli/src/__tests__/index.test.ts:23 
const RUN_INTEGRATION_TESTS = process.env.RUN_CLI_INTEGRATION_TESTS === "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c0e6fe9213bba543 — Environment-variable access.
repo/apps/cli/src/__tests__/index.test.ts:24 
const OPENROUTER_API_KEY = process.env.OPENROUTER_API_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #094fd47e393a6abf — Filesystem access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:4 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dd97e82d7ac528c0 — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:85 
	const initialRooCliRuntimeEnv = process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #958c90a09158efda — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:90 
			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #47f75f058125022f — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:92 
			process.env.ROO_CLI_RUNTIME = initialRooCliRuntimeEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d8b031146965cdf7 — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:101 
			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #301a2a539351897c — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:103 
			process.env.ROO_CLI_RUNTIME = initialRooCliRuntimeEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #671e4eec3c4a8598 — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:157 
			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3b081724411101db — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:159 
			expect(process.env.ROO_CLI_RUNTIME).toBe("1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4353c327150891b3 — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:493 
			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b9d5d8d873ef561 — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:495 
			expect(process.env.ROO_CLI_RUNTIME).toBe("1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #384db3e9284d0281 — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:499 
			expect(process.env.ROO_CLI_RUNTIME).toBeUndefined()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a1be5eb3802fef6f — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:503 
			process.env.ROO_CLI_RUNTIME = "preexisting-value"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #54fe8b8fcc04e34d — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:505 
			expect(process.env.ROO_CLI_RUNTIME).toBe("1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3b6bdca1a1cbb663 — Environment-variable access.
repo/apps/cli/src/agent/__tests__/extension-host.test.ts:509 
			expect(process.env.ROO_CLI_RUNTIME).toBe("preexisting-value")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc56c1b16101e50e — Filesystem access.
repo/apps/cli/src/agent/extension-host.ts:14 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49ffdc3394f1ed81 — Environment-variable access.
repo/apps/cli/src/agent/extension-host.ts:64 
const CLI_PACKAGE_ROOT = process.env.ROO_CLI_ROOT || findCliPackageRoot()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86976b4b51507f35 — Environment-variable access.
repo/apps/cli/src/agent/extension-host.ts:181 
		this.previousCliRuntimeEnv = process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81caf3b249e1406e — Environment-variable access.
repo/apps/cli/src/agent/extension-host.ts:182 
		process.env.ROO_CLI_RUNTIME = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d01e9b285e8458b7 — Environment-variable access.
repo/apps/cli/src/agent/extension-host.ts:609 
			delete process.env.ROO_CLI_RUNTIME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d48058b90d714ff8 — Environment-variable access.
repo/apps/cli/src/agent/extension-host.ts:611 
			process.env.ROO_CLI_RUNTIME = this.previousCliRuntimeEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f13d4f60a0bb567d — Filesystem access.
repo/apps/cli/src/commands/cli/__tests__/run.test.ts:1 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b3b264c97d45f66e — Filesystem access.
repo/apps/cli/src/commands/cli/__tests__/run.test.ts:25 
		fs.writeFileSync(promptFilePath, promptContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ad86580d36b724ae — Filesystem access.
repo/apps/cli/src/commands/cli/__tests__/run.test.ts:28 
		const readContent = fs.readFileSync(promptFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #10a78a8160dc7505 — Filesystem access.
repo/apps/cli/src/commands/cli/__tests__/run.test.ts:41 
		fs.writeFileSync(promptFilePath, multiLinePrompt)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5c9cd72662947f24 — Filesystem access.
repo/apps/cli/src/commands/cli/__tests__/run.test.ts:42 
		const readContent = fs.readFileSync(promptFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ae918792746554f9 — Filesystem access.
repo/apps/cli/src/commands/cli/__tests__/run.test.ts:52 
		fs.writeFileSync(promptFilePath, longPrompt)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #88f4609b762c45cb — Filesystem access.
repo/apps/cli/src/commands/cli/__tests__/run.test.ts:53 
		const readContent = fs.readFileSync(promptFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0407331f95b50175 — Filesystem access.
repo/apps/cli/src/commands/cli/__tests__/run.test.ts:84 
		fs.writeFileSync(promptFilePath, shellSensitivePrompt)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #16586ab1eeb3405b — Filesystem access.
repo/apps/cli/src/commands/cli/__tests__/run.test.ts:85 
		const readContent = fs.readFileSync(promptFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8193fa31eb27b31 — Filesystem access.
repo/apps/cli/src/commands/cli/list.ts:1 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2af9c3e4b19ecad9 — Filesystem access.
repo/apps/cli/src/commands/cli/run.ts:1 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #165b7d3359947791 — Filesystem access.
repo/apps/cli/src/commands/cli/run.ts:67 
		prompt = fs.readFileSync(flagOptions.promptFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5e05b59e8bdc2dc4 — Filesystem access.
repo/apps/cli/src/lib/storage/__tests__/history.test.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3a5edd88585b959e — Filesystem access.
repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b33a1903d0a8cdaf — Filesystem access.
repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:62 
			await fs.writeFile(expectedSettingsFile, JSON.stringify(settingsData), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e9689abd8c885bc2 — Filesystem access.
repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:74 
			await fs.writeFile(expectedSettingsFile, JSON.stringify(settingsData), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c9471a5e9165e602 — Filesystem access.
repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:85 
			const savedData = await fs.readFile(expectedSettingsFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #87ba6ef312019f59 — Filesystem access.
repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:95 
			const savedData = await fs.readFile(expectedSettingsFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2e387e17a2b900a7 — Filesystem access.
repo/apps/cli/src/lib/storage/__tests__/settings.test.ts:111 
			const savedData = await fs.readFile(expectedSettingsFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c9fea5b4a01ebec — Filesystem access.
repo/apps/cli/src/lib/storage/config-dir.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd631a353642c3d3 — Filesystem access.
repo/apps/cli/src/lib/storage/ephemeral.ts:3 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e639661abad69f51 — Filesystem access.
repo/apps/cli/src/lib/storage/history.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8aaa78dc31e89984 — Filesystem access.
repo/apps/cli/src/lib/storage/history.ts:32 
		const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6308de51feebe33 — Filesystem access.
repo/apps/cli/src/lib/storage/history.ts:77 
		await fs.writeFile(filePath, JSON.stringify(data, null, "\t"), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3c6764744f9e95a — Filesystem access.
repo/apps/cli/src/lib/storage/settings.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1eb90e7c489a54be — Filesystem access.
repo/apps/cli/src/lib/storage/settings.ts:15 
		const data = await fs.readFile(settingsPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cef9f0b5de378b4a — Filesystem access.
repo/apps/cli/src/lib/storage/settings.ts:33 
	await fs.writeFile(getSettingsPath(), JSON.stringify(merged, null, 2), {
		mode: 0o600,
	})

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1fe0886633720a26 — Filesystem access.
repo/apps/cli/src/lib/utils/__tests__/extension.test.ts:1 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2edaa2b7048f5fd3 — Environment-variable access.
repo/apps/cli/src/lib/utils/__tests__/extension.test.ts:15 
		delete process.env.ROO_EXTENSION_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #db79b220b9dbb77c — Environment-variable access.
repo/apps/cli/src/lib/utils/__tests__/provider.test.ts:16 
		process.env.ANTHROPIC_API_KEY = "test-anthropic-key"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e477c0969c5a4131 — Environment-variable access.
repo/apps/cli/src/lib/utils/__tests__/provider.test.ts:21 
		process.env.OPENROUTER_API_KEY = "test-openrouter-key"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8559fbf1d08eb5d9 — Environment-variable access.
repo/apps/cli/src/lib/utils/__tests__/provider.test.ts:26 
		process.env.OPENAI_API_KEY = "test-openai-key"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cbec30d0efa8f218 — Environment-variable access.
repo/apps/cli/src/lib/utils/__tests__/provider.test.ts:31 
		delete process.env.ANTHROPIC_API_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #17ee83f5f6521112 — Filesystem access.
repo/apps/cli/src/lib/utils/__tests__/shell.test.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d17d193fac9aa306 — Filesystem access.
repo/apps/cli/src/lib/utils/extension.ts:2 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #abb5f473cb44ebb5 — Environment-variable access.
repo/apps/cli/src/lib/utils/extension.ts:12 
	if (process.env.ROO_EXTENSION_PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ea083a5513a29df — Environment-variable access.
repo/apps/cli/src/lib/utils/extension.ts:13 
		const envPath = process.env.ROO_EXTENSION_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ed0aa8b57b0ada5 — Environment-variable access.
repo/apps/cli/src/lib/utils/provider.ts:19 
	return process.env[envVar]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34ed3343469186a5 — Filesystem access.
repo/apps/cli/src/lib/utils/shell.ts:1 
import fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #577ff36de487459f — Filesystem access.
repo/apps/cli/src/lib/utils/shell.ts:2 
import { constants as fsConstants } from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b89c18189fe7ae5a — Filesystem access.
repo/apps/cli/src/lib/utils/version.ts:1 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0b4d552dee51e74 — Filesystem access.
repo/apps/cli/src/lib/utils/version.ts:14 
			const packageJson = JSON.parse(fs.readFileSync(candidate, "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26159da0329475b2 — Environment-variable access.
repo/apps/cli/src/ui/components/Header.tsx:34 
	const homeDir = process.env.HOME || process.env.USERPROFILE || ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72340058a7701401 — Environment-variable access.
repo/apps/cli/src/ui/components/Icon.tsx:82 
	const envOverride = process.env.ROOCODE_NERD_FONT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1a451f429ae31d4f — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/ChatHistoryItem.test.tsx:10 
		process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d19a052dedc431ef — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/ChatHistoryItem.test.tsx:15 
		delete process.env.ROOCODE_NERD_FONT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #959f3303d0c03faa — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:10 
		delete process.env.ROOCODE_NERD_FONT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1fb311d28085f4ad — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:15 
		delete process.env.ROOCODE_NERD_FONT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b0892983e9d06a72 — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:54 
			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0a0b49b9927a56a5 — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:60 
			process.env.ROOCODE_NERD_FONT = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4c0516893e55f616 — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:66 
			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #51dc27ec230b10eb — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:72 
			process.env.ROOCODE_NERD_FONT = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ce140a87832cad1e — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:78 
			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2de766dcce4c4d3b — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:82 
			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1f87e982db66acfe — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:89 
			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d1fc1ca9bb60e786 — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:94 
			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #72eb576a9178b37b — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:102 
			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #73bd8c07489d2510 — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:113 
			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9c51b028f2297d6e — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:125 
			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9028d60c0ebae2d — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:135 
			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2d1cd01f98dee2ab — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:144 
			process.env.ROOCODE_NERD_FONT = "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ac65bb87dd02a129 — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/Icon.test.tsx:150 
			process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #63575db9087b04fc — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/TodoDisplay.test.tsx:11 
		process.env.ROOCODE_NERD_FONT = "0"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #efc3cde108221d4d — Environment-variable access.
repo/apps/cli/src/ui/components/__tests__/TodoDisplay.test.tsx:16 
		delete process.env.ROOCODE_NERD_FONT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/docs

npm first-party
expand_more 3 low-confidence finding(s)
low egress production #d0133c1496d908c7 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/docs/src/components/GitHubInstallButtons/index.tsx:20 
		const res = await fetch("https://api.github.com/repos/RooCodeInc/Roo-Code")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ce2ac25a8353a3dd — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/docs/src/components/GitHubInstallButtons/index.tsx:38 
		const res = await fetch("https://marketplace.visualstudio.com/_apis/public/gallery/extensionquery", {
			method: "POST",
			headers: {
				"Content-Type": "application/json",
				Accept: "application/json;api-version=7.1-preview.1",
			},
			body: JSON.stringify({
				filters: [
					{
						criteria: [
							{
								filterType: 7,
								value: "RooVeterinaryInc.roo-cline",
							},
						],
					},
				],
				flags: 914,
			}),
		})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4ac1fb620dc45919 — Environment-variable access.
repo/apps/docs/src/theme/SearchPage/index.tsx:200 
					) : process.env.NODE_ENV === "production" ? (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/vscode-e2e

npm first-party
expand_more 60 low-confidence finding(s)
low env_fs production #a1298ef810f750c5 — Filesystem access.
repo/apps/vscode-e2e/src/runTest.ts:3 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6ab9d5db65b6565 — Environment-variable access.
repo/apps/vscode-e2e/src/runTest.ts:25 
		const testGrep = process.argv.find((arg, i) => process.argv[i - 1] === "--grep") || process.env.TEST_GREP

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bff2779420d6397b — Environment-variable access.
repo/apps/vscode-e2e/src/runTest.ts:26 
		const testFile = process.argv.find((arg, i) => process.argv[i - 1] === "--file") || process.env.TEST_FILE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1aa072ff510fa80e — Environment-variable access.
repo/apps/vscode-e2e/src/runTest.ts:41 
			version: process.env.VSCODE_VERSION || "1.101.2",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bcaea42628a52d2 — Environment-variable access.
repo/apps/vscode-e2e/src/suite/index.ts:21 
		openRouterApiKey: process.env.OPENROUTER_API_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d14276159faf9b37 — Environment-variable access.
repo/apps/vscode-e2e/src/suite/index.ts:35 
	if (process.env.TEST_GREP) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #547f2afe6f393d93 — Environment-variable access.
repo/apps/vscode-e2e/src/suite/index.ts:36 
		mochaOptions.grep = process.env.TEST_GREP

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1ea1d3dcbb6a383 — Environment-variable access.
repo/apps/vscode-e2e/src/suite/index.ts:37 
		console.log(`Running tests matching pattern: ${process.env.TEST_GREP}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bc42b931605ebaf — Environment-variable access.
repo/apps/vscode-e2e/src/suite/index.ts:45 
	if (process.env.TEST_FILE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f445cb200675d932 — Environment-variable access.
repo/apps/vscode-e2e/src/suite/index.ts:46 
		const specificFile = process.env.TEST_FILE.endsWith(".js")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #922e1086283d1a5b — Environment-variable access.
repo/apps/vscode-e2e/src/suite/index.ts:47 
			? process.env.TEST_FILE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb3b60b15f3f953e — Environment-variable access.
repo/apps/vscode-e2e/src/suite/index.ts:48 
			: `${process.env.TEST_FILE}.js`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5daeca27eb666f10 — Environment-variable access.
repo/apps/vscode-e2e/src/suite/index.ts:57 
		throw new Error(`No test files found matching criteria: ${process.env.TEST_FILE || "all tests"}`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e945816ba14df729 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:2 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fdb36c898fae3769 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:90 
			await fs.writeFile(file.path, file.content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3a3713200936e661 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:247 
			const actualContent = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #73da77ca0abbbf13 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:362 
			const actualContent = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b3930ba6113be4b3 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:474 
			const actualContent = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #800afe9d76fb0f22 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:585 
			const actualContent = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3a924ca259d900ea — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/apply-diff.test.ts:728 
			const actualContent = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ff1d9e94f22e331d — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/execute-command.test.ts:2 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5ecd0e4d631066cd — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/execute-command.test.ts:54 
				await fs.writeFile(file.path, file.content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #92c2f4ea79aaadbb — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/execute-command.test.ts:205 
			const content = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #002eaac91c0ba60c — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/execute-command.test.ts:314 
			const content = await fs.readFile(outputPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c036f6a29c71186d — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/execute-command.test.ts:436 
			const content = await fs.readFile(testFile.path, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ba358af7a877c84 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:2 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b60e3ceccb39d73c — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:63 
		await fs.writeFile(testFiles.rootFile1, "This is root file 1 content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e4e7c1abac915334 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:64 
		await fs.writeFile(
			testFiles.rootFile2,
			`function testFunction() {
	console.log("Hello from root file 2");
}`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f746757b236b12f4 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:72 
		await fs.writeFile(
			testFiles.nestedFile1,
			`# Nested File 1

This is a markdown file in the nested directory.`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef151397c9947a11 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:78 
		await fs.writeFile(
			testFiles.nestedFile2,
			`{
	"name": "nested-config",
	"version": "1.0.0",
	"description": "Test configuration file"
}`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d5bf731c89024c58 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:88 
		await fs.writeFile(
			testFiles.deepNestedFile,
			`interface TestInterface {
	id: number;
	name: string;
}`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a3ca6f2a73efc455 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:97 
		await fs.writeFile(testFiles.hiddenFile, "Hidden file content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #07bb71fa4b2cb5f7 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:100 
		await fs.writeFile(
			testFiles.configFile,
			`app:
  name: test-app
  version: 1.0.0
database:
  host: localhost
  port: 5432`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e7b328826ce31650 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:111 
		await fs.writeFile(
			testFiles.readmeFile,
			`# List Files Test Directory

This directory contains various files and subdirectories for testing the list_files tool functionality.

## Structure
- Root files (txt, js)
- Nested directory with files (md, json)
- Deep nested directory with TypeScript file
- Hidden file
- Configuration files (yaml)`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #05c3ab06510d1181 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/list-files.test.ts:444 
			await fs.writeFile(sourceFile, "Content from symlinked file")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27f5993541483e41 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:2 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #42842d7dab194062 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:43 
		await fs.writeFile(testFiles.simple, "Hello, World!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8e1d14f932977077 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:44 
		await fs.writeFile(testFiles.multiline, "Line 1\nLine 2\nLine 3\nLine 4\nLine 5")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #28e6da6b4ca7e450 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:45 
		await fs.writeFile(testFiles.empty, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1d4ddad5bd8506d5 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:52 
		await fs.writeFile(testFiles.large, largeContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #09dcc33257f4177a — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:55 
		await fs.writeFile(
			testFiles.xmlContent,
			"<root>\n  <child>Test content</child>\n  <data>Some data</data>\n</root>",
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #443c9af960a8ac45 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/read-file.test.ts:62 
		await fs.writeFile(testFiles.nested, "Content in nested directory")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e0232cf0e60a8eb0 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:2 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #25f181a06bac049a — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:47 
		await fs.writeFile(
			testFiles.jsFile,
			`function calculateTotal(items) {
	return items.reduce((sum, item) => sum + item.price, 0)
}

function validateUser(user) {
	if (!user.email || !user.name) {
		throw new Error("Invalid user data")
	}
	return true
}

// TODO: Add more validation functions
const API_URL = "https://api.example.com"
export { calculateTotal, validateUser }`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7270f60503055849 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:66 
		await fs.writeFile(
			testFiles.tsFile,
			`interface User {
	id: number
	name: string
	email: string
	isActive: boolean
}

interface Product {
	id: number
	title: string
	price: number
	category: string
}

class UserService {
	async getUser(id: number): Promise<User> {
		// TODO: Implement user fetching
		throw new Error("Not implemented")
	}
	
	async updateUser(user: User): Promise<void> {
		// Implementation here
	}
}

export { User, Product, UserService }`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3de78293c8fafa54 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:97 
		await fs.writeFile(
			testFiles.jsonFile,
			`{
	"name": "test-app",
	"version": "1.0.0",
	"description": "A test application for search functionality",
	"main": "index.js",
	"scripts": {
		"start": "node index.js",
		"test": "jest",
		"build": "webpack"
	},
	"dependencies": {
		"express": "^4.18.0",
		"lodash": "^4.17.21"
	},
	"devDependencies": {
		"jest": "^29.0.0",
		"webpack": "^5.0.0"
	}
}`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e925e8c4c0bb8381 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:121 
		await fs.writeFile(
			testFiles.textFile,
			`# Project Documentation

This is a test project for demonstrating search functionality.

## Features
- User management
- Product catalog
- Order processing
- Payment integration

## Installation
1. Clone the repository
2. Run npm install
3. Configure environment variables
4. Start the application

## API Endpoints
- GET /users - List all users
- POST /users - Create new user
- PUT /users/:id - Update user
- DELETE /users/:id - Delete user

## TODO
- Add authentication
- Implement caching
- Add error handling
- Write more tests`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a4f553e979a0b81f — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:154 
		await fs.writeFile(
			testFiles.nestedJsFile,
			`// Nested utility functions
function formatCurrency(amount) {
	return new Intl.NumberFormat('en-US', {
		style: 'currency',
		currency: 'USD'
	}).format(amount)
}

function debounce(func, wait) {
	let timeout
	return function executedFunction(...args) {
		const later = () => {
			clearTimeout(timeout)
			func(...args)
		}
		clearTimeout(timeout)
		timeout = setTimeout(later, wait)
	}
}

module.exports = { formatCurrency, debounce }`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #91b709c42c0ae4bc — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:180 
		await fs.writeFile(
			testFiles.configFile,
			`# Application Configuration
app:
  name: "Test Application"
  version: "1.0.0"
  port: 3000
  
database:
  host: "localhost"
  port: 5432
  name: "testdb"
  user: "testuser"
  
redis:
  host: "localhost"
  port: 6379
  
logging:
  level: "info"
  file: "app.log"`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ad8e1f7889bdb4f2 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/search-files.test.ts:204 
		await fs.writeFile(
			testFiles.readmeFile,
			`# Search Files Test Project

This project contains various file types for testing the search_files functionality.

## File Types Included

- **JavaScript files** (.js) - Contains functions and exports
- **TypeScript files** (.ts) - Contains interfaces and classes  
- **JSON files** (.json) - Configuration and package files
- **Text files** (.txt) - Documentation and notes
- **YAML files** (.yaml) - Configuration files
- **Markdown files** (.md) - Documentation

## Search Patterns to Test

1. Function definitions: \`function\\s+\\w+\`
2. TODO comments: \`TODO.*\`
3. Import/export statements: \`(import|export).*\`
4. Interface definitions: \`interface\\s+\\w+\`
5. Configuration keys: \`"\\w+":\\s*\`

## Expected Results

The search should find matches across different file types and provide context for each match.`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2549e7ca921dbb5f — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/use-mcp-tool.test.ts:2 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3416363763ea46d8 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/use-mcp-tool.test.ts:37 
		await fs.writeFile(testFiles.simple, "Initial content for MCP test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #aaf1626cebfaff06 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/use-mcp-tool.test.ts:38 
		await fs.writeFile(testFiles.testData, JSON.stringify({ test: "data", value: 42 }, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #65d6740e1459c2ca — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/use-mcp-tool.test.ts:53 
		await fs.writeFile(testFiles.mcpConfig, JSON.stringify(mcpConfig, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d551b567c28bfc5e — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:2 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #48cf12fce7945496 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:189 
					actualContent = await fs.readFile(wsFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #82cb92fc5fd84b94 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:204 
						actualContent = await fs.readFile(location, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fa327e6f431e4124 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:368 
					actualContent = await fs.readFile(wsNestedPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ba43f9198fbbfda1 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:378 
						actualContent = await fs.readFile(wsFilePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d751e40deb676f85 — Filesystem access.
repo/apps/vscode-e2e/src/suite/tools/write-to-file.test.ts:393 
					actualContent = await fs.readFile(nestedPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/vscode-nightly

npm first-party
expand_more 7 low-confidence finding(s)
low env_fs production #bc5c8bc3d1f1b2a9 — Filesystem access.
repo/apps/vscode-nightly/esbuild.mjs:2 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4487deae0ac1af7 — Filesystem access.
repo/apps/vscode-nightly/esbuild.mjs:17 
	const overrideJson = JSON.parse(fs.readFileSync(path.join(__dirname, "package.nightly.json"), "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #912ffab5ee7db704 — Filesystem access.
repo/apps/vscode-nightly/esbuild.mjs:86 
					const packageJson = JSON.parse(fs.readFileSync(path.join(srcDir, "package.json"), "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17ee8ecf3f31bca9 — Filesystem access.
repo/apps/vscode-nightly/esbuild.mjs:94 
					fs.writeFileSync(path.join(buildDir, "package.json"), JSON.stringify(generatedPackageJson, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fb54876af201c3c — Filesystem access.
repo/apps/vscode-nightly/esbuild.mjs:108 
					const nlsPkg = JSON.parse(fs.readFileSync(path.join(srcDir, "package.nls.json"), "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8df4bc2bbfbec637 — Filesystem access.
repo/apps/vscode-nightly/esbuild.mjs:111 
						fs.readFileSync(path.join(__dirname, "package.nls.nightly.json"), "utf8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec68acda4ca5e0b0 — Filesystem access.
repo/apps/vscode-nightly/esbuild.mjs:114 
					fs.writeFileSync(
						path.join(buildDir, "package.nls.json"),
						JSON.stringify({ ...nlsPkg, ...nlsNightlyPkg }, null, 2),
					)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/core

npm first-party
expand_more 74 low-confidence finding(s)
low env_fs test-only #c46cb2ba69c2dbfb — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:1 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b21e7e964538a41 — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:29 
		fs.writeFileSync(fakeScriptPath, "#!/usr/bin/env node\nconsole.log('fake esbuild')")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bd56836b4c5f5ff5 — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:66 
		fs.writeFileSync(
			inputFile,
			`
				export const greeting = "Hello, World!"
				export function add(a: number, b: number): number {
					return a + b
				}
			`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e4b30ab19723b8e6 — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:89 
		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ad3cb98c3570811d — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:98 
		fs.writeFileSync(inputFile, `export const value = 42`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1b03655705bcbe8c — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:102 
		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2205bf6f11f61ebf — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:111 
		fs.writeFileSync(inputFile, `export const value = {{{ invalid syntax`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b7f043de74924879 — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:129 
		fs.writeFileSync(libFile, `export const PI = 3.14159`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #73b2937d4e2a667e — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:130 
		fs.writeFileSync(
			mainFile,
			`
				import { PI } from "./lib.js"
				export const circumference = (r: number) => 2 * PI * r
			`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #95693dea102b5253 — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:140 
		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cfe2173f7ade7306 — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:149 
		fs.writeFileSync(inputFile, `export const value = process.env.NODE_ENV`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #016fb8868904d94c — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:162 
		fs.writeFileSync(
			inputFile,
			`
				import fs from "fs"
				export function fileExists(p: string): boolean {
					return fs.existsSync(p)
				}
			`,
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f5a60bef1ee46ce9 — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:180 
		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #354e2d35e4788642 — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:189 
		fs.writeFileSync(inputFile, `export const greeting = "Hello"`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bdccf7874ff30d8a — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:199 
		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a95a98c6543678b4 — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:208 
		fs.writeFileSync(inputFile, `export const value = 42`)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d6e99f13329b2692 — Filesystem access.
repo/packages/core/src/custom-tools/__tests__/esbuild-runner.spec.ts:217 
		const outputContent = fs.readFileSync(outputFile, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3b268b3f6db8b74 — Filesystem access.
repo/packages/core/src/custom-tools/custom-tool-registry.ts:11 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65d6589b14b8fa7a — Filesystem access.
repo/packages/core/src/custom-tools/esbuild-runner.ts:13 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c443e767bd78da35 — Filesystem access.
repo/packages/core/src/debug-log/index.ts:18 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #900645146ed271f1 — Filesystem access.
repo/packages/core/src/task-history/__tests__/task-history.spec.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3c8f499e7db223e6 — Filesystem access.
repo/packages/core/src/task-history/__tests__/task-history.spec.ts:23 
		await fs.writeFile(
			path.join(tasksDir, "_index.json"),
			JSON.stringify({
				entries: [
					{ id: "a", task: "Task A", ts: 100, status: "completed" },
					{ id: "b", task: "Task B", ts: 300, mode: "code" },
					{ id: "invalid", ts: 200 },
				],
			}),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f48e58e7798b2615 — Filesystem access.
repo/packages/core/src/task-history/__tests__/task-history.spec.ts:47 
		await fs.writeFile(
			path.join(tasksDir, "_index.json"),
			JSON.stringify({
				entries: [{ id: "a", task: "Task A", ts: 100 }],
			}),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c62e3cac9ef27ace — Filesystem access.
repo/packages/core/src/task-history/__tests__/task-history.spec.ts:53 
		await fs.writeFile(
			path.join(tasksDir, "c", "history_item.json"),
			JSON.stringify({ id: "c", task: "Task C", ts: 500, workspace: "/tmp/project" }),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b96822665f22b266 — Filesystem access.
repo/packages/core/src/task-history/__tests__/task-history.spec.ts:70 
		await fs.writeFile(
			path.join(tasksDir, "_index.json"),
			JSON.stringify({
				entries: [
					{ id: "stale", task: "Stale Task", ts: 999 },
					{ id: "live", task: "Live Task", ts: 100 },
				],
			}),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2717acf13bfdecb0 — Filesystem access.
repo/packages/core/src/task-history/__tests__/task-history.spec.ts:93 
		await fs.writeFile(path.join(tasksDir, "_index.json"), "{not-valid-json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a0d00a03d2b08328 — Filesystem access.
repo/packages/core/src/task-history/__tests__/task-history.spec.ts:94 
		await fs.writeFile(
			path.join(tasksDir, "good", "history_item.json"),
			JSON.stringify({ id: "good", task: "Good Task", ts: 10, status: "active" }),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f65a9c9bb5c0face — Filesystem access.
repo/packages/core/src/task-history/__tests__/task-history.spec.ts:98 
		await fs.writeFile(path.join(tasksDir, "bad-json", "history_item.json"), "{oops")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a98c15451aa68a3f — Filesystem access.
repo/packages/core/src/task-history/__tests__/task-history.spec.ts:99 
		await fs.writeFile(
			path.join(tasksDir, "bad-shape", "history_item.json"),
			JSON.stringify({ id: "bad-shape", task: 123, ts: "not-a-number" }),
		)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10959d685af18ef3 — Filesystem access.
repo/packages/core/src/task-history/index.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13ef64a41531de36 — Filesystem access.
repo/packages/core/src/task-history/index.ts:50 
		const raw = await fs.readFile(filePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e25d9ddc47dfc399 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:1 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f979a3d622e9740a — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:37 
			await fs.writeFile(path.join(tempDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #92e3a9564004fbf5 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:66 
			await fs.writeFile(path.join(repoDir, "README.md"), "test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4467339fe17e9b64 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:75 
			await fs.writeFile(path.join(repoDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #64feebd1ed13e0d3 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:86 
			await fs.writeFile(path.join(tempDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f50054d0ccdc3c1b — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:87 
			await fs.writeFile(path.join(tempDir, ".gitignore"), gitignoreContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b5b650a5345e778d — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:98 
			await fs.writeFile(path.join(tempDir, ".gitignore"), gitignoreContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9c9e535043d30163 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:108 
			await fs.writeFile(path.join(tempDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #59f3222430469389 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:132 
			const fileContent = await fs.readFile(path.join(tempDir, ".worktreeinclude"), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #54d462585bdd5223 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:137 
			await fs.writeFile(path.join(tempDir, ".worktreeinclude"), "old content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7b51f4edb882c0fd — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:142 
			const fileContent = await fs.readFile(path.join(tempDir, ".worktreeinclude"), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a052197b6820af81 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:159 
			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8626100c97126e8b — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:167 
			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #03bdb941b82b5f56 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:176 
			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a47ece153e8a7ca4 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:177 
			await fs.writeFile(path.join(sourceDir, ".gitignore"), ".env")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c6cbfa784bed6a66 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:187 
			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f18b243f646dba9f — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:188 
			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #57a8cf8d12fea889 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:191 
			await fs.writeFile(path.join(sourceDir, "node_modules", "package.json"), '{"name": "test"}')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5f2c02731045b784 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:197 
			const copiedContent = await fs.readFile(path.join(targetDir, "node_modules", "package.json"), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #815e7b79fb1f320a — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:205 
			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules\ndist")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dad903dbed23bda2 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:206 
			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules\n.env")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9e2ed000e9b8a1e5 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:209 
			await fs.writeFile(path.join(sourceDir, ".env"), "SECRET=123")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3eb6935d699e1daf — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:210 
			await fs.writeFile(path.join(sourceDir, "node_modules", "test.txt"), "test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4ae6664da7b3312a — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:211 
			await fs.writeFile(path.join(sourceDir, "dist", "main.js"), "console.log('dist')")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #79dd25e299589fa7 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:236 
			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), ".git")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #37588e166e212c0e — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:237 
			await fs.writeFile(path.join(sourceDir, ".gitignore"), ".git")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ffdefe58c6467541 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:239 
			await fs.writeFile(path.join(sourceDir, ".git", "config"), "[core]")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fbb8ea22105e1622 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:247 
			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), ".env.local")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #322c566e0de49885 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:248 
			await fs.writeFile(path.join(sourceDir, ".gitignore"), ".env.local")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d85cbeefe26ed80 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:249 
			await fs.writeFile(path.join(sourceDir, ".env.local"), "LOCAL_VAR=value")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6538a7b9953a8661 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:254 
			const copiedContent = await fs.readFile(path.join(targetDir, ".env.local"), "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d33b8eb038b59f5 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:259 
			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "# comment\nnode_modules\n# another comment")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #42004d3aa89ee1d3 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:260 
			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3fd09d34f1cc4318 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:270 
			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules\n.env.local")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #689e78ccad21b440 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:271 
			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules\n.env.local")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #28463293a25dd2a3 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:273 
			await fs.writeFile(path.join(sourceDir, "node_modules", "test.txt"), "test")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d712cb3c56127a36 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:274 
			await fs.writeFile(path.join(sourceDir, ".env.local"), "LOCAL_VAR=value")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6c5df9bf9f59e6e7 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:296 
			await fs.writeFile(path.join(sourceDir, ".worktreeinclude"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #70166e7e224e0502 — Filesystem access.
repo/packages/core/src/worktree/__tests__/worktree-include.spec.ts:297 
			await fs.writeFile(path.join(sourceDir, ".gitignore"), "node_modules")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #119cc60488c627cf — Filesystem access.
repo/packages/core/src/worktree/worktree-include.ts:9 
import * as fs from "fs/promises"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ffd24444f0d0a507 — Filesystem access.
repo/packages/core/src/worktree/worktree-include.ts:88 
			gitignoreContent = await fs.readFile(gitignorePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7eaea842c1d343bd — Filesystem access.
repo/packages/core/src/worktree/worktree-include.ts:105 
		await fs.writeFile(path.join(dir, ".worktreeinclude"), content, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d263d9b19e956ee — Filesystem access.
repo/packages/core/src/worktree/worktree-include.ts:380 
			const content = await fs.readFile(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/types

npm first-party
expand_more 14 low-confidence finding(s)
low env_fs test-only #fd33fdb178bfa8e4 — Filesystem access.
repo/packages/types/scripts/generate-roomodes-schema.ts:11 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #04a63c28a5fac42e — Filesystem access.
repo/packages/types/scripts/generate-roomodes-schema.ts:23 
fs.writeFileSync(outPath, JSON.stringify(jsonSchema, null, "\t") + "\n", "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c3a6d78a2c2489c7 — Filesystem access.
repo/packages/types/scripts/publish-npm.cjs:3 
const fs = require("fs")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #88aa3a2f150ace8f — Filesystem access.
repo/packages/types/scripts/publish-npm.cjs:36 
		const packageContent = JSON.parse(fs.readFileSync(filePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bab2d59aac4c4f38 — Filesystem access.
repo/packages/types/scripts/publish-npm.cjs:39 
		fs.writeFileSync(filePath, JSON.stringify(packageContent, null, 2) + "\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #456a531ab0f7aefc — Filesystem access.
repo/packages/types/scripts/publish-npm.cjs:187 
		const monorepoPackageContent = fs.readFileSync(monorepoPackagePath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bcb17709997f2dcb — Filesystem access.
repo/packages/types/scripts/publish-npm.cjs:192 
		const npmMetadataContent = fs.readFileSync(npmMetadataPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #237452c9e14a1157 — Filesystem access.
repo/packages/types/scripts/publish-npm.cjs:217 
		fs.writeFileSync(npmPackagePath, outputContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7799b3ebcfa921e5 — Filesystem access.
repo/packages/types/scripts/publish-npm.cjs:239 
		const npmPackage = JSON.parse(fs.readFileSync(npmPackagePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0b0aa41c39ba91f0 — Filesystem access.
repo/packages/types/scripts/publish-npm.cjs:256 
		const updatedPackage = JSON.parse(fs.readFileSync(npmPackagePath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #43ae31b10f1dd9f2 — Filesystem access.
repo/packages/types/src/__tests__/roomodes-schema-sync.spec.ts:2 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5056b1ddf7e9821f — Filesystem access.
repo/packages/types/src/__tests__/roomodes-schema-sync.spec.ts:20 
		const checkedIn = JSON.parse(fs.readFileSync(schemaPath, "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b485feab852fde11 — Filesystem access.
repo/packages/types/src/__tests__/roomodes-schema.spec.ts:11 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9b7a8c8c046dc27 — Filesystem access.
repo/packages/types/src/__tests__/roomodes-schema.spec.ts:22 
		schema = JSON.parse(fs.readFileSync(schemaPath, "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/vscode-shim

npm first-party
expand_more 71 low-confidence finding(s)
low env_fs test-only #181209d3c28084b8 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/ExtensionContext.test.ts:2 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e5696447dde32a07 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:1 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #375766e6800e5cc2 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:26 
			fs.writeFileSync(filePath, "test content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #afc21bb6c3bc2d73 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:56 
			fs.writeFileSync(filePath, "Hello, world!")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #75044cfa7675a364 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:59 
			const content = await fsAPI.readFile(uri)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4eba5d0ef9cf77a4 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:67 
			await expect(fsAPI.readFile(uri)).rejects.toThrow()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #09a0cf5c57509218 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:76 
			await fsAPI.writeFile(uri, new TextEncoder().encode("Written content"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bc7773bb7e3ee648 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:78 
			expect(fs.readFileSync(filePath, "utf-8")).toBe("Written content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #10fb2f93573e7513 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:85 
			await fsAPI.writeFile(uri, new TextEncoder().encode("Nested content"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #25e57d20b4f970f9 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:87 
			expect(fs.readFileSync(filePath, "utf-8")).toBe("Nested content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3e23284c796db145 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/FileSystemAPI.test.ts:94 
			fs.writeFileSync(filePath, "delete me")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4b67e3b91c399f19 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:1 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5ed8b2d06e5d5693 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:106 
			fs.writeFileSync(filePath, "Line 1\nLine 2\nLine 3")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8fcae3bcd4ea3fc8 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:119 
			fs.writeFileSync(filePath, "Line 1\nLine 2\nLine 3")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9d13a57a14f5df83 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:133 
			fs.writeFileSync(filePath, "Hello\nWorld")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #18c60ff3ef1c6d71 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:146 
			fs.writeFileSync(filePath, "content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #84cb9ac508584a98 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:166 
			fs.writeFileSync(filePath, "Hello World")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a5691773cd8828a4 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:175 
			expect(fs.readFileSync(filePath, "utf-8")).toBe("Hi World")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6a491dd377c43c77 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:180 
			fs.writeFileSync(filePath, "World")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9df12ea6c219b74c — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:189 
			expect(fs.readFileSync(filePath, "utf-8")).toBe("Hello World")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3361eb09dab3a44e — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:194 
			fs.writeFileSync(filePath, "Hello World")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c587c80d543499d9 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:203 
			expect(fs.readFileSync(filePath, "utf-8")).toBe("Hello")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2cf30f053ef71792 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:216 
			expect(fs.readFileSync(filePath, "utf-8")).toBe("New content")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #03b7df1a45da2140 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceAPI.test.ts:221 
			fs.writeFileSync(filePath, "Original")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9eb51b3c18ceff7a — Filesystem access.
repo/packages/vscode-shim/src/__tests__/WorkspaceConfiguration.test.ts:1 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #39369372ac7faf8e — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/logger.test.ts:13 
		originalEnv = process.env.DEBUG

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cb95d177a2848f97 — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/logger.test.ts:23 
		process.env.DEBUG = originalEnv

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69e11cc5ecf977c6 — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/logger.test.ts:94 
				delete process.env.DEBUG

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5cdc763ffe474ea0 — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/logger.test.ts:102 
				process.env.DEBUG = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c8e5dc42d188f3ec — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/logger.test.ts:111 
				process.env.DEBUG = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bd2cdf6d9ee1d0be — Filesystem access.
repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:1 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c62115e95a6e02b9 — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:12 
		originalHome = process.env.HOME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f33a15f05eba7519 — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:14 
		process.env.HOME = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9bcd13f18736c573 — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:18 
		process.env.HOME = originalHome

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fda7446721a16b5b — Filesystem access.
repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:46 
		const storedId = fs.readFileSync(idPath, "utf-8").trim()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6889714eaaa69f84 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:62 
		fs.writeFileSync(idPath, "existing-machine-id-12345")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fa11b95b53564faf — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:81 
		delete process.env.HOME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dc46489df349ef21 — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:82 
		process.env.USERPROFILE = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7db631d9cc1784ee — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/machine-id.test.ts:90 
		process.env.HOME = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a2bf4f521c2ce773 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/paths.test.ts:1 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8e3f2b83ae2dc9be — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/paths.test.ts:12 
		originalHome = process.env.HOME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6ef24a01ecd2a65f — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/paths.test.ts:14 
		process.env.HOME = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6d269a20255ba28b — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/paths.test.ts:18 
		process.env.HOME = originalHome

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9c59221d4f740318 — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/paths.test.ts:197 
			delete process.env.HOME

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #85bcc2a9d880f30f — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/paths.test.ts:198 
			process.env.USERPROFILE = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #14073414a02319a2 — Environment-variable access.
repo/packages/vscode-shim/src/__tests__/paths.test.ts:205 
			process.env.HOME = tempDir

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #741c8ef1325d7296 — Filesystem access.
repo/packages/vscode-shim/src/__tests__/storage.test.ts:1 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dab4be5fdf99e0bd — Filesystem access.
repo/packages/vscode-shim/src/api/FileSystemAPI.ts:5 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2588666c6d98764c — Filesystem access.
repo/packages/vscode-shim/src/api/FileSystemAPI.ts:39 
			const content = fs.readFileSync(uri.fsPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d6b202836712926 — Filesystem access.
repo/packages/vscode-shim/src/api/FileSystemAPI.ts:56 
			fs.writeFileSync(uri.fsPath, content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20058aabae33d996 — Filesystem access.
repo/packages/vscode-shim/src/api/WorkspaceAPI.ts:5 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #276d30ff6d9c2cb4 — Filesystem access.
repo/packages/vscode-shim/src/api/WorkspaceAPI.ts:131 
			content = fs.readFileSync(uri.fsPath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7465ab56e0084eb7 — Filesystem access.
repo/packages/vscode-shim/src/api/WorkspaceAPI.ts:215 
					content = fs.readFileSync(filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4744a2103a736514 — Filesystem access.
repo/packages/vscode-shim/src/api/WorkspaceAPI.ts:250 
				fs.writeFileSync(filePath, newContent, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5a4fa139f5ee346 — Environment-variable access.
repo/packages/vscode-shim/src/api/create-vscode-api-mock.ts:109 
		shell: process.env.SHELL || "/bin/bash",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d47475136b065ab0 — Filesystem access.
repo/packages/vscode-shim/src/context/ExtensionContext.ts:2 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1d5fb866798e45a — Environment-variable access.
repo/packages/vscode-shim/src/context/ExtensionContext.ts:83 
			options.storageDir || path.join(process.env.HOME || process.env.USERPROFILE || ".", ".vscode-mock")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b4357219b88eaf0 — Filesystem access.
repo/packages/vscode-shim/src/context/ExtensionContext.ts:125 
				const packageJSON = JSON.parse(fs.readFileSync(packageJsonPath, "utf-8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d0770fe8028b8bc — Filesystem access.
repo/packages/vscode-shim/src/storage/Memento.ts:1 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a5eed2c28b73536 — Filesystem access.
repo/packages/vscode-shim/src/storage/Memento.ts:46 
				const content = fs.readFileSync(this.filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d68ea812ee429304 — Filesystem access.
repo/packages/vscode-shim/src/storage/Memento.ts:63 
			fs.writeFileSync(this.filePath, JSON.stringify(this.data, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5553a9e4977e7db7 — Filesystem access.
repo/packages/vscode-shim/src/storage/SecretStorage.ts:1 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #061ee66257af3d60 — Filesystem access.
repo/packages/vscode-shim/src/storage/SecretStorage.ts:57 
				const content = fs.readFileSync(this.filePath, "utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e82d9457552bd7b8 — Filesystem access.
repo/packages/vscode-shim/src/storage/SecretStorage.ts:76 
			fs.writeFileSync(this.filePath, JSON.stringify(this.secrets, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c01b15f339d91868 — Environment-variable access.
repo/packages/vscode-shim/src/utils/logger.ts:27 
		if (process.env.DEBUG) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2904d772c340b5f1 — Filesystem access.
repo/packages/vscode-shim/src/utils/machine-id.ts:6 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #15923143abdb73fd — Environment-variable access.
repo/packages/vscode-shim/src/utils/machine-id.ts:17 
	const homeDir = process.env.HOME || process.env.USERPROFILE || "."

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd15c6f5267bf355 — Filesystem access.
repo/packages/vscode-shim/src/utils/machine-id.ts:23 
			return fs.readFileSync(idPath, "utf-8").trim()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #347c3c8a5807ee94 — Filesystem access.
repo/packages/vscode-shim/src/utils/machine-id.ts:38 
		fs.writeFileSync(idPath, machineId)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6427e8647a13d116 — Filesystem access.
repo/packages/vscode-shim/src/utils/paths.ts:5 
import * as fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1aa236541fb20b4f — Environment-variable access.
repo/packages/vscode-shim/src/utils/paths.ts:14 
	const homeDir = process.env.HOME || process.env.USERPROFILE || "."

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): webview-ui

npm first-party
expand_more 17 low-confidence finding(s)
low env_fs production #b32a5030226c4883 — Environment-variable access.
repo/webview-ui/src/App.tsx:150 
		if (process.env.NODE_ENV === "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1cde47e4e342019 — Environment-variable access.
repo/webview-ui/src/components/ErrorBoundary.tsx:56 
		const version = process.env.PKG_VERSION || "unknown"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #947129f17cfd5630 — Environment-variable access.
repo/webview-ui/src/utils/sourceMapInitializer.ts:17 
	if (process.env.NODE_ENV !== "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ecbb3e92e767c70 — Environment-variable access.
repo/webview-ui/src/utils/sourceMapInitializer.ts:116 
	if (process.env.NODE_ENV !== "production") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9649859a0572c3c6 — Filesystem access.
repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:2 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #126048fcdd3256ef — Environment-variable access.
repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:21 
				const mode = process.env.NODE_ENV

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ada980f416b67962 — Filesystem access.
repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:61 
						let jsContent = fs.readFileSync(jsPath, "utf8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff975062611a5bc3 — Filesystem access.
repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:71 
							fs.writeFileSync(jsPath, jsContent)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e989ba17e6828dbe — Filesystem access.
repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:76 
							const mapContent = JSON.parse(fs.readFileSync(mapPath, "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9dd41cd11b6727f — Filesystem access.
repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:92 
							fs.writeFileSync(mapPath, JSON.stringify(mapContent, null, 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7adc1d62cf467097 — Filesystem access.
repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:103 
				fs.writeFileSync(
					path.join(outDir, "sourcemap-manifest.json"),
					JSON.stringify({
						enabled: true,
						version: process.env.PKG_VERSION || "unknown",
						buildTime: new Date().toISOString(),
					}),
				)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cadfed62e9d37960 — Environment-variable access.
repo/webview-ui/src/vite-plugins/sourcemapPlugin.ts:107 
						version: process.env.PKG_VERSION || "unknown",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eebb38f0517f7d16 — Filesystem access.
repo/webview-ui/vite.config.ts:2 
import fs from "fs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f464697f3bb01e14 — Filesystem access.
repo/webview-ui/vite.config.ts:45 
				fs.writeFileSync(resolve(__dirname, "..", ".vite-port"), port.toString())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #045581c292603506 — Filesystem access.
repo/webview-ui/vite.config.ts:58 
	const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, "..", "src", "package.json"), "utf8"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a86e66a7eb9ec94f — Environment-variable access.
repo/webview-ui/vite.config.ts:63 
		"process.env.VSCODE_TEXTMATE_DEBUG": JSON.stringify(process.env.VSCODE_TEXTMATE_DEBUG),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b97008c454e03dab — Filesystem access.
repo/webview-ui/vite.config.ts:76 
			fs.readFileSync(path.join(__dirname, "..", "apps", "vscode-nightly", "package.nightly.json"), "utf8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

@google/genai

npm dependency
medium pii_flow dependency Excluded from app score #f7e85757e9aa37f4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:27 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:27 
    console.debug(text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #05933a1adb1a630c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:19 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:19 
  console.log('text response: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #0e5f45c6ba1f6b8c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:19 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:19 
  console.log('text response: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #ca9499ddcdbdcbd4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:83 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:83 
    console.log(`Uploaded file as: ${uploadedFile.name}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #62b46eb23fdd7c64 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:103 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:103 
  console.log(`Creating batch embedding job with file: ${inputFile}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #d55d50e47e734f22 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:109 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:109 
  console.log(`Created batch job: ${batchJob.name}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #dbe01c1b02866ace — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:117 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:117 
  console.log('result: ', result);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #13009df96fbe8239 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:124 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:124 
    console.log(
      `Batch job not done yet, current state: ${
        result.state
      }. Waiting 60 seconds...`,
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #594ae96433710f08 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:133 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:133 
  console.log(`Batch job finished with state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #87acd8afe381b83e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:161 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:161 
    console.error('Batch job failed:', result.error);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #bd093ab106efe51b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:163 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:163 
    console.warn(`Batch job finished with unexpected state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #6e18f99367e07bfc — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:52 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:52 
  console.log(`Created batch job: ${batchJob.name}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #79bbcb7114d864e9 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:66 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:66 
    console.log(
      `Batch job not done yet, current state: ${
        result.state
      }. Waiting 10 seconds...`,
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #ddd5a0d60fed3360 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:76 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:76 
  console.log(`Batch job finished with state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #0f7261fcc6397fc9 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:80 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:80 
    console.log(result.dest?.inlinedEmbedContentResponses);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #1714090fafccce7f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:82 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:82 
    console.error('Batch job failed:', result.error);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #4664fda0cf2fdfcd — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:84 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:84 
    console.warn(`Batch job finished with state: ${result.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #a1032290612bc102 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:305 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:296 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:305 
        const response = await fetch(url, {
          method: 'POST',
          headers: {
            'x-goog-api-key': apiKey,
            'content-type': 'application/json',
          },
          body: JSON.stringify(requestBody),
        });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #9e16864b71b2ac03 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:76 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:76 
      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #45b54f2d4ed9353a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:84 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:84 
      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #37164356db3ffa04 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:87 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:87 
  console.log('History: ', JSON.stringify(chat.getHistory(), null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #686a8e018914d46d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:19 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:19 
  console.debug('chat response 1: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #45182498d6b7db77 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:21 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:21 
  console.debug('chat response 2: ', response2.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #1ffe9726ad10cbd5 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:25 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:25 
    console.debug('chat history: ', JSON.stringify(content, null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #58cdce847e5c7c44 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:36 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:36 
    console.debug('chat response 1 chunk: ', chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #61ef7264c53a0cf1 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:42 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:42 
    console.debug('chat response 2 chunk: ', chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #ba640f72ce4fe48f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:46 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:46 
    console.debug('chat history: ', JSON.stringify(content, null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #55cc8413aea8cdca — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:21 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:21 
  console.debug(JSON.stringify(response));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #02d802825b5b43a8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:23 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:23 
  console.log(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #dfd317a284dc7593 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:21 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:21 
  console.debug(JSON.stringify(response));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #1e5f32b2a5a920ea — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:25 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:25 
    console.log('list file search store: ', fileSearchStore);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #823e79fa6503b40a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:34 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:34 
  console.log('get file search store: ', fileSearchStore);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #7a5d6ad9f4b80f58 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:40 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:40 
  console.log('create file search store: ', fileSearchStore);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #2b263661363711c0 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:47 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:47 
  console.log('uploaded file: ', file.name);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #ac08bab2bccd3f6c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:59 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:59 
    console.log('operation: ', op);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #fa831d4a57046d53 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:76 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:76 
    console.log('operation: ', op);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #4e8fbb6343dcf3e3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:96 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:96 
  console.log('text response: ', response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #0e44e358ae05d657 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:97 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:97 
  console.log(
    'grounding metadata: ',
    JSON.stringify(response.candidates?.[0]?.groundingMetadata, null, 2),
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #cd735fdcbba0525c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:118 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:118 
    console.log('list documents: ', document);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #3c6defc7b2915148 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:131 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:131 
  console.log('get document: ', document);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #d8a16b40408f17fe — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:80 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:16 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:80 
      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #e78c6606c6b435ec — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:31 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:9 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:31 
      console.debug(text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #d9ec1640a78221f8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:25 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:25 
  console.debug(response.executableCode);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #b2df2664fcedbd87 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:26 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:26 
  console.debug(response.codeExecutionResult);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #d6572eef8439d841 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:32 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:32 
    console.log(`current file status: ${getFile.state}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #ed8bbd070a13818c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:58 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:58 
  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #f193b740021feaec — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:55 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:13 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:55 
  console.debug(response.functionCalls);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #d5c5b7bbea9dacc7 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:52 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:10 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:52 
  console.debug(response.functionCalls);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #a6fd72a6b31ee84b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:29 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:29 
  console.debug(response!.candidates![0]!.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #1c9f96bce18b2d77 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:24 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:24 
  console.debug(JSON.stringify(response));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #3bbf773e26457c3d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:27 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:27 
  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #a6f3a48cf272333d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:38 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:38 
  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #024e74673198ce5e — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:42 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:9 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:42 
  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #0b81b9db7ca84f52 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:36 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:13 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:36 
  console.debug(JSON.stringify(response?.candidates?.[0]?.safetyRatings));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #d5f6264ba526c826 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:23 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:23 
  console.debug(JSON.stringify(response?.candidates?.[0]?.groundingMetadata));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #68d453a0395634ae — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:20 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:20 
  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #8301e5531b41e0aa — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:19 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:19 
  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #332bfe3796d5aed7 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:20 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:20 
  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #b7427c2545a17c0d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:24 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:24 
  console.debug(response.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #acd1932a24858576 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:26 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:26 
    console.debug(response.candidates[0].urlContextMetadata);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #373881de365d0570 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:24 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:24 
  console.debug(response?.generatedImages?.[0]?.image?.imageBytes);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #5b4a229605170b79 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:36 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:36 
    console.log(
      `No videos generated due to: ${JSON.stringify(
        operation.response?.raiMediaFilteredReasons,
        null,
        2,
      )}`,
    );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #4d8fc826ae4f028d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:19 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:19 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #26647660dc52668c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:70 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:70 
      console.log(
        `Function call: ${step.name} with arguments ${JSON.stringify(
          step.arguments,
        )}`,
      );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #b081019f60deba06 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:92 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:92 
      console.log(`Final response: ${response2}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #6e41c33aeb806e5c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:94 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:94 
      console.log(`Output: ${step}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #4a80dceebe988f15 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:56 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:56 
      console.log(
        `Function call: ${step.name} with arguments ${JSON.stringify(
          step.arguments,
        )}`,
      );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #bf2ac3d6c5f95777 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:79 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:79 
      console.log(`Final response: ${response2}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #059d75f051adad29 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:81 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:81 
      console.log(`Output: ${step}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #97cdbbe23f66e202 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:19 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:19 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #a39dff785d312159 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:22 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:22 
  console.debug(getResponse);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #099c8cc56de8610d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:38 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:38 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #c57e1fcd581f0718 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:42 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:42 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #d052df0c308b35c0 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:66 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:66 
  console.debug(generateContentResponse.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #65d14c74ac121e23 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:38 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:38 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #0912de266443a40b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:41 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:41 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #2f4f5240a941f0ee — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:64 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:64 
  console.debug(generateContentResponse.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #5efdf5bec62f0300 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:55 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:55 
  console.debug(
    'Generate Content response text: ',
    generateContentResponse.text,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #138f3a734a3d0dda — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:59 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:59 
  console.debug(
    'Generate Content response data: ',
    generateContentResponse.data,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #f7fc359ece22a6f6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:52 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:52 
  console.debug(
    'Generate Content response text: ',
    generateContentResponse.text,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #e5b6eb2827dbe819 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:56 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:56 
  console.debug(
    'Generate Content response data: ',
    generateContentResponse.data,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #7e88eb766448b8fb — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:22 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:22 
  console.log('Model: ', response1);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #9d3d6fdd3379d62b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:31 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:31 
  console.log('Model: ', response2);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #bc2fd8825feed327 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:34 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:34 
  console.log('Model: ', response1);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #57e94ea0efd985cb — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:54 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:54 
  console.log('Model: ', response2);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #3cf27c7b17018b88 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:22 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:22 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #8d5249491606b6e8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:21 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:21 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #d6cd5ca1424246bb — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:22 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:22 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #261dfc954c6e8863 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:52 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:52 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #151d1f73258ef7d6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:21 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:21 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #4ba3301bf34d1224 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:29 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:29 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #c916e65d40dc2ea3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:49 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:49 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #787c4d806c8330e8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:22 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:22 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #ae28c5491786fd63 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:21 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:21 
  console.debug(response);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #b7ff8d9be9bfca65 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:184 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:13 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:184 
    console.log('Token:', JSON.stringify(token));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #16ffc74f58e060f3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:152 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:13 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:152 
  console.log('Token:', JSON.stringify(token));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #9811d7a3df98d3e9 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:37 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:9 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:37 
  console.log('Registered file: ', file);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #8ad3db15621e1e43 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:45 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:9 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:45 
  console.log(result.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #5af9d3e61f728a5c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:41 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:41 
  console.log(`Trigger created successfully! ID: ${triggerId}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #8cb8a2e1a05e4bca — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:44 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:44 
  console.log('Getting trigger by ID:', triggerId);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #39926e0ecaa28f8c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:46 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:46 
  console.log('Got trigger:', fetchedTrigger);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #25a3c38b84f0ff54 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:52 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:52 
    console.log('Trigger:', trigger);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #c11fe74949b1edb5 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:61 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:61 
  console.log('Paused trigger status:', pausedTrigger.status);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #34db9c1d3424fee4 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:69 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:69 
  console.log('Resumed trigger status:', resumedTrigger.status);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #e261eb25d80e7320 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:76 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:76 
  console.log('Trigger execution details:', executionResponse);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #3ddadb19640f6dea — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:80 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:80 
  console.log('Listing executions for trigger:', triggerId);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #99c79a5e9ffb2763 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:85 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:85 
  console.log('Trigger executions:', executions);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow dependency Excluded from app score #e14e9383066dcba3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:89 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:89 
  console.log('Deleting trigger:', triggerId);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 362 low-confidence finding(s)
low env_fs dependency Excluded from app score #2adf4db34cc7d070 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/rollup.config.mjs:2 
import {readFileSync} from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfafeddff6e3ee0b — Filesystem access.
pkgs/npm/@[email protected]__reposrc/rollup.config.mjs:6 
  readFileSync(new URL('./package.json', import.meta.url), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c6b618a8bcb562c7 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/add_docsite_license_headers.ts:7 
import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #06d4fa3d3a8a4ebc — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/add_docsite_license_headers.ts:20 
  const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #24a4a6e423f0a97f — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/add_docsite_license_headers.ts:24 
  fs.writeFileSync(filePath, header + content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e5bc3d368438d9e5 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:8 
import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #fd55180a313d6095 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:39 
  const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #52779051ba416dc8 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:43 
  fs.writeFileSync(filePath, HEADER + content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b9b0daada84efb72 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/generate_pages.ts:87 
    const manifestContent = fs.readFileSync(manifestPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #062f01122172ee0c — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/ignore_missing_mcp_dep.js:7 
import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #401c5e844d57d8dc — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/ignore_missing_mcp_dep.js:64 
    const fileContent = fs.readFileSync(absolutePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #8c1663b474166bc0 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/ignore_missing_mcp_dep.js:74 
      fs.writeFileSync(absolutePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #f959740b5b6f800c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/scripts/prepare.js:22 
const isCI = process.env.CI === 'true' || process.env.KOKORO_JOB_TYPE !== undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bd39d07753403c1 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #487f399c98224f43 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3088b0e91e1fd44c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccf06f85bfc774a5 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/abort_signal.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #028df95988fabc5a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f98cc790398e2ab — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea2eef0898783a73 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c6bf959ef45b2a5 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_error.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0fb5d42daea5bd6 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65fcfa21884acd53 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6986a7db3b0930e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1e3ebcede433fc8 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/api_version.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7067adbcdfd9b9d6 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:10 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9540620f3da78069 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:17 
  apiKey: process.env.GEMINI_API_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69ca15d8b8d191b0 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:28 
  if (process.env.GOOGLE_GENAI_USE_VERTEXAI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5c939dc0e2e1e48 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:71 
    await fs.writeFile(tempFilePath, jsonlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a483119053948cd0 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_file.ts:148 
      const contentString = await fs.readFile(tempFilePath, {encoding: 'utf8'});

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8cae64647cb3e7d3 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:14 
  apiKey: process.env.GEMINI_API_KEY!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae0df76916a7c279 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/batch_embedding_inline.ts:25 
  if (process.env.GOOGLE_GENAI_USE_VERTEXAI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9bf1cb7c4e4803d3 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:18 
const SKIP_HTTP = process.env.SKIP_HTTP === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #517f0a0011106488 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:26 
const MODE = (process.env.MODE || 'live') as 'live' | 'record' | 'mock';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ad8637e31962ba8 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:35 
  const mockedData = fs.readFileSync(MOCK_FILE);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bfdd90234a0f51b — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:92 
                fs.writeFileSync(MOCK_FILE, Buffer.concat(buffers));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10c1f536d1773211 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:296 
          process.env.GCLOUD_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ccf2ecfa6f16921 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:297 
          process.env.GOOGLE_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8fe72db4295b59f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:298 
          process.env.GEMINI_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #56173799e99c4f47 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:300 
        const url = new URL(
          'https://generativelanguage.googleapis.com/v1beta/interactions',
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #4ce63bc7059d763e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:380 
  delete process.env.GOOGLE_GEMINI_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68e3d61241d99a29 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:382 
    process.env.GCLOUD_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ff1d252d2a6f833 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:383 
    process.env.GOOGLE_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78e69e1f90351d5b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/benchmark_streaming.ts:384 
    process.env.GEMINI_API_KEY ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85d8f2df4a889adb — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/caches.ts:8 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02ebd4133bf76c11 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/caches.ts:9 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00edec6c6abb62ed — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/caches.ts:10 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ed9f11b91768261 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:12 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcc165a88e62c15e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:13 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47ff6a483a4ee2d9 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:14 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #605ed74c103cf45f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc.ts:15 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #134aed6cf34042c2 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:15 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #760d18aaaade45fb — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:16 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e638cc00a3e46f3 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:17 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f91a648ef9c35b64 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming.ts:18 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2485238745e94013 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming_function_call.ts:15 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ca38183f67cb472 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming_function_call.ts:16 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #084c427c49d827f8 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chat_afc_streaming_function_call.ts:17 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d930218d9d2321c9 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a865014d65db51b2 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7583bb98b2218cf4 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09886b55ec8f268f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/chats.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72ab5942a7243938 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f93f9e1994445d76 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86d74d894438af3e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60b6d29efa6a6eaa — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/count_tokens.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f353e3e75e8963b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/direct_url.ts:8 
const client = new GoogleGenAI({apiKey: process.env.GEMINI_API_KEY});

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51f1d2e721cbc443 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_content_reference.ts:12 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #813055fab3956779 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_content_reference.ts:13 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #772fbf46b80b3e56 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_content_reference.ts:14 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ba38518e4a9b802 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_control_reference.ts:12 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #796bb54b4bb5f0e0 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_control_reference.ts:13 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f9596176f024ce4 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_control_reference.ts:14 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c39716140b07d76 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_mask_reference.ts:13 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02ca9749b7d38da6 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_mask_reference.ts:14 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e6aab4a3a183e86 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_mask_reference.ts:15 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0a59f3a3a2a37ca — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_style_transfer.ts:8 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69d3e19142af2d8e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_style_transfer.ts:9 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0840b946e825da16 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_style_transfer.ts:10 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e24be4198ab29dd — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_subject_reference.ts:12 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a46ed8b356c9bbb — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_subject_reference.ts:13 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #501c15339e073934 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/edit_image_subject_reference.ts:14 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40750350cefc5d83 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e83e65ad6819416 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2af8aa7f1088c71 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd5b0e7ef929ab47 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/embed_content.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fb8f1f65d8cd54f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/file_search_stores.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6ae372835bf4994 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:16 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93bcd0022e21c2f5 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:17 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2815af1f6950755b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:18 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44b297bdc1bdf4b8 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_afc_streaming.ts:19 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #994dff759fb63104 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:7 
import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #263f7403a4dd5a09 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:9 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bae1134bf05b2790 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:10 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ccbda4e36dfbf0b0 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:11 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #001c6c6a51b50c5a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:12 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #853e9400f3cb15ec — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:35 
      fs.writeFileSync(fileName, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb3e2f1e67500fbc — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming.ts:65 
      fs.writeFileSync(fileName, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8de087af66ddef95 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming_function_call.ts:12 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8b5f927645fdc88 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming_function_call.ts:13 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bec8402e355abf1c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_streaming_function_call.ts:14 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8762845e037ae03 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12e0a28f43ebac56 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b0585988ce2293f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ff2bae8ab3a12c2 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_code_execution.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e2f4bb4b5f76b94 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f8f074fac23ef6c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_file_upload.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b066c1506efd83b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:13 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fc0bca03b439c14 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:14 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf8378ce51976712 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:15 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0898dba383cbfe0a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling.ts:16 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1547ef2cb5379d6c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:10 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6daabdb69667db46 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:11 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8854482fce4a6857 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:12 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f441c66a05569539 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_function_calling_accept_json_schema.ts:13 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b8c94da76bb5c57 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24cab52510959614 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aff51ebba0274900 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f144dc4d5540f72 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_latlong.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00dc92a7eb463378 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #620748dfbe1465e4 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3743ebd84aaba3a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8a852735904573a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_log_prob.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93090adca8c3145a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ed09c2f9eb1f976 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e5f723ec3d6db89 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5660d253b00e9ae — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_model_configuration.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #787490b5dfd9f332 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:8 
const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ae01e36d9a55e19 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #297a5133d43cc778 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e20078c2c00a604c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ab44905be57a4d3 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:9 
const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c7aec39de13f68a8 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:10 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12a2d9a2a93a36d8 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:11 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8beec3b66a31b1b0 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_response_schema_accept_json_schema.ts:12 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95c2dd8b862e636d — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:13 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e323fa24423757cd — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:14 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8340ce93075d25ea — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:15 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8415269a813c094 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_safety_settings.ts:16 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77789225771dfd1e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cdb13e8691ef7c48 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dd67705c02f3887 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ac9e8109d310788 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_search_grounding.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b34bfe39e5cf40f9 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #defc1cd877d9423b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73f8e5159d18a031 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c60502d305c510f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_system_instructions.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1cbe53f9431bd8e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d762342a026973c4 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e17f66dd189fbfe — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aeafa43e1fc6257e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de3ba004e8832d7e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:8 
const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #215f8c434f2adf5e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_text_vertex_apikey.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e905145b49c8a85 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #135eac15bcbe8dbf — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_content_with_url_context.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e638135ea9477c3 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #745b130e8bd61fb5 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0b2b158d09b051b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aff3ed096f24b9cb — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_image.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5307e8c9c05df0e5 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b87f0d31efe125b6 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca086dd91beb8b8d — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c37df12441b355ba — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83983cd259fbc115 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_edit_outpaint.ts:8 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d0779f17eb59c68 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_edit_outpaint.ts:9 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90cc50a586d70e9a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_edit_outpaint.ts:10 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf062efe3ef4a139 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d7d5776a803779c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf8b074868eeff67 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4391aa944f84909 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_extension.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d34f1daec6dadf2 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b949dede710a22a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #406f8746a8152fc9 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ebc6cbf789cfd21 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/generate_videos_rai_filtered.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ba7213e5e1bcd9f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe5d0088088b0754 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34d5fb142f5adafd — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24c9f810fcf6172e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/get_model_info.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9667c93acd2ab6a1 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2028b07c5fd537f8 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_basic.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c35a02e1c262636 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1a9f403c0981e80 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_client_state.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0edac80ebdb694dc — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #170673640b470287 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_function_calling_server_state.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6112a5d47f75108 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42738b7035efebbc — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_get.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7a2f8c353dce075 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5dd624657c9dd774 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #c9a1a82a475db5fe — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio.ts:19 
  const audioResponse = await fetch(audioUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #a821f7ef4693b9f6 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a50c237913308563 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #5b9794384d4fb295 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_audio_with_generate_content.ts:19 
  const audioResponse = await fetch(audioUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #df80e5b8f3ebda2d — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb22612e0bc7a955 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #547c2f65464222ce — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image.ts:19 
  const imageResponse = await fetch(imageUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #7612f891fdb08b2a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78a67d37cf63b342 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #f907cdc76c272bec — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_input_text_and_image_with_generate_content.ts:23 
  const imageResponse = await fetch(imageUrl);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #12861d7d1eed8502 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed9ff68d3a0eff03 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #765a1620a9cf9788 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc9748f91eef02a6 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_audio_with_generate_content.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6df59693f1594de9 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e5a9c349f421995 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9f8b50c8f8d8880 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa6f3df023f291e0 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_multimodal_response_image_with_generate_content.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce058b8fe24c2d9e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb8cc69a8aaf1c71 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateful.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c8c6e41af5e5a64 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1433a3ef1ae49071 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_stateless.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2986f6c980b305d1 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_streaming.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #916c7d5f0f65a1c8 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_streaming.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc55b11b554b25ba — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aae4d1af8a6adc43 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_structured_output_json.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3ce16d9aa6dc1d7 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12fe0a2408a3e35f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_code_execution.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0841f241f77ffe56 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1b3a4e8f7437dc6 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_computer_use.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15a29ae3af5b5d59 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb5db07203a8d043 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_functions.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a44af8bebfdbddb — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6460042f6276e22a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_google_search.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ffcd2137c40e058 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #123a9d4caaa55d1f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mcp_server.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e16557e4a7d4d8b3 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fe63302a9c6e3c9 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_mime_type.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #111a6ed7b5a15f15 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d852f8fc1a09852b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_tool_call_with_url_context.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b0a44d4423a81a2 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8dca62ba876726a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/interactions_with_config.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0966f3643e4b201 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #072eeb67446b8bb8 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:9 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5599d9b6e9f8e8ca — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:10 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #125126cf692e37bf — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/list_models.ts:11 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49a0cd3c7c87fb27 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:13 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d46818abeb6bcb9 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:14 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0785cb9c59a692b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:15 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99b63ea27d6c1887 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:16 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c67aa0c1c463c425 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content.ts:18 
  process.env.GOOGLE_GENAI_MLDEV_USE_EPHEMERAL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8d98def0f7dea0d — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content_with_url_context.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f12ec9722fa75a2 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_client_content_with_url_context.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6920a3107aa41cde — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:13 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b6912fbc0fd379b — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_ephemeral.ts:14 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #599e114c0d549150 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_music.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #298b850e2cf770b4 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_music.ts:9 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bfbfb178414626ae — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:9 
import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2ed76c58255554e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:26 
  const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac5dba234d929b33 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:27 
  const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e52d9750048c4be — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:28 
  const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e54d12dc8226f78e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:29 
  const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30af8531f81a8a80 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:55 
    const voiceSampleAudio = fs.readFileSync(voiceSamplePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8ce113a65e35e15 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:59 
      consentAudio = fs.readFileSync(voiceConsentPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c704b46c2bb2e7cb — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_prompt.ts:166 
  fs.writeFileSync(filename, fileBuffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d047ecc28f0ffee — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:25 
const GOOGLE_API_KEY = process.env.GOOGLE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4396489f4427055e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:26 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e9ca2a3a4e63cc2 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:27 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9834531b8e2324e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/live_server.ts:28 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d76ea6b61df04c90 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:12 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40b156c0103b9736 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:13 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d0116354b51b09c — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:14 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a9d67be643139f1 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client.ts:15 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1589a950a0dfbdb3 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:12 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93a94355266d7398 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:13 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa7f24e453ecd40d — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:14 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #175f3223e2332b84 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/mcp_client_stream.ts:15 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0892b9b8f404e92 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_virtual_try_on.ts:8 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6321f5ae47a40e14 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_virtual_try_on.ts:9 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45d8762f3a017539 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/recontext_image_virtual_try_on.ts:10 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bb7e8d464c03673 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:9 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d6332b00a61970d — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/register_files.ts:10 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b81f1a1de5a6d37 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/segment_image.ts:8 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bef9dff0bcf5d74 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/segment_image.ts:9 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4c11242df436aea — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/segment_image.ts:10 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e82bd9ec04ee7ea5 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/trigger_generic_operations.ts:8 
const GEMINI_API_KEY = process.env.GEMINI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #258d6368423eb7c2 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/tunings.ts:8 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #769a8ad8af9bf1ce — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/tunings.ts:9 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90b4de6a0f19f1e7 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/tunings.ts:10 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3063653461698fbe — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/upscale_image.ts:8 
const GOOGLE_CLOUD_PROJECT = process.env.GOOGLE_CLOUD_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d75b026152d17b5 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/upscale_image.ts:9 
const GOOGLE_CLOUD_LOCATION = process.env.GOOGLE_CLOUD_LOCATION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f234ec4915d3239 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sdk-samples/upscale_image.ts:10 
const GOOGLE_GENAI_USE_VERTEXAI = process.env.GOOGLE_GENAI_USE_VERTEXAI;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #1b37b10126d5e36b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:240 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1461bd478365e383 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:271 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e68b53169b5bbf36 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:323 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #60056350e89a98b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:373 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #342f486a340c6ac0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:404 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ed9b8dfbeef6562e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:452 
      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'POST',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8fe064c3c3035501 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:473 
      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'POST',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3b7d9a87275704da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:501 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #081742cd880e6586 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:536 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3ad5fd76fbcf5089 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:595 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2c3e4a602ebd19ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/batches.ts:632 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6dd10f29079a3d8d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/caches.ts:92 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #017b678bd2a73c0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/caches.ts:121 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #07d3d321d5fd9ea8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/caches.ts:171 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8b6d1db4fd62fdcb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/caches.ts:200 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7a480c2cef0a5922 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/caches.ts:250 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #50d3bf35b273f1a7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/caches.ts:289 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ad85ce3aadf3cf3e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/caches.ts:352 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #25727f5a82ed2a58 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/caches.ts:381 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #dc9ee45bb8f6fe51 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/caches.ts:417 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #58e5c0d040c5cdd0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/caches.ts:453 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #577dff17d7206203 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/cross/_cross_uploader.ts:149 
      response = await apiClient.request({
        path: '',
        body: chunk,
        httpMethod: 'POST',
        httpOptions: {
          ...httpOptions,
          apiVersion: '',
          baseUrl: finalUrl,
          headers: mergedHeaders,
        },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fc51ded65366b5bc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/documents.ts:74 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ee7696c86efd25a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/documents.ts:116 
      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'DELETE',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #02f6454822f40c70 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/documents.ts:148 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f2231f3b4a03300f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/files.ts:159 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #44ae5ee498a05340 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/files.ts:208 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4e5c4ab6b91e532d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/files.ts:264 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c39f31a668123be4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/files.ts:317 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ffa9e5e5b4c005ee — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/files.ts:366 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0415f579b77c8b55 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:143 
    const response = await this.apiClient.request({
      path: pathname,
      httpMethod: 'GET',
      queryParams: queryParams,
      httpOptions: httpOptions,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #56453b4abbd039fa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:189 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0ceb57b318df49d1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:236 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #25eb817539c5b403 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:278 
      await this.apiClient.request({
        path: path,
        queryParams: queryParams,
        body: JSON.stringify(body),
        httpMethod: 'DELETE',
        httpOptions: params.config?.httpOptions,
        abortSignal: params.config?.abortSignal,
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fc1556cefe0a9674 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:310 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #27f711f7d21f7021 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:354 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #83aa16aa83352d42 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/filesearchstores.ts:409 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9cbd9c38889b34e5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/gaos/lib/sdks.ts:357 
        let response = await this._httpClient.request(req);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7303746135316b01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:704 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bccc8f22539b82da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:746 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #357c603fa31cc236 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:916 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #de2036b736fff1ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:958 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9040af1a18d592a1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1013 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6a13e08a9ff18b17 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1055 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b8b778486f92201a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1110 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7f23b8d654ab0de0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1169 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #babc86a912a969fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1249 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4ccffb5977ad9edb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1319 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e7153a228b4d12df — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1375 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #140c8f2f7755e8b2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1407 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6524f7d634be9980 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1449 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #402067e68ba970e9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1491 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8aae1fe7153fbe4b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1558 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d9a1fb000d7fc5dc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1590 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'PATCH',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #17e8ed23d1fabd36 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1643 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c945ce8aa1ccfe73 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1685 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'DELETE',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bdd964c659cec0e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1753 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8d320663b76e8372 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1795 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3bc356a85f65a710 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1865 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ac28c738aab96d08 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1924 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5abe9ed65aa77aa4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/models.ts:1960 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #232f018e2e4e5d10 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:7 
import {createWriteStream} from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32c32ac879e8bd8b — Filesystem access.
pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:8 
import {writeFile} from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0fa437aba6bad55 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:39 
          await writeFile(params.downloadPath, response as string, {
            encoding: 'base64',
          });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #a371065699b55ce8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/node/_node_downloader.ts:58 
    return await apiClient.request({
      path: `files/${name}:download`,
      httpMethod: 'GET',
      queryParams: {
        'alt': 'media',
      },
      httpOptions: params.config?.httpOptions,
      abortSignal: params.config?.abortSignal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #28b07849a0971bd4 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/src/node/_node_tokenizer_platform.ts:8 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b5e06bb41861734 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/src/node/_node_tokenizer_platform.ts:34 
      const data = await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72e9eb1e0431ecbe — Filesystem access.
pkgs/npm/@[email protected]__reposrc/src/node/_node_tokenizer_platform.ts:55 
      await fs.writeFile(tmpPath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5c44bdcab530e35 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/src/node/_node_uploader.ts:6 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #cd57bfb751c91000 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/node/_node_uploader.ts:290 
          response = await apiClient.request({
            path: '',
            body: chunk,
            httpMethod: 'POST',
            httpOptions: {
              ...httpOptions,
              apiVersion: '',
              baseUrl: finalUrl,
              headers: mergedHeaders,
            },
          });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #719445bf54d70533 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/operations.ts:132 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b4e569813368fcc9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/operations.ts:156 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #afe6c70a9be58c55 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/operations.ts:190 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bce88ed40474936b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/tokens.ts:286 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(transformedBody),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #abcbca656ac78dda — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/tunings.ts:136 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9f03c805696e21d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/tunings.ts:170 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #be187c2dc28f29ec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/tunings.ts:214 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'GET',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b0c5a638321ae42a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/tunings.ts:277 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #db3d2bea1ff47b46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/tunings.ts:315 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f09f50cc87a98c40 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/tunings.ts:366 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a6c1211ffc1190f0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/tunings.ts:421 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #deaa68e6f9932c33 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/tunings.ts:465 
      response = this.apiClient
        .request({
          path: path,
          queryParams: queryParams,
          body: JSON.stringify(body),
          httpMethod: 'POST',
          httpOptions: params.config?.httpOptions,
          abortSignal: params.config?.abortSignal,
        })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@mistralai/mistralai

npm dependency
medium pii_flow tooling Excluded from app score unknown #8b5a65c9830f0664 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:30 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:30 
console.log(`Created job with ID: ${job.id}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #62ce7b232dbbd9a6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:42 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:42 
  console.log(`Job status: ${job.status}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #f74fa47ba29e2f1a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:45 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:45 
console.log(`Job is done, status ${job.status}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #1b369db75ca3ee3b — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:51 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:51 
      console.log(response.body);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #849d41f9afc2281f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:53 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:53 
      console.log(output);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #f1b1cb6a60ea9359 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:59 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:59 
  console.log(`Error file ID: ${job.errorFile}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #95e03f352d44f5e3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:15 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:15 
console.log("Chat:", chatResponse);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #61dbe575e7362da8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:33 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:33 
console.log(chatResponse.choices[0]?.message.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #37d81ddaa9db1bed — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:27 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:27 
console.log("JSON:", chatResponse.choices[0].message.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #07cd19751e3f0271 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:20 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:20 
console.log("Embeddings Batch:", embeddingsBatchResponse.data);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #c46bcd1184e93a58 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_files.ts:24 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_files.ts:24 
console.log(createdFile);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #0aa3a408536a22ef — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_files.ts:28 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_files.ts:28 
console.log(files);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #f8ccac60b54aebc1 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_files.ts:32 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_files.ts:32 
console.log(retrievedFile);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #f8e0eecea75eeeca — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_files.ts:36 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_files.ts:6 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_files.ts:36 
console.log(deletedFile);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #2a39bfd0548df634 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:127 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:127 
  console.log(`calling functionName: ${functionName}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #56a95db5c1145ff1 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:128 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:128 
  console.log(`functionParams: ${toolCall.function.arguments}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #0994bbc088bf5996 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:147 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:147 
console.log(response.choices[0].message.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #b2d6df586d62a7cc — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:150 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:150 
  console.log(`calling functionName: ${functionName}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #0fcec4c00df299af — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:151 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:151 
  console.log(`functionParams: ${toolCall.function.arguments}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #abc91a33b5921a16 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_json_format.ts:16 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_json_format.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_json_format.ts:16 
console.log("Chat:", chatResponse.choices[0].message.content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #74c3fa2d66b48a8f — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:33 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:6 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:33 
console.log("OCR ", ocrResponse);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #52d2a04927ab5018 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:15 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:15 
console.log("OCR:", ocrResponse);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #4437c5b9c553d321 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:52 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:4 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:52 
console.log("\n", parsedAccumulatedStream);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #2dc22899afea3cd6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:70 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:4 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:70 
console.log("\n", chatResponse.choices[0].message.parsed);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #6e9b164c47c6e4ba — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:27 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:27 
console.log("Success", chatResult);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #abadbb26bc0bdfb3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:23 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:23 
console.log(`created prompt ${promptId} (v${prompt.version})`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #6b256ba4ea82abf3 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:38 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:38 
console.log(`production -> v${live.version}: ${live.definition?.content}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #7e6b02b88f3f090d — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:153 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:107 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:153 
        console.error(`\nTranscription error: ${errorMessage}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #dc34b1b03be11893 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:213 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:162 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:213 
        console.error(`Transcription error: ${errorMessage}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #7d7d71773b301021 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning.ts:35 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning.ts:35 
  console.log(content);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #e9c00612798896c2 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning.ts:42 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning.ts:42 
          console.log(inner.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #25b466fd5a417487 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning.ts:47 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning.ts:47 
      console.log(chunk.text);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #6a6ca4df91cf523a — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:61 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:14 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:61 
  console.log(
    `turn ${i + 1}: prompt=${String(promptTokens).padStart(4)} ` +
      `completion=${String(completionTokens).padStart(4)}  -> ${finalText(message.content)}`,
  );

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #53190f4080cb2dc8 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:74 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:14 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:74 
console.log(
  `TOTAL: prompt=${totalPrompt} completion=${totalCompletion} ` +
    `(sum ${totalPrompt + totalCompletion})`,
);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #dc88749378624b8c — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:30 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:7 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:30 
  console.log(`typeof content = ${Array.isArray(content) ? "Array" : typeof content}`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #66c46f965ca3d5a6 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:32 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:7 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:32 
  console.log(JSON.stringify(content, null, 2));

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #e09f514d500e4be7 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:30 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:30 
console.log(
  `created skill ${skillId} (v${skill.version}), assets: ${Object.keys(
    skill.definition?.assets ?? {},
  )}`,
);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #12e7ed34c7c45979 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:47 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:47 
console.log(`published v${version.version}, moved 'main' to it`);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #f3eb8630ff0e3895 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:50 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:50 
console.log(
  `main -> v${runnable.version}: ${runnable.definition?.description}`,
);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow tooling Excluded from app score unknown #a063d3b21253a761 — PII-bearing data is written to a log sink. Logged PII is a privacy concern even when it does not leave the process.
pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:35 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:18 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:35 
  console.log(result);

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
expand_more 51 low-confidence finding(s)
low egress dependency Excluded from app score #bf711a36ca1f7d4d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/esm/hooks/tracing.js:52 
            return this.wrappedClient.request(request);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #eb4e2f3df7672af2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/esm/hooks/tracing.js:58 
                return await this.wrappedClient.request(request);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1bded427ed8f3d33 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/esm/hooks/tracing.js:60 
            return await observability.runWithContext(activeContext, () => this.wrappedClient.request(request));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c2854ffd46b6e9ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/esm/lib/sdks.js:147 
            let response = await this.#httpClient.request(req);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #b33fa1484d9a15b5 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_audio_transcription_diarize.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ef588d3908234715 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_audio_transcription_stream.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2e9bd7cd17332a44 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_batch_jobs.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2051adbfbd492f7e — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_chat_no_streaming.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c3dd4268be2fa6c4 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_chat_prediction.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b9def6c92a138a96 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_chat_streaming.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #420447aa19338557 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_chat_with_image_no_streaming.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e5d0a45c504c1655 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_conversation_agent.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #04e1dae8c7f58458 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_embeddings.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #fa39f67333a56290 — Filesystem access.
pkgs/npm/@[email protected]/examples/src/async_files.ts:1 
import * as fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d2536719ee269cd4 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_files.ts:6 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ab22462804191963 — Filesystem access.
pkgs/npm/@[email protected]/examples/src/async_files.ts:19 
const blob = new Blob([fs.readFileSync(filePath)], {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d1fea6940d96b894 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_function_calling.ts:4 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9ae5062cb73164ac — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_function_calling_streaming.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9a57742779055753 — Filesystem access.
pkgs/npm/@[email protected]/examples/src/async_jobs.ts:1 
import * as fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e90ddee23fd852ef — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_jobs.ts:6 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c1b0082ef035f974 — Filesystem access.
pkgs/npm/@[email protected]/examples/src/async_jobs.ts:19 
const blob = new Blob([fs.readFileSync(filePath)], {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #6403050d9c362a78 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_json_format.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #622843b5bc66a8e4 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_list_models.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b537486bd141b73d — Filesystem access.
pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:2 
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5b7c89a348a6a569 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:6 
const apiKey = process.env.MISTRAL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5a15d0c99033f01f — Filesystem access.
pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_file.ts:16 
const uploaded_file = fs.readFileSync(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1523f0e581101d45 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_ocr_process_from_url.ts:3 
const apiKey = process.env.MISTRAL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #3c3594dd5c10c3c8 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/async_structured_outputs.ts:4 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c0a199ba1b1099d2 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:3 
const azureAPIKey = process.env["AZURE_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1ba2112cbdea5be4 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/azure/async_chat_no_streaming.ts:8 
const azureEndpoint = process.env["AZURE_ENDPOINT"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #a307acc3518d5947 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/error_handling.ts:4 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2c85a9646733fa4c — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/gcp/async_chat_no_streaming.ts:3 
const projectId = process.env["GOOGLE_PROJECT_ID"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0d26bf08952bcd47 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/prompt_lifecycle.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0cefd762631928d3 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:38 
      default: process.env["MISTRAL_API_KEY"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #aebf5a466b8aa70f — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:43 
      default: process.env["MISTRAL_BASE_URL"] ?? "wss://api.mistral.ai",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #8ef2a411da997b63 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/realtime_microphone.ts:107 
  const apiKey = args.apiKey ?? process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ca36e20559fb0dab — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:46 
      default: process.env["MISTRAL_API_KEY"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #871a770615120f87 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:51 
      default: process.env["MISTRAL_BASE_URL"] ?? "https://api.mistral.ai",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #501fd024ffee2c04 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/realtime_transcription.ts:162 
  const apiKey = args.apiKey ?? process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #4ecde971ad415e08 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/reasoning.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ab45117ab02b4bc7 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/reasoning_multi_turn.ts:14 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #072ec322cc85194c — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/reasoning_response_shape.ts:7 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1b58334279b114cd — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/reasoning_with_streaming.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ba5ea7746b47e470 — Environment-variable access.
pkgs/npm/@[email protected]/examples/src/skill_lifecycle.ts:3 
const apiKey = process.env["MISTRAL_API_KEY"];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #f8becbdcd69f742a — Environment-variable access.
pkgs/npm/@[email protected]/packages/mistralai-azure/examples/chatComplete.example.ts:18 
  apiKey: process.env["MISTRAL_API_KEY"] ?? "",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #ac4662e1d67cd629 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/packages/mistralai-azure/src/lib/sdks.ts:259 
        let response = await this.#httpClient.request(req);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #539ba9c775fa352e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/packages/mistralai-gcp/src/lib/sdks.ts:255 
        let response = await this.#httpClient.request(req);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c8a06a51a5b97bd6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/hooks/tracing.ts:82 
      return this.wrappedClient.request(request);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #be89bb8db4308230 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/hooks/tracing.ts:89 
        return await this.wrappedClient.request(request);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a4282b61bd1eced4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/hooks/tracing.ts:94 
        () => this.wrappedClient.request(request)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #738d2e1c22526326 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/lib/sdks.ts:259 
        let response = await this.#httpClient.request(req);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@anthropic-ai/sdk

npm dependency
medium pii_flow dependency Excluded from app score #a59cc650f7b66763 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/lib/credentials/oidc-federation.js:42 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/lib/credentials/oidc-federation.js:39 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/lib/credentials/oidc-federation.js:42 
            resp = await config.fetch(url, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/json',
                    'anthropic-beta': `${types_1.OAUTH_API_BETA_HEADER},${types_1.FEDERATION_BETA_HEADER}`,
                    'User-Agent': config.userAgent || `anthropic-sdk-typescript/${version_1.VERSION} oidcFederationProvider`,
                },
                body: JSON.stringify(body),
            });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #d7364086078e1aaf — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/lib/credentials/oidc-federation.mjs:39 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/lib/credentials/oidc-federation.mjs:36 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/lib/credentials/oidc-federation.mjs:39 
            resp = await config.fetch(url, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/json',
                    'anthropic-beta': `${OAUTH_API_BETA_HEADER},${FEDERATION_BETA_HEADER}`,
                    'User-Agent': config.userAgent || `anthropic-sdk-typescript/${VERSION} oidcFederationProvider`,
                },
                body: JSON.stringify(body),
            });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #631eabcf90173b87 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:94 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:91 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:94 
            resp = await config.fetch(url, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/json',
                    'anthropic-beta': types_1.OAUTH_API_BETA_HEADER,
                    'User-Agent': config.userAgent || `anthropic-sdk-typescript/${version_1.VERSION} userOAuthProvider`,
                },
                body: JSON.stringify(body),
            });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #57aa6c086d33f205 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:58 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:55 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:58 
            resp = await config.fetch(url, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/json',
                    'anthropic-beta': OAUTH_API_BETA_HEADER,
                    'User-Agent': config.userAgent || `anthropic-sdk-typescript/${VERSION} userOAuthProvider`,
                },
                body: JSON.stringify(body),
            });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #0f9ab702d434626e — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/src/lib/credentials/oidc-federation.ts:83 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/src/lib/credentials/oidc-federation.ts:80 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/src/lib/credentials/oidc-federation.ts:83 
      resp = await config.fetch(url, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
          'anthropic-beta': `${OAUTH_API_BETA_HEADER},${FEDERATION_BETA_HEADER}`,
          'User-Agent': config.userAgent || `anthropic-sdk-typescript/${VERSION} oidcFederationProvider`,
        },
        body: JSON.stringify(body),
      });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #d6ebf70b79c73926 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:95 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:92 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:95 
      resp = await config.fetch(url, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
          'anthropic-beta': OAUTH_API_BETA_HEADER,
          'User-Agent': config.userAgent || `anthropic-sdk-typescript/${VERSION} userOAuthProvider`,
        },
        body: JSON.stringify(body),
      });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 224 low-confidence finding(s)
low env_fs dependency Excluded from app score #78416964141807ab — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:110 
        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e17cfd08e0cc0ed — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:210 
        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7e313386482c8b0 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:308 
        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4ae74198bbccb4e — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:73 
        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #946624ac83856246 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:172 
        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5605e16b8a26e49 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:268 
        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5db77b43f5f65c59 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/credential-chain.js:203 
            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c09308785ad8cfbd — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/credential-chain.mjs:166 
            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #60c5c27dbfc5bb34 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/identity-token.js:51 
            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #851807914059caae — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/identity-token.mjs:14 
            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1b42d4830545418 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/types.js:195 
            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a391b5b908f8c34d — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/types.mjs:154 
            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e3dd09332c668b5 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:56 
            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3646232fec08e6fd — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:20 
            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #690b86ffbc0b06c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/agents/agents.js:31 
        return this._client.post('/v1/agents?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d3b4f35253f62ef3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/agents/agents.js:76 
        return this._client.post((0, path_1.path) `/v1/agents/${agentID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6602dbb207e57b87 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/agents/agents.js:120 
        return this._client.post((0, path_1.path) `/v1/agents/${agentID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #aee0362c1a8fe128 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/agents/agents.mjs:27 
        return this._client.post('/v1/agents?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c9318fabf56b2228 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/agents/agents.mjs:72 
        return this._client.post(path `/v1/agents/${agentID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c5031948d9e89e93 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/agents/agents.mjs:116 
        return this._client.post(path `/v1/agents/${agentID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8edae06b7917c417 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.js:36 
        return this._client.post('/v1/deployments?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b6bc0c4d6fdebb41 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.js:79 
        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f6711e3ad5bba702 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.js:123 
        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #98984debc903d703 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.js:144 
        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/pause?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e48b586f80fbda4c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.js:165 
        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/run?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d30a65c0aa4f3cb2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.js:186 
        return this._client.post((0, path_1.path) `/v1/deployments/${deploymentID}/unpause?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b00ae2dd7c04a434 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.mjs:33 
        return this._client.post('/v1/deployments?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b8e164176256aa93 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.mjs:76 
        return this._client.post(path `/v1/deployments/${deploymentID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e8149e78ae7b2cb1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.mjs:120 
        return this._client.post(path `/v1/deployments/${deploymentID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c0a23b097a8f7a23 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.mjs:141 
        return this._client.post(path `/v1/deployments/${deploymentID}/pause?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b784747b349c887e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.mjs:162 
        return this._client.post(path `/v1/deployments/${deploymentID}/run?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fbbf2419437d3861 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/deployments.mjs:183 
        return this._client.post(path `/v1/deployments/${deploymentID}/unpause?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5e7b343de2f0586f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/dreams.js:23 
        return this._client.post('/v1/dreams?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7cd8264452049a5f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/dreams.js:86 
        return this._client.post((0, path_1.path) `/v1/dreams/${dreamID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #60a58d675d9b60c9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/dreams.js:106 
        return this._client.post((0, path_1.path) `/v1/dreams/${dreamID}/cancel?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a5a0bcb24e88be79 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/dreams.mjs:20 
        return this._client.post('/v1/dreams?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cf6d1ba7f05b9772 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/dreams.mjs:83 
        return this._client.post(path `/v1/dreams/${dreamID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #312cee8dae1cff67 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/dreams.mjs:103 
        return this._client.post(path `/v1/dreams/${dreamID}/cancel?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f8301a75cfc27e46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/environments.js:30 
        return this._client.post('/v1/environments?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #068f541c489bc04f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/environments.js:73 
        return this._client.post((0, path_1.path) `/v1/environments/${environmentID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #330b2d1565b689ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/environments.js:139 
        return this._client.post((0, path_1.path) `/v1/environments/${environmentID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e5e727c19992aa07 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/environments.mjs:26 
        return this._client.post('/v1/environments?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c3e2278a8a857089 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/environments.mjs:69 
        return this._client.post(path `/v1/environments/${environmentID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b6da62b0f06c498d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/environments.mjs:135 
        return this._client.post(path `/v1/environments/${environmentID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d3826ce748c2642b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/work.js:57 
        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #32b514c945aff7fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/work.js:114 
        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}/ack?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6c463adad0275c05 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/work.js:140 
        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}/heartbeat?beta=true`, {
            query: { desired_ttl_seconds, expected_last_heartbeat },
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5d3e1d97ad50ec9f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/work.js:218 
        return this._client.post((0, path_1.path) `/v1/environments/${environment_id}/work/${workID}/stop?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2a4223498ab46c3b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:54 
        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a8dc6b04364a7930 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:111 
        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}/ack?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #baedccb2025d8ee3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:137 
        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}/heartbeat?beta=true`, {
            query: { desired_ttl_seconds, expected_last_heartbeat },
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e52aefff02b81508 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/environments/work.mjs:215 
        return this._client.post(path `/v1/environments/${environment_id}/work/${workID}/stop?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4f9bf00a9a9e3216 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/files.js:112 
        return this._client.post('/v1/files?beta=true', (0, uploads_1.multipartFormRequestOptions)({
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString() },
                (0, stainless_helper_header_1.stainlessHelperHeaderFromFile)(body.file),
                options?.headers,
            ]),
        }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #eca8fbe392c58d9c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/files.mjs:109 
        return this._client.post('/v1/files?beta=true', multipartFormRequestOptions({
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString() },
                stainlessHelperHeaderFromFile(body.file),
                options?.headers,
            ]),
        }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a541acac678d42a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.js:24 
        return this._client.post((0, path_1.path) `/v1/memory_stores/${memoryStoreID}/memories?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6a41699b019e16ab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.js:71 
        return this._client.post((0, path_1.path) `/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ee5eea15e508ede2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.mjs:21 
        return this._client.post(path `/v1/memory_stores/${memoryStoreID}/memories?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cc196342e699cd71 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memories.mjs:68 
        return this._client.post(path `/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
            query: { view },
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #21d99752a003fd25 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.js:31 
        return this._client.post('/v1/memory_stores?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4fd2355e1ab2f207 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.js:72 
        return this._client.post((0, path_1.path) `/v1/memory_stores/${memoryStoreID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #29708a0dfbb60889 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.js:133 
        return this._client.post((0, path_1.path) `/v1/memory_stores/${memoryStoreID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9b7854f9e099e501 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.mjs:27 
        return this._client.post('/v1/memory_stores?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e26fe1d68c85553e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.mjs:68 
        return this._client.post(path `/v1/memory_stores/${memoryStoreID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b9068d98141a88a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-stores.mjs:129 
        return this._client.post(path `/v1/memory_stores/${memoryStoreID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #36633ae06803eb30 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-versions.js:71 
        return this._client.post((0, path_1.path) `/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}/redact?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2c71df2a1d72aad2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/memory-stores/memory-versions.mjs:68 
        return this._client.post(path `/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}/redact?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #61125b8dc661382a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/messages/batches.js:43 
        return this._client.post('/v1/messages/batches?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString(),
                    ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined),
                },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ca1f4a08d0287651 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/messages/batches.js:158 
        return this._client.post((0, path_1.path) `/v1/messages/batches/${messageBatchID}/cancel?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d75b7f0897793d0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/messages/batches.mjs:40 
        return this._client.post('/v1/messages/batches?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                {
                    'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString(),
                    ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined),
                },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9d684f1447100cb0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/messages/batches.mjs:155 
        return this._client.post(path `/v1/messages/batches/${messageBatchID}/cancel?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f04473f7f0305c71 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/messages/messages.js:64 
        return this._client.post('/v1/messages?beta=true', {
            body,
            timeout: timeout ?? 600000,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined),
                    ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined),
                },
                helperHeader,
                options?.headers,
            ]),
            stream: modifiedParams.stream ?? false,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0e1fa2ddd6251418 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/messages/messages.js:133 
        return this._client.post('/v1/messages/count_tokens?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                {
                    'anthropic-beta': [...(betas ?? []), 'token-counting-2024-11-01'].toString(),
                    ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined),
                },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #935f633b31e40f8f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/messages/messages.mjs:60 
        return this._client.post('/v1/messages?beta=true', {
            body,
            timeout: timeout ?? 600000,
            ...options,
            headers: buildHeaders([
                {
                    ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined),
                    ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined),
                },
                helperHeader,
                options?.headers,
            ]),
            stream: modifiedParams.stream ?? false,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e6e306dc63663800 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/messages/messages.mjs:129 
        return this._client.post('/v1/messages/count_tokens?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                {
                    'anthropic-beta': [...(betas ?? []), 'token-counting-2024-11-01'].toString(),
                    ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined),
                },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c71b68f733c6fab7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/events.js:61 
        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}/events?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1cf2af468f580648 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/events.mjs:58 
        return this._client.post(path `/v1/sessions/${sessionID}/events?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #dfe8007a451be77d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/resources.js:49 
        return this._client.post((0, path_1.path) `/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #723fceb109715f85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/resources.js:121 
        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}/resources?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #eabaf8c51cf00698 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/resources.mjs:46 
        return this._client.post(path `/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d42cfe13a82a2354 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/resources.mjs:118 
        return this._client.post(path `/v1/sessions/${sessionID}/resources?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c07d5bbea35a5bf7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/sessions.js:37 
        return this._client.post('/v1/sessions?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b2db817f186b3324 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/sessions.js:80 
        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0036e0b1deb3ecce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/sessions.js:145 
        return this._client.post((0, path_1.path) `/v1/sessions/${sessionID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fdfdbec8f1b6a355 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/sessions.mjs:33 
        return this._client.post('/v1/sessions?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c78e7027e98cbdc7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/sessions.mjs:76 
        return this._client.post(path `/v1/sessions/${sessionID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6b91ab184f08d7db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/sessions.mjs:141 
        return this._client.post(path `/v1/sessions/${sessionID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ae98fd476987263d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/threads/threads.js:77 
        return this._client.post((0, path_1.path) `/v1/sessions/${session_id}/threads/${threadID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d69d80ba9be1fc29 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/sessions/threads/threads.mjs:73 
        return this._client.post(path `/v1/sessions/${session_id}/threads/${threadID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c52200484287384e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/skills/skills.js:30 
        return this._client.post('/v1/skills?beta=true', (0, uploads_1.multipartFormRequestOptions)({
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        }, this._client, false));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2a046014fd7a217b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/skills/skills.mjs:26 
        return this._client.post('/v1/skills?beta=true', multipartFormRequestOptions({
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        }, this._client, false));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3f161bb015b79c7d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/skills/versions.js:24 
        return this._client.post((0, path_1.path) `/v1/skills/${skillID}/versions?beta=true`, (0, uploads_1.multipartFormRequestOptions)({
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        }, this._client, false));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9b1132ed9fb99faa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/skills/versions.mjs:21 
        return this._client.post(path `/v1/skills/${skillID}/versions?beta=true`, multipartFormRequestOptions({
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
                options?.headers,
            ]),
        }, this._client, false));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0dad4c96dada6dd1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.js:31 
        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/certificates?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #834ea1ac14146ad5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.js:119 
        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #000f021b6192a7e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.mjs:28 
        return this._client.post(path `/v1/tunnels/${tunnelID}/certificates?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #56e675fd6767620b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/certificates.mjs:116 
        return this._client.post(path `/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cabd5ba318a559c4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:34 
        return this._client.post('/v1/tunnels?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d1c06cebcd0609ec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:116 
        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b806f13499b6e854 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:143 
        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/reveal_token?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5131765c45220216 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.js:169 
        return this._client.post((0, path_1.path) `/v1/tunnels/${tunnelID}/rotate_token?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f808dec0499447ec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:30 
        return this._client.post('/v1/tunnels?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a41ba0081b638e55 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:112 
        return this._client.post(path `/v1/tunnels/${tunnelID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d39f7dbbd620b914 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:139 
        return this._client.post(path `/v1/tunnels/${tunnelID}/reveal_token?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2503faabb5b83a21 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/tunnels/tunnels.mjs:165 
        return this._client.post(path `/v1/tunnels/${tunnelID}/rotate_token?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f27d85941df78122 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/user-profiles.js:21 
        return this._client.post('/v1/user_profiles?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8ef53c5cf75cc65a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/user-profiles.js:64 
        return this._client.post((0, path_1.path) `/v1/user_profiles/${userProfileID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8e5da4ec0c25bca2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/user-profiles.js:108 
        return this._client.post((0, path_1.path) `/v1/user_profiles/${userProfileID}/enrollment_url?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8f7d92f01bd21551 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/user-profiles.mjs:18 
        return this._client.post('/v1/user_profiles?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d2ae94551b1b8e36 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/user-profiles.mjs:61 
        return this._client.post(path `/v1/user_profiles/${userProfileID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ba597a753120697a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/user-profiles.mjs:105 
        return this._client.post(path `/v1/user_profiles/${userProfileID}/enrollment_url?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #372b570f53550fb8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:31 
        return this._client.post((0, path_1.path) `/v1/vaults/${vaultID}/credentials?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fb561f4b337b923d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:76 
        return this._client.post((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5fdb174b1f3ea7a1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:145 
        return this._client.post((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5d5133e905e64d4a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/credentials.js:167 
        return this._client.post((0, path_1.path) `/v1/vaults/${vault_id}/credentials/${credentialID}/mcp_oauth_validate?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bec145a7cb684219 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:28 
        return this._client.post(path `/v1/vaults/${vaultID}/credentials?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e675ef2962200130 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:73 
        return this._client.post(path `/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8c2e6f8a01a89155 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:142 
        return this._client.post(path `/v1/vaults/${vault_id}/credentials/${credentialID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #666aef45bb4d55a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/credentials.mjs:164 
        return this._client.post(path `/v1/vaults/${vault_id}/credentials/${credentialID}/mcp_oauth_validate?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7daa5dc1e2dd1f69 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/vaults.js:30 
        return this._client.post('/v1/vaults?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a2df39236dfa3afe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/vaults.js:73 
        return this._client.post((0, path_1.path) `/v1/vaults/${vaultID}?beta=true`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9e01b7dca2395e3b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/vaults.js:138 
        return this._client.post((0, path_1.path) `/v1/vaults/${vaultID}/archive?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d9c407b4516cb2c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/vaults.mjs:26 
        return this._client.post('/v1/vaults?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5c915e21924e68e9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/vaults.mjs:69 
        return this._client.post(path `/v1/vaults/${vaultID}?beta=true`, {
            body,
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #10fe686ad5171b82 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/beta/vaults/vaults.mjs:134 
        return this._client.post(path `/v1/vaults/${vaultID}/archive?beta=true`, {
            ...options,
            headers: buildHeaders([
                { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e2e1537b340a479f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/completions.js:10 
        return this._client.post('/v1/complete', {
            body,
            timeout: this._client._options.timeout ?? 600000,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            stream: params.stream ?? false,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #71eec69397e4f520 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/completions.mjs:7 
        return this._client.post('/v1/complete', {
            body,
            timeout: this._client._options.timeout ?? 600000,
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            stream: params.stream ?? false,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cd3900a5c05a0286 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/messages/batches.js:42 
        return this._client.post('/v1/messages/batches', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5dd1c9160d31af28 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/messages/batches.js:127 
        return this._client.post((0, path_1.path) `/v1/messages/batches/${messageBatchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #62792795b4ea747c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/messages/batches.mjs:39 
        return this._client.post('/v1/messages/batches', {
            body,
            ...options,
            headers: buildHeaders([
                { ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2af3405d42a5ac2f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/messages/batches.mjs:124 
        return this._client.post(path `/v1/messages/batches/${messageBatchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f8c620ccc86abcfd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/messages/messages.js:36 
        return this._client.post('/v1/messages', {
            body,
            timeout: timeout ?? 600000,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined) },
                helperHeader,
                options?.headers,
            ]),
            stream: params.stream ?? false,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ccc1da8ad63add0d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/messages/messages.js:113 
        return this._client.post('/v1/messages/count_tokens', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9843b5c43569213d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/messages/messages.mjs:32 
        return this._client.post('/v1/messages', {
            body,
            timeout: timeout ?? 600000,
            ...options,
            headers: buildHeaders([
                { ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined) },
                helperHeader,
                options?.headers,
            ]),
            stream: params.stream ?? false,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7ce4a2ce15c0a042 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/resources/messages/messages.mjs:109 
        return this._client.post('/v1/messages/count_tokens', {
            body,
            ...options,
            headers: buildHeaders([
                { ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined) },
                options?.headers,
            ]),
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #bd7df527f38a164b — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:154 
    configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a547c37f7654597 — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:258 
    raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30062b308c94a817 — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:372 
    return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59c1ce242c7afeb2 — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/credential-chain.ts:250 
      const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8974b9ecf2d1cee — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/identity-token.ts:17 
      content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff24167917a409ea — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/types.ts:222 
      await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c380630db23da3ab — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:45 
      raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #f1b214f1a6093f41 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/agents/agents.ts:31 
    return this._client.post('/v1/agents?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1e067ee884322c10 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/agents/agents.ts:86 
    return this._client.post(path`/v1/agents/${agentID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e70402f0e5c2927f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/agents/agents.ts:139 
    return this._client.post(path`/v1/agents/${agentID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fff57041926cae14 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:42 
    return this._client.post('/v1/deployments?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5e30bc5fbe2708da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:95 
    return this._client.post(path`/v1/deployments/${deploymentID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6464f2dd2d9e9cf6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:148 
    return this._client.post(path`/v1/deployments/${deploymentID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #34345b369dce992a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:174 
    return this._client.post(path`/v1/deployments/${deploymentID}/pause?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #53dc5d0a2f26b315 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:200 
    return this._client.post(path`/v1/deployments/${deploymentID}/run?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8587677e3732c25c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/deployments.ts:226 
    return this._client.post(path`/v1/deployments/${deploymentID}/unpause?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2fc264da3d22bac6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/dreams.ts:25 
    return this._client.post('/v1/dreams?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c2c3473e9bc28d98 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/dreams.ts:102 
    return this._client.post(path`/v1/dreams/${dreamID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #254e88aaca71f876 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/dreams.ts:127 
    return this._client.post(path`/v1/dreams/${dreamID}/cancel?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'dreaming-2026-04-21'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3c609f0bbad7fd58 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/environments/environments.ts:47 
    return this._client.post('/v1/environments?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f2a14ce7d813c6fc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/environments/environments.ts:100 
    return this._client.post(path`/v1/environments/${environmentID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #717f7462ec58cbf8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/environments/environments.ts:180 
    return this._client.post(path`/v1/environments/${environmentID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f5397d845f4bdfbc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:71 
    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d81be9358f45021e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:138 
    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}/ack?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #935e8ec81811c4e1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:169 
    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}/heartbeat?beta=true`, {
      query: { desired_ttl_seconds, expected_last_heartbeat },
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #11e3fad1ebad54dc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/environments/work.ts:258 
    return this._client.post(path`/v1/environments/${environment_id}/work/${workID}/stop?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #122bb34363efa624 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/files.ts:135 
    return this._client.post(
      '/v1/files?beta=true',
      multipartFormRequestOptions(
        {
          body,
          ...options,
          headers: buildHeaders([
            { 'anthropic-beta': [...(betas ?? []), 'files-api-2025-04-14'].toString() },
            stainlessHelperHeaderFromFile(body.file),
            options?.headers,
          ]),
        },
        this._client,
      ),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #69bbdc123c41d008 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memories.ts:30 
    return this._client.post(path`/v1/memory_stores/${memoryStoreID}/memories?beta=true`, {
      query: { view },
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #89a842c04aadc768 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memories.ts:87 
    return this._client.post(path`/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
      query: { view },
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #44afa7f87a6f211e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-stores.ts:64 
    return this._client.post('/v1/memory_stores?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #72fc291386e39447 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-stores.ts:115 
    return this._client.post(path`/v1/memory_stores/${memoryStoreID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0c33fec24770dae1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-stores.ts:190 
    return this._client.post(path`/v1/memory_stores/${memoryStoreID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a500f9f16b0cbf97 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/memory-stores/memory-versions.ts:95 
    return this._client.post(
      path`/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}/redact?beta=true`,
      {
        ...options,
        headers: buildHeaders([
          { 'anthropic-beta': [...(betas ?? []), 'agent-memory-2026-07-22'].toString() },
          options?.headers,
        ]),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #43e5b51e9ffbb257 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/messages/batches.ts:47 
    return this._client.post('/v1/messages/batches?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        {
          'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString(),
          ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined),
        },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8dcde5126e8bbe37 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/messages/batches.ts:181 
    return this._client.post(path`/v1/messages/batches/${messageBatchID}/cancel?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'message-batches-2024-09-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ac4572d112322c5e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/messages/messages.ts:143 
    return this._client.post('/v1/messages?beta=true', {
      body,
      timeout: timeout ?? 600000,
      ...options,
      headers: buildHeaders([
        {
          ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined),
          ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined),
        },
        helperHeader,
        options?.headers,
      ]),
      stream: modifiedParams.stream ?? false,
    }) as APIPromise<BetaMessage> | APIPromise<Stream<BetaRawMessageStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e6a5ce238eb881fe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/messages/messages.ts:228 
    return this._client.post('/v1/messages/count_tokens?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        {
          'anthropic-beta': [...(betas ?? []), 'token-counting-2024-11-01'].toString(),
          ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined),
        },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #396e70fe63268a5f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/sessions/events.ts:82 
    return this._client.post(path`/v1/sessions/${sessionID}/events?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #43ae72a5e0b9bfa9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/sessions/resources.ts:61 
    return this._client.post(path`/v1/sessions/${session_id}/resources/${resourceID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d4d0ff4412e17ce5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/sessions/resources.ts:152 
    return this._client.post(path`/v1/sessions/${sessionID}/resources?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #231d670ef88af34a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/sessions/sessions.ts:147 
    return this._client.post('/v1/sessions?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0c4878a642f46dad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/sessions/sessions.ts:200 
    return this._client.post(path`/v1/sessions/${sessionID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2fb01c874206d9f7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/sessions/sessions.ts:283 
    return this._client.post(path`/v1/sessions/${sessionID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2f703d0539cee766 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/sessions/threads/threads.ts:97 
    return this._client.post(path`/v1/sessions/${session_id}/threads/${threadID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b2aae77082c41a4a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/skills/skills.ts:42 
    return this._client.post(
      '/v1/skills?beta=true',
      multipartFormRequestOptions(
        {
          body,
          ...options,
          headers: buildHeaders([
            { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
            options?.headers,
          ]),
        },
        this._client,
        false,
      ),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #76c27e78d23e0337 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/skills/versions.ts:31 
    return this._client.post(
      path`/v1/skills/${skillID}/versions?beta=true`,
      multipartFormRequestOptions(
        {
          body,
          ...options,
          headers: buildHeaders([
            { 'anthropic-beta': [...(betas ?? []), 'skills-2025-10-02'].toString() },
            options?.headers,
          ]),
        },
        this._client,
        false,
      ),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #38fa8db8ea46972c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/tunnels/certificates.ts:37 
    return this._client.post(path`/v1/tunnels/${tunnelID}/certificates?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9fe20b77eb3e24fe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/tunnels/certificates.ts:144 
    return this._client.post(path`/v1/tunnels/${tunnel_id}/certificates/${certificateID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b3193014da5d2a70 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:41 
    return this._client.post('/v1/tunnels?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7b0ea64312c7c52b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:137 
    return this._client.post(path`/v1/tunnels/${tunnelID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #217d2263008a2550 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:169 
    return this._client.post(path`/v1/tunnels/${tunnelID}/reveal_token?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3a0e03d787c595ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/tunnels/tunnels.ts:200 
    return this._client.post(path`/v1/tunnels/${tunnelID}/rotate_token?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'mcp-tunnels-2026-06-22'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #74c870f453601a00 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/user-profiles.ts:23 
    return this._client.post('/v1/user_profiles?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #331b4b4a3cdaf6f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/user-profiles.ts:76 
    return this._client.post(path`/v1/user_profiles/${userProfileID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d4ec041b93d28a43 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/user-profiles.ts:129 
    return this._client.post(path`/v1/user_profiles/${userProfileID}/enrollment_url?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'user-profiles-2026-03-24'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #40cd19896f2b64ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:37 
    return this._client.post(path`/v1/vaults/${vaultID}/credentials?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c5e5b2724649f1a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:92 
    return this._client.post(path`/v1/vaults/${vault_id}/credentials/${credentialID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4665f275301b24bb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:180 
    return this._client.post(path`/v1/vaults/${vault_id}/credentials/${credentialID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #918ff6fed56edb06 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/vaults/credentials.ts:207 
    return this._client.post(
      path`/v1/vaults/${vault_id}/credentials/${credentialID}/mcp_oauth_validate?beta=true`,
      {
        ...options,
        headers: buildHeaders([
          { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
          options?.headers,
        ]),
      },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4b5c4938fd133a38 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/vaults/vaults.ts:74 
    return this._client.post('/v1/vaults?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a73e5906aab57e9a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/vaults/vaults.ts:127 
    return this._client.post(path`/v1/vaults/${vaultID}?beta=true`, {
      body,
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e3c17f063e81ac45 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/beta/vaults/vaults.ts:206 
    return this._client.post(path`/v1/vaults/${vaultID}/archive?beta=true`, {
      ...options,
      headers: buildHeaders([
        { 'anthropic-beta': [...(betas ?? []), 'managed-agents-2026-04-01'].toString() },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #35bf92536a37ec87 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/completions.ts:43 
    return this._client.post('/v1/complete', {
      body,
      timeout: (this._client as any)._options.timeout ?? 600000,
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
      stream: params.stream ?? false,
    }) as APIPromise<Completion> | APIPromise<Stream<Completion>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8d0c5efbc1f037d9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/messages/batches.ts:45 
    return this._client.post('/v1/messages/batches', {
      body,
      ...options,
      headers: buildHeaders([
        { ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined) },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8215ea4c7126fcc2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/messages/batches.ts:137 
    return this._client.post(path`/v1/messages/batches/${messageBatchID}/cancel`, options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #32aacbcbbf248aa5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/messages/messages.ts:97 
    return this._client.post('/v1/messages', {
      body,
      timeout: timeout ?? 600000,
      ...options,
      headers: buildHeaders([
        { ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined) },
        helperHeader,
        options?.headers,
      ]),
      stream: params.stream ?? false,
    }) as APIPromise<Message> | APIPromise<Stream<RawMessageStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f4a4748802b54656 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/resources/messages/messages.ts:190 
    return this._client.post('/v1/messages/count_tokens', {
      body,
      ...options,
      headers: buildHeaders([
        { ...(user_profile_id != null ? { 'anthropic-user-profile-id': user_profile_id } : undefined) },
        options?.headers,
      ]),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #83d8f97f5ba5faed — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/fs-util.ts:112 
    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9954a69f46074b3c — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:457 
        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5641c4f0be47f439 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:533 
        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #8ce8fc05f23ce92a — Environment-variable access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:806 
  const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0fa6b9ff65759aaa — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:4 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1f5512cd5450cdec — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:52 
    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c41ad1974df4b5d9 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:101 
    return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b167df3fc92337ec — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:256 
      await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ee4bc2980ab43539 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.js:115 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b0e999d853e515e6 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.mjs:107 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #09de32d987fb0dfe — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:390 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #939d231b2b1a1f62 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:469 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e4e3cece3daa1398 — Environment-variable access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:755 
    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #aaa48c62f5b8be4c — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:375 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #4b7492e07deacfdc — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:454 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #3e2a36f25c628bf4 — Environment-variable access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:740 
    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #738e85c32dff4270 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:43 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d6fa5b4e4d215069 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:91 
        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #bf1c600efb88ac79 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:213 
            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #8dab849a094ffe46 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:2 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0453e926b4d4cdff — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:38 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2865e70a0968ecf7 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:86 
        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e25a5c94d0724f7d — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:208 
            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@modelcontextprotocol/sdk

npm dependency
medium pii_flow dependency Excluded from app score #e0342a178a4a759e — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:421 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:394 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:421 
  const response = await fetch(tokenUrl, {
    method: "POST",
    headers: {
      "Content-Type": "application/x-www-form-urlencoded",
    },
    body: params,
  });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #63780d7bcea6fc56 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:480 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:455 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/src/client/auth.ts:480 
  const response = await fetch(tokenUrl, {
    method: "POST",
    headers: {
      "Content-Type": "application/x-www-form-urlencoded",
    },
    body: params,
  });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #34fbf540ca3aa0a6 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:175 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:175 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:175 
    const response = await fetch(this._endpoints.tokenUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/x-www-form-urlencoded",
      },
      body: params.toString(),
    });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #cc5452bfafe04c0d — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:212 · flow /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:212 → /tmp/closeopen-vzna68el/pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.ts:212 
    const response = await fetch(this._endpoints.tokenUrl, {
      method: "POST",
      headers: {
        "Content-Type": "application/x-www-form-urlencoded",
      },
      body: params.toString(),
    });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 99 low-confidence finding(s)
low egress dependency Excluded from app score #12d7755cd2de4cbd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/cli.ts:54 
  await client.request({ method: "resources/list" }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #98d8c8e91fb8a72e — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/client/auth.test.ts:31 
      expect(extractResourceMetadataUrl(mockResponse)).toEqual(new URL(resourceUrl));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #c70b54125502482c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/client/index.test.ts:660 
    weatherClient.request(
      {
        method: "weather/get",
        params: {
          city: "Seattle",
        },
      },
      WeatherResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #fd4fd77c14a8472d — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/client/stdio.ts:70 
    const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #8b84c3b2544bc381 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/multipleClientsParallel.ts:69 
    const result = await client.request(toolRequest, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #13f7d8f9814af147 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:97 
    const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #7a19574d43f22e8f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:169 
      return client.request(request, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #3685d5522588e8cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:303 
      const result = await this.client.request(request, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #a3dbedaf152ca42f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:361 
      const result = await this.client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #47cc7643c4d6976f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:393 
  const serverUrl = process.env.MCP_SERVER_URL || DEFAULT_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #2d1236050759d2ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:225 
        const resourcesResult = await client.request({
          method: 'resources/list',
          params: {}
        }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #eeaeafa4fa6102b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:313 
    const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #76f2fe5c9eca4f23 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:344 
    const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #fdf28a34ab250903 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:397 
    const result = await client.request(request, CallToolResultSchema, {
      resumptionToken: notificationsToolLastEventId,
      onresumptiontoken: onLastEventIdUpdate
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #0f661767b0dcac75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:426 
    const promptsResult = await client.request(promptsRequest, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #2e8fc00eb75b1c0b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:455 
    const promptResult = await client.request(promptRequest, GetPromptResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #b595e619a272adc6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:476 
    const resourcesResult = await client.request(resourcesRequest, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #b96b2fe9c8d793e3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:140 
    const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #e1414cfa15961992 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:173 
    const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #4435a5511d228633 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:126 
      await client1.request({
        method: 'tools/list',
        params: {}
      }, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #47602237d2354512 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:143 
      await client2.request({
        method: 'tools/list',
        params: {}
      }, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #efc3b01e36fceebc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:164 
      const toolsResult = await client.request({
        method: 'tools/list',
        params: {}
      }, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #e3e284e2dd894996 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:175 
      const resourcesResult = await client.request({
        method: 'resources/list',
        params: {}
      }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #8105ab4c0179348d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:184 
      const promptsResult = await client.request({
        method: 'prompts/list',
        params: {}
      }, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #7fac681c9781021c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:196 
      const greetingResult = await client.request({
        method: 'tools/call',
        params: {
          name: 'greet',
          arguments: {
            name: 'Stateless Transport'
          }
        }
      }, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #e026fd7305f83c0d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:252 
      const toolsResult = await client.request({
        method: 'tools/list',
        params: {}
      }, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #2ab6ca3c7d27e7f7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:263 
      const resourcesResult = await client.request({
        method: 'resources/list',
        params: {}
      }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #66659c14e07935d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:272 
      const promptsResult = await client.request({
        method: 'prompts/list',
        params: {}
      }, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #a82c94e4e032f7c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/stateManagementStreamableHttp.test.ts:284 
      const greetingResult = await client.request({
        method: 'tools/call',
        params: {
          name: 'greet',
          arguments: {
            name: 'Stateful Transport'
          }
        }
      }, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #12aa3ac925348b01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/taskResumability.test.ts:183 
    const toolPromise = client1.request({
      method: 'tools/call',
      params: {
        name: 'run-notifications',
        arguments: {
          count: 3,
          interval: 10
        }
      }
    }, CallToolResultSchema, {
      resumptionToken: lastEventId,
      onresumptiontoken: onLastEventIdUpdate
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #979554d6b29a0d90 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/integration-tests/taskResumability.test.ts:250 
    await client2.request({
      method: 'tools/call',
      params: {
        name: 'run-notifications',
        arguments: {
          count: 1,
          interval: 5
        }
      }
    }, CallToolResultSchema, {
      resumptionToken: lastEventId,  // Pass the lastEventId from the previous session
      onresumptiontoken: onLastEventIdUpdate
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #74ab5a379de6f88b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/middleware/allowedMethods.test.ts:45 
    const response = await request(app).post("/test");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #f36a05b470f87c55 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/middleware/allowedMethods.test.ts:67 
    const postResponse = await request(multiMethodApp).post("/multi");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #a00e42c2d5d2a85b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/middleware/allowedMethods.test.ts:71 
    const putResponse = await request(multiMethodApp).put("/multi");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #ab89d90d48040b4f — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/providers/proxyProvider.test.ts:95 
      const expectedUrl = new URL("https://auth.example.com/authorize");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #b7cc48892c8f731d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:144 
        issuerUrl: new URL('http://auth.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #5262237157a0b919 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:162 
        issuerUrl: new URL('https://auth.example.com#fragment')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #329dc7951c57b8fb — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:171 
        issuerUrl: new URL('https://auth.example.com?param=value')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #f5ed5163c11fb746 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:180 
        issuerUrl: new URL('https://auth.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #4708235a4317776a — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:195 
        issuerUrl: new URL('https://auth.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #f0784de9e123e00d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:196 
        serviceDocumentationUrl: new URL('https://docs.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #8f98fe56d263d77f — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:230 
        issuerUrl: new URL('https://auth.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #1de495c3ca462cd4 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:256 
        issuerUrl: new URL('https://mcp.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #92d7a73ec0b0d388 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:283 
        issuerUrl: new URL('https://auth.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #c0648367ae88f396 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:362 
        issuerUrl: new URL('https://auth.example.com')

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #8d9b5d7a0fdbc21c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:403 
        resourceServerUrl: new URL('https://api.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #33b144ee64b64de0 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:417 
        resourceServerUrl: new URL('https://api.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #bda21334330d823c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:418 
        serviceDocumentationUrl: new URL('https://docs.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #e17093a7622a4978 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.test.ts:459 
        resourceServerUrl: new URL('https://api.example.com'),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #c6c5259209e1d161 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:138 
    await client.request(
      {
        method: "tools/call",
        params: {
          name: "long-operation",
          arguments: { steps: 3 },
          _meta: {
            progressToken: "progress-test-1"
          }
        }
      },
      CallToolResultSchema,
      {
        onprogress: (progress) => {
          progressUpdates.push(progress);
        }
      }
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #5aa10ae91f8b27b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:257 
    const result = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #c351369de56c3c55 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:341 
    const result = await client.request(
      {
        method: "tools/call",
        params: {
          name: "test",
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #c6d5617b0fb1a9f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:420 
    const listResult = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #49aaf5100c6dd809 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:435 
    const callResult = await client.request(
      {
        method: "tools/call",
        params: {
          name: "test",
          arguments: {
            name: "test",
            value: 42,
          },
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #3e776b91dac8f484 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:577 
    const result = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #1ff6ebc65dd2019d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:645 
    const result = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #6cfa721a1a518855 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:704 
    const result = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #04d7c1279fb636e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:759 
    const result = await client.request(
      { method: "tools/list" },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #3824a61934036b94 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:819 
    const result = await client.request(
      { method: "tools/list" },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #181794a43a994d60 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:885 
    const result = await client.request(
      { method: "tools/list" },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #40a7b74bdbe4edca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:972 
      client.request(
        {
          method: "tools/call",
          params: {
            name: "test",
            arguments: {
              name: "test",
              value: "not a number",
            },
          },
        },
        CallToolResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #0578a28f861921b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:988 
      client.request(
        {
          method: "tools/call",
          params: {
            name: "test (new api)",
            arguments: {
              name: "test",
              value: "not a number",
            },
          },
        },
        CallToolResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #d5d10df9c6c7635b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1113 
    const listResult = await client.request(
      {
        method: "tools/list",
      },
      ListToolsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #41f86e05c6b422dd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1132 
    const result = await client.request(
      {
        method: "tools/call",
        params: {
          name: "test",
          arguments: {
            input: "hello",
          },
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #53e7b79d729bd1a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1345 
    await client.request(
      {
        method: "tools/call",
        params: {
          name: "test-tool",
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #3eacf11ae61a7d59 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1399 
    const result = await client.request(
      {
        method: "tools/call",
        params: {
          name: "request-id-test",
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #f202d41d1ddd24cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1462 
    await client.request(
      {
        method: "tools/call",
        params: {
          name: "test-tool",
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #2faca0b428b24ddd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1519 
    const result = await client.request(
      {
        method: "tools/call",
        params: {
          name: "test",
          arguments: {
            input: "hello",
          },
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #00eea27d65f4e62a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1573 
    const result = await client.request(
      {
        method: "tools/call",
        params: {
          name: "error-test",
        },
      },
      CallToolResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #a067e740538e18c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1631 
      client.request(
        {
          method: "tools/call",
          params: {
            name: "nonexistent-tool",
          },
        },
        CallToolResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #7895e596f72566c5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1675 
    const result = await client.request(
      {
        method: "resources/list",
      },
      ListResourcesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #e08ef0438a4457a9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1735 
    const result = await client.request(
      {
        method: "resources/read",
        params: {
          uri: "test://resource",
        },
      },
      ReadResourceResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #cac8d346b84c0b2b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1804 
    const result = await client.request(
      {
        method: "resources/read",
        params: {
          uri: "test://resource/123",
        },
      },
      ReadResourceResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #39ffa17a87b7218f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1911 
    let result = await client.request(
      { method: "resources/list" },
      ListResourcesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #458045a7953009d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1932 
    result = await client.request(
      { method: "resources/list" },
      ListResourcesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #ecb679bdc4b9a6d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:1980 
    const result = await client.request(
      { method: "resources/templates/list" },
      ListResourceTemplatesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #35a5c6c2042d09b2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2000 
    const result2 = await client.request(
      { method: "resources/templates/list" },
      ListResourceTemplatesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #952921164080ddff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2046 
    const result = await client.request(
      {
        method: "resources/list",
      },
      ListResourcesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #42767f71afc9b9f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2092 
    const result = await client.request(
      {
        method: "resources/templates/list",
      },
      ListResourceTemplatesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #ba3aced03b9bb536 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2153 
    const result = await client.request(
      {
        method: "resources/list",
      },
      ListResourcesResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #50fd2a0b18df82c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2203 
    const result = await client.request(
      {
        method: "resources/read",
        params: {
          uri: "test://resource/books/123",
        },
      },
      ReadResourceResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #99336edb9e7e3007 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2340 
      client.request(
        {
          method: "resources/read",
          params: {
            uri: "test://error",
          },
        },
        ReadResourceResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #6b97141bd8525296 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2383 
      client.request(
        {
          method: "resources/read",
          params: {
            uri: "test://nonexistent",
          },
        },
        ReadResourceResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #3914a6b52f37517e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2442 
    const result = await client.request(
      {
        method: "completion/complete",
        params: {
          ref: {
            type: "ref/resource",
            uri: "test://resource/{category}",
          },
          argument: {
            name: "category",
            value: "",
          },
        },
      },
      CompleteResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #66de6b0f348b7ef7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2513 
    const result = await client.request(
      {
        method: "completion/complete",
        params: {
          ref: {
            type: "ref/resource",
            uri: "test://resource/{category}",
          },
          argument: {
            name: "category",
            value: "m",
          },
        },
      },
      CompleteResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #41490be23e15c8ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2575 
    const result = await client.request(
      {
        method: "resources/read",
        params: {
          uri: "test://resource",
        },
      },
      ReadResourceResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #b9af531ca1efa2a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2625 
    const result = await client.request(
      {
        method: "prompts/list",
      },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #67333e6b32e789f6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2690 
    const result = await client.request(
      {
        method: "prompts/get",
        params: {
          name: "test",
        },
      },
      GetPromptResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #4a8c7423a43828b3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2771 
    const listResult = await client.request(
      {
        method: "prompts/list",
      },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #84ea60f8f145d4cc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2782 
    const getResult = await client.request(
      {
        method: "prompts/get",
        params: {
          name: "test",
          arguments: {
            name: "test",
            value: "value",
          },
        },
      },
      GetPromptResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #d7a2fc21c7aba515 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2915 
    let result = await client.request(
      { method: "prompts/list" },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #0e86aa20bc012400 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2937 
    result = await client.request(
      { method: "prompts/list" },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #e2d984c648cde13b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:2986 
    const result = await client.request(
      {
        method: "prompts/list",
      },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #96a170371fe3ed4c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3034 
    const result = await client.request(
      {
        method: "prompts/list",
      },
      ListPromptsResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #386753a0cd5f9087 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3095 
      client.request(
        {
          method: "prompts/get",
          params: {
            name: "test",
            arguments: {
              name: "test",
              value: "ab", // Too short
            },
          },
        },
        GetPromptResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #224840eff14c2019 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3294 
      client.request(
        {
          method: "prompts/get",
          params: {
            name: "nonexistent-prompt",
          },
        },
        GetPromptResultSchema,
      ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #8359816eaa56586f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3353 
    const result = await client.request(
      {
        method: "completion/complete",
        params: {
          ref: {
            type: "ref/prompt",
            name: "test-prompt",
          },
          argument: {
            name: "name",
            value: "",
          },
        },
      },
      CompleteResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #252e920b70f7c1f2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3423 
    const result = await client.request(
      {
        method: "completion/complete",
        params: {
          ref: {
            type: "ref/prompt",
            name: "test-prompt",
          },
          argument: {
            name: "name",
            value: "A",
          },
        },
      },
      CompleteResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #162e9b4eefa35a1b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/server/mcp.test.ts:3488 
    const result = await client.request(
      {
        method: "prompts/get",
        params: {
          name: "request-id-test",
        },
      },
      GetPromptResultSchema,
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

openai

npm dependency
medium pii_flow dependency Excluded from app score #cd61d7b28b481db7 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/auth/workload-identity-auth.js:53 · flow /tmp/closeopen-vzna68el/pkgs/npm/[email protected]/auth/workload-identity-auth.js:46 → /tmp/closeopen-vzna68el/pkgs/npm/[email protected]/auth/workload-identity-auth.js:53 
        const response = await this.fetch(this.tokenExchangeUrl, {
            method: 'POST',
            headers: {
                'Content-Type': 'application/json',
            },
            body: JSON.stringify(body),
        });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #9753f6128e23903f — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/auth/workload-identity-auth.mjs:49 · flow /tmp/closeopen-vzna68el/pkgs/npm/[email protected]/auth/workload-identity-auth.mjs:42 → /tmp/closeopen-vzna68el/pkgs/npm/[email protected]/auth/workload-identity-auth.mjs:49 
        const response = await this.fetch(this.tokenExchangeUrl, {
            method: 'POST',
            headers: {
                'Content-Type': 'application/json',
            },
            body: JSON.stringify(body),
        });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow dependency Excluded from app score #cafd99a284a03c24 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/src/auth/workload-identity-auth.ts:69 · flow /tmp/closeopen-vzna68el/pkgs/npm/[email protected]/src/auth/workload-identity-auth.ts:60 → /tmp/closeopen-vzna68el/pkgs/npm/[email protected]/src/auth/workload-identity-auth.ts:69 
    const response = await this.fetch(this.tokenExchangeUrl, {
      method: 'POST',
      headers: {
        'Content-Type': 'application/json',
      },
      body: JSON.stringify(body),
    });

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 336 low-confidence finding(s)
low egress dependency Excluded from app score #bd8f92d6408827e5 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/auth/subject-token-providers.js:50 
            const url = new URL(AZURE_IMDS_BASE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d12de186736f6812 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/auth/subject-token-providers.js:97 
            const url = new URL(`http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #74cb8a763fa933b7 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/auth/subject-token-providers.mjs:44 
            const url = new URL(AZURE_IMDS_BASE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ee5183e93e49fcb3 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/auth/subject-token-providers.mjs:91 
            const url = new URL(`http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #b06217235c838122 — Environment-variable access.
pkgs/npm/[email protected]/azure.js:44 
                endpoint = process.env['AZURE_OPENAI_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f81d1ccaead7547b — Environment-variable access.
pkgs/npm/[email protected]/azure.mjs:40 
                endpoint = process.env['AZURE_OPENAI_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #11c594202ae22181 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/admin-api-keys.js:21 
        return this._client.post('/organization/admin_api_keys', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b1934e77fe389b5c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/admin-api-keys.mjs:18 
        return this._client.post('/organization/admin_api_keys', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4b8049b88613fd8b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/certificates.js:24 
        return this._client.post('/organization/certificates', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f2475793cfce3b0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/certificates.js:62 
        return this._client.post((0, path_1.path) `/organization/certificates/${certificateID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6116a31132466e83 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/certificates.mjs:21 
        return this._client.post('/organization/certificates', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ca8fdfc1de3fdd42 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/certificates.mjs:59 
        return this._client.post(path `/organization/certificates/${certificateID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a5b7aa701094b407 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/data-retention.js:34 
        return this._client.post('/organization/data_retention', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d75272894eda1e5d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/data-retention.mjs:31 
        return this._client.post('/organization/data_retention', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #245f1086f4184932 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/groups/groups.js:30 
        return this._client.post('/organization/groups', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a4ac695344fbe9a4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/groups/groups.js:65 
        return this._client.post((0, path_1.path) `/organization/groups/${groupID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #01796db1de694c51 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/groups/groups.mjs:26 
        return this._client.post('/organization/groups', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #22facba990d41582 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/groups/groups.mjs:61 
        return this._client.post(path `/organization/groups/${groupID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e0d61d55c96e8645 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/groups/roles.js:22 
        return this._client.post((0, path_1.path) `/organization/groups/${groupID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #94d341a416bcd291 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/groups/roles.mjs:19 
        return this._client.post(path `/organization/groups/${groupID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #391b74ec386c5a5e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/groups/users.js:22 
        return this._client.post((0, path_1.path) `/organization/groups/${groupID}/users`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1dbbd1063b37d401 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/groups/users.mjs:19 
        return this._client.post(path `/organization/groups/${groupID}/users`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0003f1b3415be71d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/invites.js:23 
        return this._client.post('/organization/invites', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #baaf7aef3178f886 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/invites.mjs:20 
        return this._client.post('/organization/invites', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #523e74eddc2ec761 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/data-retention.js:38 
        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/data_retention`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #78dc72fb9d707c56 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/data-retention.mjs:35 
        return this._client.post(path `/organization/projects/${projectID}/data_retention`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #44fecc4518cc0430 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/groups/groups.js:29 
        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/groups`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3bbc994be5de2251 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/groups/groups.mjs:25 
        return this._client.post(path `/organization/projects/${projectID}/groups`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c186edf2f2586fa9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/groups/roles.js:23 
        return this._client.post((0, path_1.path) `/projects/${project_id}/groups/${groupID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #aa7b8a7165dc71dd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/groups/roles.mjs:20 
        return this._client.post(path `/projects/${project_id}/groups/${groupID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #34410c580c774b70 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/hosted-tool-permissions.js:37 
        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/hosted_tool_permissions`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #23998170cb27adb9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/hosted-tool-permissions.mjs:34 
        return this._client.post(path `/organization/projects/${projectID}/hosted_tool_permissions`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8c9c0fb48f5cf98c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/model-permissions.js:38 
        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/model_permissions`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4e7a4f75077d6e73 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/model-permissions.mjs:35 
        return this._client.post(path `/organization/projects/${projectID}/model_permissions`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #18a9853b12798f18 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/projects.js:59 
        return this._client.post('/organization/projects', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c95e869d121d7e61 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/projects.js:94 
        return this._client.post((0, path_1.path) `/organization/projects/${projectID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9991dd4a021e60e8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/projects.js:131 
        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/archive`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #79179b9c5b489168 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/projects.mjs:55 
        return this._client.post('/organization/projects', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fb183bf91136cfd4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/projects.mjs:90 
        return this._client.post(path `/organization/projects/${projectID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #80097b0b3e7a071c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/projects.mjs:127 
        return this._client.post(path `/organization/projects/${projectID}/archive`, {
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2f744d8e0d197d35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/rate-limits.js:39 
        return this._client.post((0, path_1.path) `/organization/projects/${project_id}/rate_limits/${rateLimitID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #37c61f89bcdf8e74 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/rate-limits.mjs:36 
        return this._client.post(path `/organization/projects/${project_id}/rate_limits/${rateLimitID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #de1e0301b58ab46b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/roles.js:22 
        return this._client.post((0, path_1.path) `/projects/${projectID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e49079064c4d4562 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/roles.js:61 
        return this._client.post((0, path_1.path) `/projects/${project_id}/roles/${roleID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a68806d45206a776 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/roles.mjs:19 
        return this._client.post(path `/projects/${projectID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b26db5bc81e5c152 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/roles.mjs:58 
        return this._client.post(path `/projects/${project_id}/roles/${roleID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4d831e69db6813ec — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/api-keys.js:22 
        return this._client.post((0, path_1.path) `/organization/projects/${project_id}/service_accounts/${serviceAccountID}/api_keys`, { body, ...options, __security: { adminAPIKeyAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7cc3c98885f84741 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/api-keys.mjs:19 
        return this._client.post(path `/organization/projects/${project_id}/service_accounts/${serviceAccountID}/api_keys`, { body, ...options, __security: { adminAPIKeyAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1ed189b395ea09f4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/service-accounts.js:30 
        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/service_accounts`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6716a3c54480ee8d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/service-accounts.js:69 
        return this._client.post((0, path_1.path) `/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, { body, ...options, __security: { adminAPIKeyAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d61b4991d432ce9c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/service-accounts.mjs:26 
        return this._client.post(path `/organization/projects/${projectID}/service_accounts`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2f45fbd71bc28379 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/service-accounts/service-accounts.mjs:65 
        return this._client.post(path `/organization/projects/${project_id}/service_accounts/${serviceAccountID}`, { body, ...options, __security: { adminAPIKeyAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6b6ee2b1805e5a8f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/spend-alerts.js:30 
        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/spend_alerts`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #10bb52ad4f4fd18e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/spend-alerts.js:78 
        return this._client.post((0, path_1.path) `/organization/projects/${project_id}/spend_alerts/${alertID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #67709e52183ba9ab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/spend-alerts.mjs:27 
        return this._client.post(path `/organization/projects/${projectID}/spend_alerts`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #20d2a4f1fb0f9d76 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/spend-alerts.mjs:75 
        return this._client.post(path `/organization/projects/${project_id}/spend_alerts/${alertID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #123a477845ce924e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/users/roles.js:23 
        return this._client.post((0, path_1.path) `/projects/${project_id}/users/${userID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3b25ce6a4b018b78 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/users/roles.mjs:20 
        return this._client.post(path `/projects/${project_id}/users/${userID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #87de33252b3c7a19 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/users/users.js:30 
        return this._client.post((0, path_1.path) `/organization/projects/${projectID}/users`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9e46c34a6426ef44 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/users/users.js:69 
        return this._client.post((0, path_1.path) `/organization/projects/${project_id}/users/${userID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a76c7d544906d367 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/users/users.mjs:26 
        return this._client.post(path `/organization/projects/${projectID}/users`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #edcb87ed1cf89f41 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/projects/users/users.mjs:65 
        return this._client.post(path `/organization/projects/${project_id}/users/${userID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e1930b92dfed529e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/roles.js:21 
        return this._client.post('/organization/roles', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f9a8864f5a05941e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/roles.js:54 
        return this._client.post((0, path_1.path) `/organization/roles/${roleID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d70acd53e9cbb867 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/roles.mjs:18 
        return this._client.post('/organization/roles', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b03cfa551916ddc3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/roles.mjs:51 
        return this._client.post(path `/organization/roles/${roleID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e32344d9e3467125 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/spend-alerts.js:27 
        return this._client.post('/organization/spend_alerts', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cbf3f3867acb0c88 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/spend-alerts.js:71 
        return this._client.post((0, path_1.path) `/organization/spend_alerts/${alertID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0409ef0e5fa6f014 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/spend-alerts.mjs:24 
        return this._client.post('/organization/spend_alerts', {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5f70dec4b4fa1559 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/spend-alerts.mjs:68 
        return this._client.post(path `/organization/spend_alerts/${alertID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #157d96fb00978315 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/users/roles.js:22 
        return this._client.post((0, path_1.path) `/organization/users/${userID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a20ee15995399f2f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/users/roles.mjs:19 
        return this._client.post(path `/organization/users/${userID}/roles`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #70add447314d756a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/users/users.js:41 
        return this._client.post((0, path_1.path) `/organization/users/${userID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1a5b9a11622d9b9e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/admin/organization/users/users.mjs:37 
        return this._client.post(path `/organization/users/${userID}`, {
            body,
            ...options,
            __security: { adminAPIKeyAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7f3541c916d36fc1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/audio/speech.js:29 
        return this._client.post('/audio/speech', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: 'application/octet-stream' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4adf25332a8840da — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/audio/speech.mjs:26 
        return this._client.post('/audio/speech', {
            body,
            ...options,
            headers: buildHeaders([{ Accept: 'application/octet-stream' }, options?.headers]),
            __security: { bearerAuth: true },
            __binaryResponse: true,
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b9da300b77eee141 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/audio/transcriptions.js:12 
        return this._client.post('/audio/transcriptions', (0, uploads_1.multipartFormRequestOptions)({
            body,
            ...options,
            stream: body.stream ?? false,
            __metadata: { model: body.model },
            __security: { bearerAuth: true },
        }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ee367c5ca3eeb6d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/audio/transcriptions.mjs:9 
        return this._client.post('/audio/transcriptions', multipartFormRequestOptions({
            body,
            ...options,
            stream: body.stream ?? false,
            __metadata: { model: body.model },
            __security: { bearerAuth: true },
        }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1f6a807bd2fa79f6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/audio/translations.js:12 
        return this._client.post('/audio/translations', (0, uploads_1.multipartFormRequestOptions)({ body, ...options, __metadata: { model: body.model }, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #14b9d42f63fa309b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/audio/translations.mjs:9 
        return this._client.post('/audio/translations', multipartFormRequestOptions({ body, ...options, __metadata: { model: body.model }, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #81ac67c474ea091d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/batches.js:16 
        return this._client.post('/batches', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2a9adb60be70cdfe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/batches.js:40 
        return this._client.post((0, path_1.path) `/batches/${batchID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #119acdb56a6de39a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/batches.mjs:13 
        return this._client.post('/batches', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #17c89c66300ee5e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/batches.mjs:37 
        return this._client.post(path `/batches/${batchID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a534d9dfc22eacd3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/assistants.js:19 
        return this._client.post('/assistants', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8c672105f5cf63e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/assistants.js:44 
        return this._client.post((0, path_1.path) `/assistants/${assistantID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1ca48cd83173d63a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/assistants.mjs:16 
        return this._client.post('/assistants', {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d7b91eb7d18d6b5f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/assistants.mjs:41 
        return this._client.post(path `/assistants/${assistantID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8609334be68b8f1a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/chatkit/sessions.js:22 
        return this._client.post('/chatkit/sessions', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f0df978e16d2cb42 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/chatkit/sessions.js:41 
        return this._client.post((0, path_1.path) `/chatkit/sessions/${sessionID}/cancel`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #dae11bdcb8cf3635 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/chatkit/sessions.mjs:19 
        return this._client.post('/chatkit/sessions', {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #96a151ac67a33d6d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/chatkit/sessions.mjs:38 
        return this._client.post(path `/chatkit/sessions/${sessionID}/cancel`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #581d2a0fcf4e9a4c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/realtime/sessions.js:24 
        return this._client.post('/realtime/sessions', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #abdde2498ab372f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/realtime/sessions.mjs:21 
        return this._client.post('/realtime/sessions', {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4f3e91c125818099 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/realtime/transcription-sessions.js:24 
        return this._client.post('/realtime/transcription_sessions', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bf710417ad17ec06 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/realtime/transcription-sessions.mjs:21 
        return this._client.post('/realtime/transcription_sessions', {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fd987f3e2a05ae17 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/responses/input-tokens.js:22 
        return this._client.post('/responses/input_tokens?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0ef5c032a0eb6313 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/responses/input-tokens.mjs:19 
        return this._client.post('/responses/input_tokens?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3643d2cd8455c266 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/responses/responses.js:21 
        return this._client.post('/responses?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            stream: params.stream ?? false,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #64bc9fabda1b7f91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/responses/responses.js:80 
        return this._client.post((0, path_1.path) `/responses/${responseID}/cancel?beta=true`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d246bcaa3c268c9c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/responses/responses.js:107 
        return this._client.post('/responses/compact?beta=true', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a4a84ca28fa22b9d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/responses/responses.mjs:17 
        return this._client.post('/responses?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            stream: params.stream ?? false,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ae9b0dd816826369 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/responses/responses.mjs:76 
        return this._client.post(path `/responses/${responseID}/cancel?beta=true`, {
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cf3bd8e856e6d966 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/responses/responses.mjs:103 
        return this._client.post('/responses/compact?beta=true', {
            body,
            ...options,
            headers: buildHeaders([
                { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
                options?.headers,
            ]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #26fa2bbd623b2067 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/messages.js:21 
        return this._client.post((0, path_1.path) `/threads/${threadID}/messages`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #14f8a6b8a29c9e12 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/messages.js:48 
        return this._client.post((0, path_1.path) `/threads/${thread_id}/messages/${messageID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #953ee2a089fb58fd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/messages.mjs:18 
        return this._client.post(path `/threads/${threadID}/messages`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #17eea368f2ff1e59 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/messages.mjs:45 
        return this._client.post(path `/threads/${thread_id}/messages/${messageID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ba6e56c6912f18df — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:26 
        return this._client.post((0, path_1.path) `/threads/${threadID}/runs`, {
            query: { include },
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
            __synthesizeEventData: true,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9733440d3a9c24e6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:56 
        return this._client.post((0, path_1.path) `/threads/${thread_id}/runs/${runID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6b723b7e945eb9e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:83 
        return this._client.post((0, path_1.path) `/threads/${thread_id}/runs/${runID}/cancel`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #136c20f01a92d496 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/runs/runs.js:163 
        return this._client.post((0, path_1.path) `/threads/${thread_id}/runs/${runID}/submit_tool_outputs`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
            __synthesizeEventData: true,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #23269202158283d3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:22 
        return this._client.post(path `/threads/${threadID}/runs`, {
            query: { include },
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
            __synthesizeEventData: true,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c5c73758a2e43128 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:52 
        return this._client.post(path `/threads/${thread_id}/runs/${runID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6c11d60eb6839833 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:79 
        return this._client.post(path `/threads/${thread_id}/runs/${runID}/cancel`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #edafd38b590ab0d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/runs/runs.mjs:159 
        return this._client.post(path `/threads/${thread_id}/runs/${runID}/submit_tool_outputs`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: params.stream ?? false,
            __synthesizeEventData: true,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2ff81ccf00056516 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/threads.js:31 
        return this._client.post('/threads', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c09a1be3edd03ca5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/threads.js:56 
        return this._client.post((0, path_1.path) `/threads/${threadID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a1dae61a82a35698 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/threads.js:76 
        return this._client.post('/threads/runs', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: body.stream ?? false,
            __synthesizeEventData: true,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1909cf3ae153f6e4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/threads.mjs:27 
        return this._client.post('/threads', {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f43b90f79cced55a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/threads.mjs:52 
        return this._client.post(path `/threads/${threadID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8a71a6bc62788c74 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/beta/threads/threads.mjs:72 
        return this._client.post('/threads/runs', {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            stream: body.stream ?? false,
            __synthesizeEventData: true,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #69f6e7ac38d808d8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/chat/completions/completions.js:24 
        return this._client.post('/chat/completions', {
            body,
            ...options,
            stream: body.stream ?? false,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #717e7b9b45d526b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/chat/completions/completions.js:61 
        return this._client.post((0, path_1.path) `/chat/completions/${completionID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #119797e5fe63c404 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/chat/completions/completions.mjs:20 
        return this._client.post('/chat/completions', {
            body,
            ...options,
            stream: body.stream ?? false,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5385cd9d7e2f42fb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/chat/completions/completions.mjs:57 
        return this._client.post(path `/chat/completions/${completionID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #aff3090daa692bd3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/completions.js:11 
        return this._client.post('/completions', {
            body,
            ...options,
            stream: body.stream ?? false,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f1986f461db4b2db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/completions.mjs:8 
        return this._client.post('/completions', {
            body,
            ...options,
            stream: body.stream ?? false,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6462bd29661696b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/containers/containers.js:21 
        return this._client.post('/containers', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7e138bc02e209453 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/containers/containers.mjs:17 
        return this._client.post('/containers', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #656834b882025c8b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/containers/files/files.js:25 
        return this._client.post((0, path_1.path) `/containers/${containerID}/files`, (0, uploads_1.maybeMultipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bb349ab93ef9a286 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/containers/files/files.mjs:21 
        return this._client.post(path `/containers/${containerID}/files`, maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5219f3141ca10194 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/conversations/conversations.js:22 
        return this._client.post('/conversations', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #dccad67504ad8a0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/conversations/conversations.js:37 
        return this._client.post((0, path_1.path) `/conversations/${conversationID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a20caa7d4b5ee640 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/conversations/conversations.mjs:18 
        return this._client.post('/conversations', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e95d4cd776075455 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/conversations/conversations.mjs:33 
        return this._client.post(path `/conversations/${conversationID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a7762ef7ca718770 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/conversations/items.js:17 
        return this._client.post((0, path_1.path) `/conversations/${conversationID}/items`, {
            query: { include },
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9109897e08216c92 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/conversations/items.mjs:14 
        return this._client.post(path `/conversations/${conversationID}/items`, {
            query: { include },
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b7a1c6f9cb0f4af8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/embeddings.js:31 
        const response = this._client.post('/embeddings', {
            body: {
                ...body,
                encoding_format: encoding_format,
            },
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #32df9ab2d21a4ce0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/embeddings.mjs:28 
        const response = this._client.post('/embeddings', {
            body: {
                ...body,
                encoding_format: encoding_format,
            },
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ec76f3a6a6985697 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/evals/evals.js:28 
        return this._client.post('/evals', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0084b86bcfbf8784 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/evals/evals.js:40 
        return this._client.post((0, path_1.path) `/evals/${evalID}`, { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e493daa3d955cef0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/evals/evals.mjs:24 
        return this._client.post('/evals', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #40da6740748aa07e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/evals/evals.mjs:36 
        return this._client.post(path `/evals/${evalID}`, { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8f97879dd729a097 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/evals/runs/runs.js:25 
        return this._client.post((0, path_1.path) `/evals/${evalID}/runs`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c40b9df81c8defd2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/evals/runs/runs.js:66 
        return this._client.post((0, path_1.path) `/evals/${eval_id}/runs/${runID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f1ca6912b1a00730 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/evals/runs/runs.mjs:21 
        return this._client.post(path `/evals/${evalID}/runs`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f740609eb95d7588 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/evals/runs/runs.mjs:62 
        return this._client.post(path `/evals/${eval_id}/runs/${runID}`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #269a1ff6f6f14ba3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/files.js:46 
        return this._client.post('/files', (0, uploads_1.multipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b49e8d74dc49b68b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/files.mjs:43 
        return this._client.post('/files', multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #52f4eb0c35d89fc3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/alpha/graders.js:28 
        return this._client.post('/fine_tuning/alpha/graders/run', {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c3196012ae08e030 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/alpha/graders.js:52 
        return this._client.post('/fine_tuning/alpha/graders/validate', {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2cb29d31d200efc1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/alpha/graders.mjs:25 
        return this._client.post('/fine_tuning/alpha/graders/run', {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fda5457f1d4ab3e0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/alpha/graders.mjs:49 
        return this._client.post('/fine_tuning/alpha/graders/validate', {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #388d2ee58283de15 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:37 
        return this._client.post('/fine_tuning/jobs', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c3a3dfd5d219c08c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:86 
        return this._client.post((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #98dd3021264ae8c9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:118 
        return this._client.post((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}/pause`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #165a63964205ae80 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.js:134 
        return this._client.post((0, path_1.path) `/fine_tuning/jobs/${fineTuningJobID}/resume`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #763294b0c3fa6324 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:33 
        return this._client.post('/fine_tuning/jobs', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #834b34bd55db4854 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:82 
        return this._client.post(path `/fine_tuning/jobs/${fineTuningJobID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #23153ecf717af0d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:114 
        return this._client.post(path `/fine_tuning/jobs/${fineTuningJobID}/pause`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #21b0949f3e27994d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/fine-tuning/jobs/jobs.mjs:130 
        return this._client.post(path `/fine_tuning/jobs/${fineTuningJobID}/resume`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b4678d49c3d0e4e2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/images.js:22 
        return this._client.post('/images/variations', (0, uploads_1.multipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c4ee680a6983f3c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/images.js:25 
        return this._client.post('/images/edits', (0, uploads_1.multipartFormRequestOptions)({ body, ...options, stream: body.stream ?? false, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a1b047b693f63560 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/images.js:28 
        return this._client.post('/images/generations', {
            body,
            ...options,
            stream: body.stream ?? false,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #27bf3d9df23ddf35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/images.mjs:19 
        return this._client.post('/images/variations', multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6de429c447f2ee85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/images.mjs:22 
        return this._client.post('/images/edits', multipartFormRequestOptions({ body, ...options, stream: body.stream ?? false, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b980c20304d848ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/images.mjs:25 
        return this._client.post('/images/generations', {
            body,
            ...options,
            stream: body.stream ?? false,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bf9642e9c4bb9a53 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/moderations.js:15 
        return this._client.post('/moderations', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5ebb1b3b024112cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/moderations.mjs:12 
        return this._client.post('/moderations', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #29316ff9342bd09e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/realtime/calls.js:21 
        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/accept`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6dcabc2f1f666749 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/realtime/calls.js:37 
        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/hangup`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9f4fd09a7ca38eeb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/realtime/calls.js:54 
        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/refer`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c8ae4085db359118 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/realtime/calls.js:70 
        return this._client.post((0, path_1.path) `/realtime/calls/${callID}/reject`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ddd0c7a9f02a4435 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/realtime/calls.mjs:18 
        return this._client.post(path `/realtime/calls/${callID}/accept`, {
            body,
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #fcd6fd418a06b9bd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/realtime/calls.mjs:34 
        return this._client.post(path `/realtime/calls/${callID}/hangup`, {
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #046da9bc0d6daf0e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/realtime/calls.mjs:51 
        return this._client.post(path `/realtime/calls/${callID}/refer`, {
            body,
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2155c58b7df4f1d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/realtime/calls.mjs:67 
        return this._client.post(path `/realtime/calls/${callID}/reject`, {
            body,
            ...options,
            headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3f3a2fbd4efa1bc8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/realtime/client-secrets.js:31 
        return this._client.post('/realtime/client_secrets', {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d7e52964db5646c0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/realtime/client-secrets.mjs:28 
        return this._client.post('/realtime/client_secrets', {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d6acd267f17cf7f8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/responses/input-tokens.js:19 
        return this._client.post('/responses/input_tokens', {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3754c3f428fa5008 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/responses/input-tokens.mjs:16 
        return this._client.post('/responses/input_tokens', {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c541b9e1c8042cad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/responses/responses.js:22 
        return this._client.post('/responses', {
            body,
            ...options,
            stream: body.stream ?? false,
            __security: { bearerAuth: true },
        })._thenUnwrap((rsp) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #24efac9dd69a0027 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/responses/responses.js:88 
        return this._client.post((0, path_1.path) `/responses/${responseID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b9d284cffb0740cc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/responses/responses.js:109 
        return this._client.post('/responses/compact', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3f49a75c7ac06e63 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/responses/responses.mjs:18 
        return this._client.post('/responses', {
            body,
            ...options,
            stream: body.stream ?? false,
            __security: { bearerAuth: true },
        })._thenUnwrap((rsp) => {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #06575a2a112bb9c2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/responses/responses.mjs:84 
        return this._client.post(path `/responses/${responseID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d241dbab3c3d147b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/responses/responses.mjs:105 
        return this._client.post('/responses/compact', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #62addfa1086e8509 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/skills/skills.js:24 
        return this._client.post('/skills', (0, uploads_1.maybeMultipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9a559dd80e3b878d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/skills/skills.js:36 
        return this._client.post((0, path_1.path) `/skills/${skillID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0f33616cc30f13a9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/skills/skills.mjs:20 
        return this._client.post('/skills', maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b8767188fc252c43 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/skills/skills.mjs:32 
        return this._client.post(path `/skills/${skillID}`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c8bd768aac6e5b3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/skills/versions/versions.js:21 
        return this._client.post((0, path_1.path) `/skills/${skillID}/versions`, (0, uploads_1.maybeMultipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ecaa2e5e5f718a7d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/skills/versions/versions.mjs:17 
        return this._client.post(path `/skills/${skillID}/versions`, maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6fe0f485a4adca4c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/uploads/parts.js:26 
        return this._client.post((0, path_1.path) `/uploads/${uploadID}/parts`, (0, uploads_1.multipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e485f3cc22c09737 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/uploads/parts.mjs:23 
        return this._client.post(path `/uploads/${uploadID}/parts`, multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a6567f5d59c65fb0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/uploads/uploads.js:42 
        return this._client.post('/uploads', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bd7f030a7c617b78 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/uploads/uploads.js:50 
        return this._client.post((0, path_1.path) `/uploads/${uploadID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9f83c179b5a74eb0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/uploads/uploads.js:73 
        return this._client.post((0, path_1.path) `/uploads/${uploadID}/complete`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #20464872487cdc55 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/uploads/uploads.mjs:38 
        return this._client.post('/uploads', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e8082753b585eafa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/uploads/uploads.mjs:46 
        return this._client.post(path `/uploads/${uploadID}/cancel`, {
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f3c72007e733de4c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/uploads/uploads.mjs:69 
        return this._client.post(path `/uploads/${uploadID}/complete`, {
            body,
            ...options,
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #85375534b3ea2103 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/file-batches.js:16 
        return this._client.post((0, path_1.path) `/vector_stores/${vectorStoreID}/file_batches`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ca43a2e91e6828ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/file-batches.js:40 
        return this._client.post((0, path_1.path) `/vector_stores/${vector_store_id}/file_batches/${batchID}/cancel`, {
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #55fffdca1472353e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/file-batches.mjs:13 
        return this._client.post(path `/vector_stores/${vectorStoreID}/file_batches`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e766d6b97c99f70c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/file-batches.mjs:37 
        return this._client.post(path `/vector_stores/${vector_store_id}/file_batches/${batchID}/cancel`, {
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9b3ef277b94e6f13 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/files.js:17 
        return this._client.post((0, path_1.path) `/vector_stores/${vectorStoreID}/files`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #dfaab2ecb34d0a97 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/files.js:40 
        return this._client.post((0, path_1.path) `/vector_stores/${vector_store_id}/files/${fileID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #30defea5afab3595 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/files.mjs:14 
        return this._client.post(path `/vector_stores/${vectorStoreID}/files`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cb33fa799060d22a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/files.mjs:37 
        return this._client.post(path `/vector_stores/${vector_store_id}/files/${fileID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0dc53dad3c6e0f6a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/vector-stores.js:24 
        return this._client.post('/vector_stores', {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #927cc3f9656703d7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/vector-stores.js:45 
        return this._client.post((0, path_1.path) `/vector_stores/${vectorStoreID}`, {
            body,
            ...options,
            headers: (0, headers_1.buildHeaders)([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b8ae8621e58c4799 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/vector-stores.mjs:20 
        return this._client.post('/vector_stores', {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c4547fe40f9d4e32 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/vector-stores/vector-stores.mjs:41 
        return this._client.post(path `/vector_stores/${vectorStoreID}`, {
            body,
            ...options,
            headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
            __security: { bearerAuth: true },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2a5f705bc8d22c47 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/videos.js:15 
        return this._client.post('/videos', (0, uploads_1.multipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #af34b6b004668a5a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/videos.js:43 
        return this._client.post('/videos/characters', (0, uploads_1.multipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9fa33bbed6c1c9ab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/videos.js:64 
        return this._client.post('/videos/edits', (0, uploads_1.multipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #961a535d301e35f0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/videos.js:70 
        return this._client.post('/videos/extensions', (0, uploads_1.multipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #56c0352c8bd6f6fe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/videos.js:85 
        return this._client.post((0, path_1.path) `/videos/${videoID}/remix`, (0, uploads_1.maybeMultipartFormRequestOptions)({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9c5474f075a9096a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/videos.mjs:12 
        return this._client.post('/videos', multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #dd4042e07aee8573 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/videos.mjs:40 
        return this._client.post('/videos/characters', multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cac58ad555d0f2cb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/videos.mjs:61 
        return this._client.post('/videos/edits', multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #65c011127e11bc49 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/videos.mjs:67 
        return this._client.post('/videos/extensions', multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1cd156c9ca02004c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/resources/videos.mjs:82 
        return this._client.post(path `/videos/${videoID}/remix`, maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client));

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4f6876de7bdb4123 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/auth/subject-token-providers.ts:81 
      const url = new URL(AZURE_IMDS_BASE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #53b07702558db6ae — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/auth/subject-token-providers.ts:145 
      const url = new URL(
        `http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity`,
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #dd8a3eed7decb163 — Environment-variable access.
pkgs/npm/[email protected]/src/azure.ts:101 
        endpoint = process.env['AZURE_OPENAI_ENDPOINT'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #3f894ae5ee93eaa3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/admin-api-keys.ts:22 
    return this._client.post('/organization/admin_api_keys', {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a9aab0d7baeed207 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/certificates.ts:30 
    return this._client.post('/organization/certificates', {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #64dd3709a8333322 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/certificates.ts:78 
    return this._client.post(path`/organization/certificates/${certificateID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a682f796ed3791f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/data-retention.ts:36 
    return this._client.post('/organization/data_retention', {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1704917202be8447 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/groups/groups.ts:50 
    return this._client.post('/organization/groups', {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c11f788cd76d7112 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/groups/groups.ts:91 
    return this._client.post(path`/organization/groups/${groupID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2b3949c765a372e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/groups/roles.ts:24 
    return this._client.post(path`/organization/groups/${groupID}/roles`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #12c6d4882bb7ce2c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/groups/users.ts:23 
    return this._client.post(path`/organization/groups/${groupID}/users`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ce7ece48327b7959 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/invites.ts:28 
    return this._client.post('/organization/invites', {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c39e19a2b69e5a3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/data-retention.ts:44 
    return this._client.post(path`/organization/projects/${projectID}/data_retention`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c40b6f70b5126639 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/groups/groups.ts:38 
    return this._client.post(path`/organization/projects/${projectID}/groups`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3ed931527aa1ff69 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/groups/roles.ts:29 
    return this._client.post(path`/projects/${project_id}/groups/${groupID}/roles`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0b3a7f857e7e4bd1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/hosted-tool-permissions.ts:43 
    return this._client.post(path`/organization/projects/${projectID}/hosted_tool_permissions`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6854612a36b1e9f0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/model-permissions.ts:44 
    return this._client.post(path`/organization/projects/${projectID}/model_permissions`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a7e0d4236b6d08c8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/projects.ts:146 
    return this._client.post('/organization/projects', {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a6b3307612a76bcf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/projects.ts:183 
    return this._client.post(path`/organization/projects/${projectID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e3a980df7f9f5caf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/projects.ts:225 
    return this._client.post(path`/organization/projects/${projectID}/archive`, {
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6e6646c50354971c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/rate-limits.ts:57 
    return this._client.post(path`/organization/projects/${project_id}/rate_limits/${rateLimitID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e0576776076a2f89 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/roles.ts:25 
    return this._client.post(path`/projects/${projectID}/roles`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #47aeaa5e57ba5445 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/roles.ts:66 
    return this._client.post(path`/projects/${project_id}/roles/${roleID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6887d75dbf64ab1b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/service-accounts/api-keys.ts:27 
    return this._client.post(
      path`/organization/projects/${project_id}/service_accounts/${serviceAccountID}/api_keys`,
      { body, ...options, __security: { adminAPIKeyAuth: true } },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1ccc7f41b757d37b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/service-accounts/service-accounts.ts:36 
    return this._client.post(path`/organization/projects/${projectID}/service_accounts`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f49bdd36d67e6ea2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/service-accounts/service-accounts.ts:85 
    return this._client.post(
      path`/organization/projects/${project_id}/service_accounts/${serviceAccountID}`,
      { body, ...options, __security: { adminAPIKeyAuth: true } },
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c41477d6e417fdd7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/spend-alerts.ts:39 
    return this._client.post(path`/organization/projects/${projectID}/spend_alerts`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2d0c2f9f0e1f39b0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/spend-alerts.ts:97 
    return this._client.post(path`/organization/projects/${project_id}/spend_alerts/${alertID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4ff148761a267fd2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/users/roles.ts:26 
    return this._client.post(path`/projects/${project_id}/users/${userID}/roles`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8c0abece246e4e5d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/users/users.ts:43 
    return this._client.post(path`/organization/projects/${projectID}/users`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6234818bac54e9ac — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/projects/users/users.ts:84 
    return this._client.post(path`/organization/projects/${project_id}/users/${userID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #9e2683280d2b2154 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/roles.ts:22 
    return this._client.post('/organization/roles', {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c20efdd608c2ae09 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/roles.ts:57 
    return this._client.post(path`/organization/roles/${roleID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b2c9e144fa2ad120 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/spend-alerts.ts:32 
    return this._client.post('/organization/spend_alerts', {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4900b967f7c2e595 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/spend-alerts.ts:82 
    return this._client.post(path`/organization/spend_alerts/${alertID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e60f21edea200bcc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/users/roles.ts:25 
    return this._client.post(path`/organization/users/${userID}/roles`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #28e5fbd23fa9c1c4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/admin/organization/users/users.ts:55 
    return this._client.post(path`/organization/users/${userID}`, {
      body,
      ...options,
      __security: { adminAPIKeyAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b3d3f10ebd8b8867 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/audio/speech.ts:30 
    return this._client.post('/audio/speech', {
      body,
      ...options,
      headers: buildHeaders([{ Accept: 'application/octet-stream' }, options?.headers]),
      __security: { bearerAuth: true },
      __binaryResponse: true,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #62664d472fd4c701 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/audio/transcriptions.ts:56 
    return this._client.post(
      '/audio/transcriptions',
      multipartFormRequestOptions(
        {
          body,
          ...options,
          stream: body.stream ?? false,
          __metadata: { model: body.model },
          __security: { bearerAuth: true },
        },
        this._client,
      ),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #167794fbb8583872 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/audio/translations.ts:40 
    return this._client.post(
      '/audio/translations',
      multipartFormRequestOptions(
        { body, ...options, __metadata: { model: body.model }, __security: { bearerAuth: true } },
        this._client,
      ),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f9b315e412189371 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/batches.ts:19 
    return this._client.post('/batches', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6960e66bb9703f07 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/batches.ts:49 
    return this._client.post(path`/batches/${batchID}/cancel`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5a1c3bcc64fd5540 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/assistants.ts:26 
    return this._client.post('/assistants', {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #24d132f853e78edc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/assistants.ts:53 
    return this._client.post(path`/assistants/${assistantID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ee7b5f9ef311318a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/chatkit/sessions.ts:24 
    return this._client.post('/chatkit/sessions', {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b686fabcffdc3ead — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/chatkit/sessions.ts:44 
    return this._client.post(path`/chatkit/sessions/${sessionID}/cancel`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'chatkit_beta=v1' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cb5c0b3cb2c73f31 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/realtime/sessions.ts:25 
    return this._client.post('/realtime/sessions', {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #869c1677bf805bc5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/realtime/transcription-sessions.ts:25 
    return this._client.post('/realtime/transcription_sessions', {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8a227ff22e3f59a7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/responses/input-tokens.ts:27 
    return this._client.post('/responses/input_tokens?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e90245a3bd37ef93 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/responses/responses.ts:52 
    return this._client.post('/responses?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
      stream: params.stream ?? false,
      __security: { bearerAuth: true },
    }) as APIPromise<BetaResponse> | APIPromise<Stream<BetaResponseStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5061f5396f02e2be — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/responses/responses.ts:151 
    return this._client.post(path`/responses/${responseID}/cancel?beta=true`, {
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5aeaadd237c448d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/responses/responses.ts:179 
    return this._client.post('/responses/compact?beta=true', {
      body,
      ...options,
      headers: buildHeaders([
        { ...(betas?.toString() != null ? { 'openai-beta': betas?.toString() } : undefined) },
        options?.headers,
      ]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6509096771479c34 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/threads/messages.ts:24 
    return this._client.post(path`/threads/${threadID}/messages`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #15486705213ae3ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/threads/messages.ts:53 
    return this._client.post(path`/threads/${thread_id}/messages/${messageID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #93531f2cf465291f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:74 
    return this._client.post(path`/threads/${threadID}/runs`, {
      query: { include },
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      stream: params.stream ?? false,
      __synthesizeEventData: true,
      __security: { bearerAuth: true },
    }) as APIPromise<Run> | APIPromise<Stream<AssistantsAPI.AssistantStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #42e780df91020230 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:106 
    return this._client.post(path`/threads/${thread_id}/runs/${runID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1984053f913680a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:139 
    return this._client.post(path`/threads/${thread_id}/runs/${runID}/cancel`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #60c7ae07cfd36f64 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/threads/runs/runs.ts:265 
    return this._client.post(path`/threads/${thread_id}/runs/${runID}/submit_tool_outputs`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      stream: params.stream ?? false,
      __synthesizeEventData: true,
      __security: { bearerAuth: true },
    }) as APIPromise<Run> | APIPromise<Stream<AssistantsAPI.AssistantStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8bcc6b72a7fe1d0c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/threads/threads.ts:90 
    return this._client.post('/threads', {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b61e543fe5678bc4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/threads/threads.ts:117 
    return this._client.post(path`/threads/${threadID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #482ca5ab5f8a281f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/beta/threads/threads.ts:156 
    return this._client.post('/threads/runs', {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      stream: body.stream ?? false,
      __synthesizeEventData: true,
      __security: { bearerAuth: true },
    }) as APIPromise<RunsAPI.Run> | APIPromise<Stream<AssistantsAPI.AssistantStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #94a1446096e9dfba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/chat/completions/completions.ts:81 
    return this._client.post('/chat/completions', {
      body,
      ...options,
      stream: body.stream ?? false,
      __security: { bearerAuth: true },
    }) as APIPromise<ChatCompletion> | APIPromise<Stream<ChatCompletionChunk>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #15e7bf3b6e67990b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/chat/completions/completions.ts:124 
    return this._client.post(path`/chat/completions/${completionID}`, {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cdcaea8cd91e8d0f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/completions.ts:38 
    return this._client.post('/completions', {
      body,
      ...options,
      stream: body.stream ?? false,
      __security: { bearerAuth: true },
    }) as APIPromise<Completion> | APIPromise<Stream<Completion>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #872afada50fddf93 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/containers/containers.ts:30 
    return this._client.post('/containers', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cd16778e5b64e4b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/containers/files/files.ts:28 
    return this._client.post(
      path`/containers/${containerID}/files`,
      maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #41ffefa676066784 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/conversations/conversations.ts:34 
    return this._client.post('/conversations', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b598d95c46eed0a1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/conversations/conversations.ts:55 
    return this._client.post(path`/conversations/${conversationID}`, {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cd925011e70cffd7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/conversations/items.ts:28 
    return this._client.post(path`/conversations/${conversationID}/items`, {
      query: { include },
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a19c7daf8b946110 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/embeddings.ts:35 
    const response: APIPromise<CreateEmbeddingResponse> = this._client.post('/embeddings', {
      body: {
        ...body,
        encoding_format: encoding_format as EmbeddingCreateParams['encoding_format'],
      },
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ae86405022148415 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/evals/evals.ts:45 
    return this._client.post('/evals', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #af6479664e92a0c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/evals/evals.ts:59 
    return this._client.post(path`/evals/${evalID}`, { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e1869da6f9bb2e06 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/evals/runs/runs.ts:34 
    return this._client.post(path`/evals/${evalID}/runs`, {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #a1f9115bf533c13e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/evals/runs/runs.ts:87 
    return this._client.post(path`/evals/${eval_id}/runs/${runID}`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #56dfbdb2f8514ec4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/files.ts:48 
    return this._client.post(
      '/files',
      multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #940fae09123f8a89 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/fine-tuning/alpha/graders.ts:30 
    return this._client.post('/fine_tuning/alpha/graders/run', {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7aafd024a18a9958 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/fine-tuning/alpha/graders.ts:55 
    return this._client.post('/fine_tuning/alpha/graders/validate', {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c4ca2ea045b5c1b9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:42 
    return this._client.post('/fine_tuning/jobs', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #95656781aa39f5d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:97 
    return this._client.post(path`/fine_tuning/jobs/${fineTuningJobID}/cancel`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #660eb61903c977d5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:139 
    return this._client.post(path`/fine_tuning/jobs/${fineTuningJobID}/pause`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #bb5a7d927b5eb17a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/fine-tuning/jobs/jobs.ts:156 
    return this._client.post(path`/fine_tuning/jobs/${fineTuningJobID}/resume`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #8d669b4773e837cd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/images.ts:26 
    return this._client.post(
      '/images/variations',
      multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #38d4635a7f1521d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/images.ts:55 
    return this._client.post(
      '/images/edits',
      multipartFormRequestOptions(
        { body, ...options, stream: body.stream ?? false, __security: { bearerAuth: true } },
        this._client,
      ),
    ) as APIPromise<ImagesResponse> | APIPromise<Stream<ImageEditStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #51a1434cfd1fc03c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/images.ts:88 
    return this._client.post('/images/generations', {
      body,
      ...options,
      stream: body.stream ?? false,
      __security: { bearerAuth: true },
    }) as APIPromise<ImagesResponse> | APIPromise<Stream<ImageGenStreamEvent>>;

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #d2c3c680e0bc4a8f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/moderations.ts:16 
    return this._client.post('/moderations', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #e5f4f84e156ff5e9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/realtime/calls.ts:24 
    return this._client.post(path`/realtime/calls/${callID}/accept`, {
      body,
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #562fea580ab2bf79 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/realtime/calls.ts:41 
    return this._client.post(path`/realtime/calls/${callID}/hangup`, {
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c540990ebbcfcbb1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/realtime/calls.ts:59 
    return this._client.post(path`/realtime/calls/${callID}/refer`, {
      body,
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7c6d3d3b569f4338 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/realtime/calls.ts:80 
    return this._client.post(path`/realtime/calls/${callID}/reject`, {
      body,
      ...options,
      headers: buildHeaders([{ Accept: '*/*' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b91fc44bfd951184 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/realtime/client-secrets.ts:35 
    return this._client.post('/realtime/client_secrets', {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #35cf23ee95eb2e7b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/responses/input-tokens.ts:25 
    return this._client.post('/responses/input_tokens', {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #0f129371acd3101a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/responses/responses.ts:112 
      this._client.post('/responses', {
        body,
        ...options,
        stream: body.stream ?? false,
        __security: { bearerAuth: true },
      }) as APIPromise<Response> | APIPromise<Stream<ResponseStreamEvent>>

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #db5ad12d3c6bc7d6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/responses/responses.ts:223 
    return this._client.post(path`/responses/${responseID}/cancel`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #62be423e888736d4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/responses/responses.ts:245 
    return this._client.post('/responses/compact', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #29672ffd0323b4c1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/skills/skills.ts:33 
    return this._client.post(
      '/skills',
      maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3263e524504f5da2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/skills/skills.ts:50 
    return this._client.post(path`/skills/${skillID}`, {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #36fa0fd77c1ed8a8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/skills/versions/versions.ts:24 
    return this._client.post(
      path`/skills/${skillID}/versions`,
      maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #b0a9170b7445fc92 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/uploads/parts.ts:28 
    return this._client.post(
      path`/uploads/${uploadID}/parts`,
      multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #87fb3a136c74af63 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/uploads/uploads.ts:41 
    return this._client.post('/uploads', { body, ...options, __security: { bearerAuth: true } });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #40d3417bd3dccdfb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/uploads/uploads.ts:50 
    return this._client.post(path`/uploads/${uploadID}/cancel`, {
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #72ed9d3900a7d1b6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/uploads/uploads.ts:74 
    return this._client.post(path`/uploads/${uploadID}/complete`, {
      body,
      ...options,
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #282591074511c7c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/vector-stores/file-batches.ts:25 
    return this._client.post(path`/vector_stores/${vectorStoreID}/file_batches`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1235fb6eb89cd037 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/vector-stores/file-batches.ts:59 
    return this._client.post(path`/vector_stores/${vector_store_id}/file_batches/${batchID}/cancel`, {
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ae92f8528a445a96 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/vector-stores/files.ts:24 
    return this._client.post(path`/vector_stores/${vectorStoreID}/files`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1e9935e3c706263d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/vector-stores/files.ts:53 
    return this._client.post(path`/vector_stores/${vector_store_id}/files/${fileID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cf5b5ad1a9c4f181 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/vector-stores/vector-stores.ts:43 
    return this._client.post('/vector_stores', {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #38fed3ba7c9317ad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/vector-stores/vector-stores.ts:70 
    return this._client.post(path`/vector_stores/${vectorStoreID}`, {
      body,
      ...options,
      headers: buildHeaders([{ 'OpenAI-Beta': 'assistants=v2' }, options?.headers]),
      __security: { bearerAuth: true },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #6557ecdc0484d50f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/videos.ts:17 
    return this._client.post(
      '/videos',
      multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ca1c6769425980a7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/videos.ts:58 
    return this._client.post(
      '/videos/characters',
      multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #482c1c5b8c1bc0c3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/videos.ts:88 
    return this._client.post(
      '/videos/edits',
      multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f34f09fe3c615935 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/videos.ts:98 
    return this._client.post(
      '/videos/extensions',
      multipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #2b19a20e9c9bcb10 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/src/resources/videos.ts:118 
    return this._client.post(
      path`/videos/${videoID}/remix`,
      maybeMultipartFormRequestOptions({ body, ...options, __security: { bearerAuth: true } }, this._client),
    );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

axios

npm dependency
medium pii_flow dependency Excluded from app score #be7046ab8b575985 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
pkgs/npm/[email protected]/lib/adapters/http.js:1062 · flow /tmp/closeopen-vzna68el/pkgs/npm/[email protected]/lib/adapters/http.js:861 → /tmp/closeopen-vzna68el/pkgs/npm/[email protected]/lib/adapters/http.js:1062 
      req = transport.request(options, function handleResponse(res) {
        clearConnectPhaseTimer();

        if (req.destroyed) return;

        const streams = [res];

        const responseLength = utils.toFiniteNumber(res.headers['content-length']);

        if (onDownloadProgress || maxDownloadRate) {
          const transformStream = new AxiosTransformStream({
            maxRate: utils.toFiniteNumber(maxDownloadRate),
          });

          onDownloadProgress &&
            transformStream.on(
              'progress',
              flushOnFinish(
                transformStream,
                progressEventDecorator(
                  responseLength,
                  progressEventReducer(asyncDecorator(onDownloadProgress), true, 3)
                )
              )
            );

          streams.push(transformStream);
        }

        // decompress the response body transparently if required
        let responseStream = res;

        // return the last request in case of redirects
        const lastRequest = res.req || req;

        // if decompress disabled we should not decompress
        if (decompress !== false && res.headers['content-encoding']) {
          // if no content, but headers still say that it is encoded,
          // remove the header not confuse downstream operations
          if (method === 'HEAD' || res.statusCode === 204) {
            delete res.headers['content-encoding'];
          }

          switch ((res.headers['content-encoding'] || '').toLowerCase()) {
            /*eslint default-case:0*/
            case 'gzip':
            case 'x-gzip':
            case 'compress':
            case 'x-compress':
              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'deflate':
              streams.push(new ZlibHeaderTransformStream());

              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'br':
              if (isBrotliSupported) {
                streams.push(zlib.createBrotliDecompress(brotliOptions));
                delete res.headers['content-encoding'];
              }
              break;
            case 'zstd':
              if (isZstdSupported) {
                streams.push(zlib.createZstdDecompress(zstdOptions));
                delete res.headers['content-encoding'];
              }
              break;
          }
        }

        responseStream = streams.length > 1 ? stream.pipeline(streams, utils.noop) : streams[0];

        const response = {
          status: res.statusCode,
          statusText: res.statusMessage,
          headers: new AxiosHeaders(res.headers),
          config,
          request: lastRequest,
        };

        if (responseType === 'stream') {
          // Enforce maxContentLength on streamed responses; previously this
          // was applied only to buffered responses.
          if (maxContentLength > -1) {
            const limit = maxContentLength;
            const source = responseStream;
            async function* enforceMaxContentLength() {
              let totalResponseBytes = 0;
              for await (const chunk of source) {
                totalResponseBytes += chunk.length;
                if (totalResponseBytes > limit) {
                  throw new AxiosError(
                    'maxContentLength size of ' + limit + ' exceeded',
                    AxiosError.ERR_BAD_RESPONSE,
                    config,
                    lastRequest
                  );
                }
                yield chunk;
              }
            }
            responseStream = stream.Readable.from(enforceMaxContentLength(), {
              objectMode: false,
            });
          }
          response.data = responseStream;
          settle(resolve, reject, response);
        } else {
          const responseBuffer = [];
          let totalResponseBytes = 0;

          responseStream.on('data', function handleStreamData(chunk) {
            responseBuffer.push(chunk);
            totalResponseBytes += chunk.length;

            // make sure the content length is not over the maxContentLength if specified
            if (maxContentLength > -1 && totalResponseBytes > maxContentLength) {
              // stream.destroy() emit aborted event before calling reject() on Node.js v16
              rejected = true;
              responseStream.destroy();
              abort(
                new AxiosError(
                  'maxContentLength size of ' + maxContentLength + ' exceeded',
                  AxiosError.ERR_BAD_RESPONSE,
                  config,
                  lastRequest
                )
              );
            }
          });

          responseStream.on('aborted', function handlerStreamAborted() {
            if (rejected) {
              return;
            }

            const err = new AxiosError(
              'stream has been aborted',
              AxiosError.ERR_BAD_RESPONSE,
              config,
              lastRequest,
              response
            );
            responseStream.destroy(err);
            reject(err);
          });

          responseStream.on('error', function handleStreamError(err) {
            if (rejected) return;
            reject(AxiosError.from(err, null, config, lastRequest, response));
          });

          responseStream.on('end', function handleStreamEnd() {
            try {
              let responseData =
                responseBuffer.length === 1 ? responseBuffer[0] : Buffer.concat(responseBuffer);
              if (responseType !== 'arraybuffer') {
                responseData = responseData.toString(responseEncoding);
                if (!responseEncoding || responseEncoding === 'utf8') {
                  responseData = utils.stripBOM(responseData);
                }
              }
              response.data = responseData;
            } catch (err) {
              return reject(AxiosError.from(err, null, config, response.request, response));
            }
            settle(resolve, reject, response);
          });
        }

        abortEmitter.once('abort', (err) => {
          if (!responseStream.destroyed) {
            responseStream.emit('error', err);
            responseStream.destroy();
          }
        });
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 3 low-confidence finding(s)
low egress dependency Excluded from app score #171d5d8ac3052993 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/adapters/http.js:494 
    const req = session.request(http2Headers);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #7a24898209130d0e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/adapters/http.js:1062 
      req = transport.request(options, function handleResponse(res) {
        clearConnectPhaseTimer();

        if (req.destroyed) return;

        const streams = [res];

        const responseLength = utils.toFiniteNumber(res.headers['content-length']);

        if (onDownloadProgress || maxDownloadRate) {
          const transformStream = new AxiosTransformStream({
            maxRate: utils.toFiniteNumber(maxDownloadRate),
          });

          onDownloadProgress &&
            transformStream.on(
              'progress',
              flushOnFinish(
                transformStream,
                progressEventDecorator(
                  responseLength,
                  progressEventReducer(asyncDecorator(onDownloadProgress), true, 3)
                )
              )
            );

          streams.push(transformStream);
        }

        // decompress the response body transparently if required
        let responseStream = res;

        // return the last request in case of redirects
        const lastRequest = res.req || req;

        // if decompress disabled we should not decompress
        if (decompress !== false && res.headers['content-encoding']) {
          // if no content, but headers still say that it is encoded,
          // remove the header not confuse downstream operations
          if (method === 'HEAD' || res.statusCode === 204) {
            delete res.headers['content-encoding'];
          }

          switch ((res.headers['content-encoding'] || '').toLowerCase()) {
            /*eslint default-case:0*/
            case 'gzip':
            case 'x-gzip':
            case 'compress':
            case 'x-compress':
              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'deflate':
              streams.push(new ZlibHeaderTransformStream());

              // add the unzipper to the body stream processing pipeline
              streams.push(zlib.createUnzip(zlibOptions));

              // remove the content-encoding in order to not confuse downstream operations
              delete res.headers['content-encoding'];
              break;
            case 'br':
              if (isBrotliSupported) {
                streams.push(zlib.createBrotliDecompress(brotliOptions));
                delete res.headers['content-encoding'];
              }
              break;
            case 'zstd':
              if (isZstdSupported) {
                streams.push(zlib.createZstdDecompress(zstdOptions));
                delete res.headers['content-encoding'];
              }
              break;
          }
        }

        responseStream = streams.length > 1 ? stream.pipeline(streams, utils.noop) : streams[0];

        const response = {
          status: res.statusCode,
          statusText: res.statusMessage,
          headers: new AxiosHeaders(res.headers),
          config,
          request: lastRequest,
        };

        if (responseType === 'stream') {
          // Enforce maxContentLength on streamed responses; previously this
          // was applied only to buffered responses.
          if (maxContentLength > -1) {
            const limit = maxContentLength;
            const source = responseStream;
            async function* enforceMaxContentLength() {
              let totalResponseBytes = 0;
              for await (const chunk of source) {
                totalResponseBytes += chunk.length;
                if (totalResponseBytes > limit) {
                  throw new AxiosError(
                    'maxContentLength size of ' + limit + ' exceeded',
                    AxiosError.ERR_BAD_RESPONSE,
                    config,
                    lastRequest
                  );
                }
                yield chunk;
              }
            }
            responseStream = stream.Readable.from(enforceMaxContentLength(), {
              objectMode: false,
            });
          }
          response.data = responseStream;
          settle(resolve, reject, response);
        } else {
          const responseBuffer = [];
          let totalResponseBytes = 0;

          responseStream.on('data', function handleStreamData(chunk) {
            responseBuffer.push(chunk);
            totalResponseBytes += chunk.length;

            // make sure the content length is not over the maxContentLength if specified
            if (maxContentLength > -1 && totalResponseBytes > maxContentLength) {
              // stream.destroy() emit aborted event before calling reject() on Node.js v16
              rejected = true;
              responseStream.destroy();
              abort(
                new AxiosError(
                  'maxContentLength size of ' + maxContentLength + ' exceeded',
                  AxiosError.ERR_BAD_RESPONSE,
                  config,
                  lastRequest
                )
              );
            }
          });

          responseStream.on('aborted', function handlerStreamAborted() {
            if (rejected) {
              return;
            }

            const err = new AxiosError(
              'stream has been aborted',
              AxiosError.ERR_BAD_RESPONSE,
              config,
              lastRequest,
              response
            );
            responseStream.destroy(err);
            reject(err);
          });

          responseStream.on('error', function handleStreamError(err) {
            if (rejected) return;
            reject(AxiosError.from(err, null, config, lastRequest, response));
          });

          responseStream.on('end', function handleStreamEnd() {
            try {
              let responseData =
                responseBuffer.length === 1 ? responseBuffer[0] : Buffer.concat(responseBuffer);
              if (responseType !== 'arraybuffer') {
                responseData = responseData.toString(responseEncoding);
                if (!responseEncoding || responseEncoding === 'utf8') {
                  responseData = utils.stripBOM(responseData);
                }
              }
              response.data = responseData;
            } catch (err) {
              return reject(AxiosError.from(err, null, config, response.request, response));
            }
            settle(resolve, reject, response);
          });
        }

        abortEmitter.once('abort', (err) => {
          if (!responseStream.destroyed) {
            responseStream.emit('error', err);
            responseStream.destroy();
          }
        });
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #bd471caddd360433 — Environment-variable access.
pkgs/npm/[email protected]/lib/helpers/shouldBypassProxy.js:168 
  const noProxy = (process.env.no_proxy || process.env.NO_PROXY || '').toLowerCase();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@ai-sdk/google-vertex

npm dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #283ebb1eec91f794 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/edge/google-vertex-auth-edge.ts:139 
    const response = await fetch('https://oauth2.googleapis.com/token', {
      method: 'POST',
      headers: withUserAgentSuffix(
        { 'Content-Type': 'application/x-www-form-urlencoded' },
        `ai-sdk/google-vertex/${VERSION}`,
        getRuntimeEnvironmentUserAgent(),
      ),
      body: new URLSearchParams({
        grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
        assertion: jwt,
      }),
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@aws-sdk/credential-providers

npm dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #e92ead0669648e85 — Environment-variable access.
pkgs/npm/@[email protected]/dist-cjs/index.js:246 
    return fromTemporaryCredentials$1(options, fromNodeProviderChain, async ({ profile = process.env.AWS_PROFILE }) => loadConfig({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4823e2f8ec12c289 — Environment-variable access.
pkgs/npm/@[email protected]/dist-es/fromTemporaryCredentials.js:5 
    return fromTemporaryCredentialsBase(options, fromNodeProviderChain, async ({ profile = process.env.AWS_PROFILE }) => loadConfig({

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@qdrant/js-client-rest

npm dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #d90538bc997b86a0 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/rollup.config.js:5 
import {writeFile} from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ab8c6b79c7898d2 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/rollup.config.js:9 
    buildEnd: () => writeFile('dist/cjs/package.json', '{"type":"commonjs"}'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #72d026d9e0f03b4b — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/generate_client_construction.ts:1 
import * as fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #f384bed113b3f8b4 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/generate_client_construction.ts:3 
const openapiFile = fs.readFileSync('./src/openapi/generated_schema.ts', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #51f4a5d9677f2b84 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/generate_client_construction.ts:341 
fs.writeFileSync('./src/openapi/generated_client_type.ts', generatedTypeFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #055b71a3def863b8 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/generate_client_construction.ts:387 
fs.writeFileSync('./src/openapi/generated_api_client.ts', generatedConstructorFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@tanstack/react-query

npm dependency
expand_more 5 low-confidence finding(s)
low env_fs dependency Excluded from app score #3dd37ea88e9f00e4 — Environment-variable access.
pkgs/npm/@[email protected]/src/useBaseQuery.ts:44 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bdcbf96083f0263 — Environment-variable access.
pkgs/npm/@[email protected]/src/useBaseQuery.ts:69 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1cbcbb60acfb053 — Environment-variable access.
pkgs/npm/@[email protected]/src/useSuspenseInfiniteQuery.ts:34 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c13dcf4e8c5591f — Environment-variable access.
pkgs/npm/@[email protected]/src/useSuspenseQueries.ts:194 
        if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cbc2d08582bfa55b — Environment-variable access.
pkgs/npm/@[email protected]/src/useSuspenseQuery.ts:17 
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@vscode/codicons

npm dependency
expand_more 20 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #a1894b37841bcd64 — Filesystem access.
pkgs/npm/@[email protected]/scripts/check-metadata.js:8 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #93d568ac3526f41f — Filesystem access.
pkgs/npm/@[email protected]/scripts/check-metadata.js:25 
const mapping = JSON.parse(fs.readFileSync(mappingPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #62ce7e54edbde703 — Filesystem access.
pkgs/npm/@[email protected]/scripts/check-metadata.js:26 
const metadata = JSON.parse(fs.readFileSync(metadataPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #3574856071943252 — Filesystem access.
pkgs/npm/@[email protected]/scripts/embed-metadata.js:1 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ab032a90397579a3 — Filesystem access.
pkgs/npm/@[email protected]/scripts/embed-metadata.js:12 
const metadata = fs.readFileSync(metadataPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #cb64c23e0b006044 — Filesystem access.
pkgs/npm/@[email protected]/scripts/embed-metadata.js:13 
let html = fs.readFileSync(htmlPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #75ae0a7a05752a4b — Filesystem access.
pkgs/npm/@[email protected]/scripts/embed-metadata.js:21 
    fs.writeFileSync(htmlPath, html);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #abd53fc1708f41d4 — Filesystem access.
pkgs/npm/@[email protected]/scripts/embed-svg-data.js:1 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ac69af71e98be50e — Filesystem access.
pkgs/npm/@[email protected]/scripts/embed-svg-data.js:18 
    const content = fs.readFileSync(path.join(iconsDir, file), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1bf57933433899d3 — Filesystem access.
pkgs/npm/@[email protected]/scripts/embed-svg-data.js:22 
let html = fs.readFileSync(htmlPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c7063fd59fd9619a — Filesystem access.
pkgs/npm/@[email protected]/scripts/embed-svg-data.js:27 
    fs.writeFileSync(htmlPath, html);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #995cc0f9eef464f6 — Filesystem access.
pkgs/npm/@[email protected]/scripts/export-to-ts.js:1 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b777d1d27c478766 — Filesystem access.
pkgs/npm/@[email protected]/scripts/export-to-ts.js:10 
fs.readFile(opts.f, 'utf8', (err, data) => {
    if (err) {
        console.error('Error reading file:', err);
        return;
    }

    try {
        const mapping = JSON.parse(data);

        console.log("/*---------------------------------------------------------------------------------------------");
        console.log(" *  Copyright (c) Microsoft Corporation. All rights reserved.");
        console.log(" *  Licensed under the MIT License. See License.txt in the project root for license information.");
        console.log(" *--------------------------------------------------------------------------------------------*/");
        console.log("import { register } from './codiconsUtil.js';");
        console.log("");
        console.log("");
        console.log("// This file is automatically generated by (microsoft/vscode-codicons)/scripts/export-to-ts.js");
        console.log("// Please don't edit it, as your changes will be overwritten.");
        console.log("// Instead, add mappings to codiconsDerived in codicons.ts.");
        console.log("export const codiconsLibrary = {");

        // New format: mapping is { "code": ["alias1", "alias2", ...] }
        Object.entries(mapping).forEach(([code, aliases]) => {
            const codeValue = parseInt(code);
            const hexValue = decimalToHex(codeValue);
            
            // Register each alias with the same code
            aliases.forEach((name) => {
                console.log(`\t${toCamelCase(name)}: register('${name}', ${hexValue}),`);
            });
        });

        console.log("} as const;");

    } catch (error) {
        console.error('Error parsing JSON:', error);
    }
});

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5ff1d526cf3effa2 — Filesystem access.
pkgs/npm/@[email protected]/scripts/reset.js:1 
const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #92d51238a118e474 — Filesystem access.
pkgs/npm/@[email protected]/scripts/svg-sprite.js:3 
const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #741c081355b6af49 — Filesystem access.
pkgs/npm/@[email protected]/scripts/svg-sprite.js:90 
        fs.readFileSync(file, "utf-8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #77e36327eeeeb2ec — Filesystem access.
pkgs/npm/@[email protected]/scripts/svg-sprite.js:118 
    fs.writeFileSync(result.symbol.sprite.path, result.symbol.sprite.contents);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #716b7bc558dc5347 — Filesystem access.
pkgs/npm/@[email protected]/scripts/version-bump.js:3 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #76913c1cbb866deb — Filesystem access.
pkgs/npm/@[email protected]/scripts/version-bump.js:13 
  const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #71966b67a7fcaabc — Filesystem access.
pkgs/npm/@[email protected]/scripts/version-bump.js:84 
  fs.writeFileSync(packageJsonPath, JSON.stringify(packageJson, null, 2) + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ai-sdk-provider-poe

npm dependency
expand_more 21 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #5ab6757eeea4c34d — Filesystem access.
pkgs/npm/[email protected]__reposrc/scripts/build.ts:2 
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d81319c0bf395223 — Filesystem access.
pkgs/npm/[email protected]__reposrc/scripts/build.ts:5 
const pkg = JSON.parse(readFileSync("package.json", "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #db361c272c85bbdd — Filesystem access.
pkgs/npm/[email protected]__reposrc/scripts/dev-models.ts:90 
    readFileSync(new URL("../src/data/bundled-routing.json", import.meta.url), "utf8"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0fc8a9e165bb01d5 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/scripts/dev-models.ts:999 
  port = Number(process.env.PORT ?? 3456),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #80a37da79d95b4bc — Environment-variable access.
pkgs/npm/[email protected]__reposrc/scripts/probe-workarounds.ts:14 
const apiKey = process.env.POE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #baa5a287b9b7dfe5 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/scripts/probe-workarounds.ts:20 
const baseURL = process.env.POE_BASE_URL ?? "https://api.poe.com/v1";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #78ef00ef26f50eee — Filesystem access.
pkgs/npm/[email protected]__reposrc/scripts/publish.ts:2 
import { readFileSync, writeFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #886cf432c31a0e4b — Filesystem access.
pkgs/npm/[email protected]__reposrc/scripts/publish.ts:10 
const originalPkg = readFileSync("package.json", "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b23f5c4874e40865 — Filesystem access.
pkgs/npm/[email protected]__reposrc/scripts/publish.ts:16 
  writeFileSync("package.json", JSON.stringify(pkg, null, 2) + "\n");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #c600ba4b639ccf38 — Filesystem access.
pkgs/npm/[email protected]__reposrc/scripts/publish.ts:20 
  writeFileSync("package.json", originalPkg);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5704cfbd3cbbb81e — Environment-variable access.
pkgs/npm/[email protected]__reposrc/scripts/snapshots.ts:13 
  return process.env.POE_SNAPSHOT_DIR?.trim() || ".snapshots";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ec9e2d0ab44696d3 — Filesystem access.
pkgs/npm/[email protected]__reposrc/scripts/snapshots.ts:29 
  const raw = await fs.readFile(accessedKeysPath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #8436b06834b2fdd3 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]__reposrc/scripts/update-bundled-routing.ts:15 
const res = await fetch(API_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #e8828a47e1054f7d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]__reposrc/src/middlewares/patch-output-text.test.ts:35 
    const res = await fetch("https://api.poe.com/v1/responses", {});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #1c94acf3cf905db3 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]__reposrc/src/middlewares/patch-output-text.test.ts:49 
    const res = await fetch("https://api.poe.com/v1/responses", {});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #6fc8a2c1eb5c41a2 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]__reposrc/src/middlewares/patch-output-text.test.ts:67 
    const res = await fetch("https://api.poe.com/v1/responses", {});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress tooling Excluded from app score unknown #ff60597ed684c23c — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]__reposrc/src/middlewares/patch-output-text.test.ts:77 
    const res = await fetch("https://api.poe.com/v1/chat/completions", {});

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #594097189841b5ce — Filesystem access.
pkgs/npm/[email protected]__reposrc/src/poe-provider.openai.integration.test.ts:4 
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #da1ca0a7b43d070e — Filesystem access.
pkgs/npm/[email protected]__reposrc/src/poe-provider.openai.integration.test.ts:10 
const bannerImage = readFileSync(
  new URL("./test/fixtures/banner.jpg", import.meta.url)
);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress tooling Excluded from app score unknown #1e5554aec682010b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]__reposrc/src/poe-provider.openai.integration.test.ts:254 
              image: new URL(
                "https://raw.githubusercontent.com/poe-platform/ai-sdk-provider-poe/refs/heads/main/tests/fixtures/banner.jpg"
              ),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #6e118e6bdf7840d4 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/vitest.config.ts:4 
const isRecordMode = process.env.POE_SNAPSHOT_MODE === "record" || cliTags.includes("snapshot:record");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ansi-to-html

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #4da1548c91839f1b — Filesystem access.
pkgs/npm/[email protected]/lib/cli.js:69 
  var stream = require('fs').createReadStream(file, {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

chokidar

npm dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #b1e73a399307c392 — Environment-variable access.
pkgs/npm/[email protected]/index.js:284 
        const envPoll = process.env.CHOKIDAR_USEPOLLING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa01c43ca76595d1 — Environment-variable access.
pkgs/npm/[email protected]/index.js:294 
        const envInterval = process.env.CHOKIDAR_INTERVAL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

class-variance-authority

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #860872c937fa4ddd — Environment-variable access.
pkgs/npm/[email protected]__reposrc/docs/latest/theme.config.tsx:15 
  branch: process.env.NEXT_PUBLIC_VERCEL_GIT_COMMIT_REF || "main",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #a8382b4148ef6deb — Environment-variable access.
pkgs/npm/[email protected]__reposrc/docs/latest/theme.config.tsx:17 
    process.env.NEXT_PUBLIC_VERCEL_GIT_REPO_OWNER || "joe-bell",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #eb54d3f89025a58e — Environment-variable access.
pkgs/npm/[email protected]__reposrc/docs/latest/theme.config.tsx:18 
    process.env.NEXT_PUBLIC_VERCEL_GIT_REPO_SLUG || "cva",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

exceljs

npm dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #c43452be0235a779 — Filesystem access.
pkgs/npm/[email protected]/lib/csv/csv.js:1 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b60a7c6ef29bbf0 — Filesystem access.
pkgs/npm/[email protected]/lib/stream/xlsx/workbook-reader.js:1 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7be990233f5152fc — Filesystem access.
pkgs/npm/[email protected]/lib/stream/xlsx/workbook-writer.js:1 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f209364d11ef7a96 — Filesystem access.
pkgs/npm/[email protected]/lib/utils/utils.js:1 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa2c715e0335d4b3 — Filesystem access.
pkgs/npm/[email protected]/lib/xlsx/xlsx.js:1 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ebbdc1d7bf58c97 — Filesystem access.
pkgs/npm/[email protected]/lib/xlsx/xlsx.js:29 
    fs.readFile(filename, options, (error, data) => {
      if (error) {
        reject(error);
      } else {
        resolve(data);
      }
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fast-xml-parser

npm dependency
expand_more 6 low-confidence finding(s)
low env_fs dependency Excluded from app score #478fd0b650563885 — Filesystem access.
pkgs/npm/[email protected]/src/cli/cli.js:4 
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93756204db0a7ec2 — Filesystem access.
pkgs/npm/[email protected]/src/cli/cli.js:18 
  const version = JSON.parse(fs.readFileSync(packageJsonPath).toString()).version;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ff7fe6d0b64a2c0 — Filesystem access.
pkgs/npm/[email protected]/src/cli/cli.js:78 
      fs.readFile(fileName, function(err, data) {
        if (err) {
          throw err;
        }
        callback(data.toString());
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75f5a96ea0658f25 — Filesystem access.
pkgs/npm/[email protected]/src/cli/cli.js:91 
  fs.writeFile(fileName, data, function(err) {
    if (err) {
      throw err;
    }
    console.log('JSON output has been written to ' + fileName);
  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e0bde749003cded — Filesystem access.
pkgs/npm/[email protected]/src/cli/man.js:1 
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8cb7ff2201599c61 — Filesystem access.
pkgs/npm/[email protected]/src/cli/man.js:4 
const version = JSON.parse(fs.readFileSync(packageJsonPath).toString()).version;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

fastest-levenshtein

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #4ec8d2120a59a0d2 — Filesystem access.
pkgs/npm/[email protected]/bench.js:8 
var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #171af48aaf5b6821 — Filesystem access.
pkgs/npm/[email protected]/bench.js:43 
    fs.writeFileSync("data.json", JSON.stringify(data_1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e43dab3c1b018ff8 — Filesystem access.
pkgs/npm/[email protected]/bench.js:45 
var data = JSON.parse(fs.readFileSync("data.json", "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

global-agent

npm dependency
expand_more 24 low-confidence finding(s)
low env_fs dependency Excluded from app score #1e44b6a84927abea — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/classes/Agent.ts:112 
    const rejectUnauthorized = process.env.NODE_TLS_REJECT_UNAUTHORIZED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d91fa4615e5e117f — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:62 
const defaultNodeTlsRejectUnauthorized = process.env.NODE_TLS_REJECT_UNAUTHORIZED;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #da46d158be96678d — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:136 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = defaultNodeTlsRejectUnauthorized;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e254c3e3f35b74ed — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:343 
  process.env.GLOBAL_AGENT_FORCE_GLOBAL_AGENT = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d2deb2062ac2a5e7 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:359 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 'null';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #428e075ef32cd2bd — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:371 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 1;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #799de76a6a7ec042 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:385 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 0;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #989db8a054fab93a — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:399 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = true;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ffcba972b88473a3 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:411 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = false;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d269c571961cb304 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:422 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 'yes';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9968d43a495cf35c — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:433 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = 'no';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #bcdace5282541d91 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:461 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5ffef54ffcd2554f — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:480 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #7e09915a76fa6c5e — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:499 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #45213f3245ec628e — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:518 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #fb47248f2cfbb32e — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:538 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #1804f445b7cb66b7 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:554 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9c9edafb6d186dce — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:586 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #77aa4b6cbfd570e9 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:687 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5032847b5554f755 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:713 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #7d0d406177cee54e — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.test.ts:745 
  process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #438c184c55c60b87 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.ts:70 
  proxyController.HTTP_PROXY = process.env[configuration.environmentVariableNamespace + 'HTTP_PROXY'] ?? null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13e99c67b6e65b12 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.ts:73 
  proxyController.HTTPS_PROXY = process.env[configuration.environmentVariableNamespace + 'HTTPS_PROXY'] ?? null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a2e08a5346fb277 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/factories/createGlobalProxyAgent.ts:76 
  proxyController.NO_PROXY = process.env[configuration.environmentVariableNamespace + 'NO_PROXY'] ?? null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

gray-matter

npm dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #75f5c76f6048e611 — Filesystem access.
pkgs/npm/[email protected]/index.js:3 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0d86f7e27ca7b53 — Filesystem access.
pkgs/npm/[email protected]/index.js:179 
  const str = fs.readFileSync(filepath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mammoth

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #291d9346dacbd0ac — Filesystem access.
pkgs/npm/[email protected]/lib/docx/files.js:1 
var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb00596a44bf2bad — Filesystem access.
pkgs/npm/[email protected]/lib/main.js:3 
var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4e90ccb19638f9c — Filesystem access.
pkgs/npm/[email protected]/lib/unzip.js:1 
var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

monaco-vscode-textmate-theme-converter

npm dependency
expand_more 12 low-confidence finding(s)
low env_fs dependency Excluded from app score #32d1fbc34d1a26ee — Filesystem access.
pkgs/npm/[email protected]/lib/cjs/index.js:14 
    var themeFile = fs.readFileSync(inputFilePath).toString();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cc8085d885868af — Filesystem access.
pkgs/npm/[email protected]/lib/cjs/index.js:19 
    fs.writeFileSync(outputFilePath, JSON.stringify(convertedTheme, null, 4));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9da7f9c3f63b74b2 — Filesystem access.
pkgs/npm/[email protected]/lib/cjs/index.js:36 
                    return [4 /*yield*/, fs.readFile(filePath)];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96771628d1faaf42 — Filesystem access.
pkgs/npm/[email protected]/lib/cjs/index.js:43 
                    return [4 /*yield*/, fs.writeFile(path.join(outDir, fileName), JSON.stringify(out))];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70073c63181a9d12 — Filesystem access.
pkgs/npm/[email protected]/lib/umd/index.js:23 
        var themeFile = fs.readFileSync(inputFilePath).toString();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #745b7fdd34bc481b — Filesystem access.
pkgs/npm/[email protected]/lib/umd/index.js:28 
        fs.writeFileSync(outputFilePath, JSON.stringify(convertedTheme, null, 4));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #247a19609544a6ad — Filesystem access.
pkgs/npm/[email protected]/lib/umd/index.js:45 
                        return [4 /*yield*/, fs.readFile(filePath)];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34b2842230c011f9 — Filesystem access.
pkgs/npm/[email protected]/lib/umd/index.js:52 
                        return [4 /*yield*/, fs.writeFile(path.join(outDir, fileName), JSON.stringify(out))];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #750651745c29ce06 — Filesystem access.
pkgs/npm/[email protected]/src/index.ts:15 
    let themeFile = fs.readFileSync(inputFilePath).toString();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b8a4e8ebe7afc13 — Filesystem access.
pkgs/npm/[email protected]/src/index.ts:20 
    fs.writeFileSync(outputFilePath, JSON.stringify(convertedTheme, null, 4));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2366482cc6b6d3cf — Filesystem access.
pkgs/npm/[email protected]/src/index.ts:31 
            let themeFile: string = (await fs.readFile(filePath)).toString();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a843c7dd3016749 — Filesystem access.
pkgs/npm/[email protected]/src/index.ts:36 
            await fs.writeFile(path.join(outDir, fileName), JSON.stringify(out));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

node-ipc

npm dependency
expand_more 24 low-confidence finding(s)
low env_fs dependency Excluded from app score #c98bfe37dfb69afa — Filesystem access.
pkgs/npm/[email protected]/dao/client.js:5 
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #651ad99d0b345821 — Filesystem access.
pkgs/npm/[email protected]/dao/client.js:116 
                client.config.tls.key=fs.readFileSync(client.config.tls.private);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9bd1ab66a08f0a80 — Filesystem access.
pkgs/npm/[email protected]/dao/client.js:119 
                client.config.tls.cert=fs.readFileSync(client.config.tls.public);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #723f4fdc491a70fe — Filesystem access.
pkgs/npm/[email protected]/dao/client.js:128 
                        fs.readFileSync(client.config.tls.trustedConnections[i])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca3215a5af0b67ac — Filesystem access.
pkgs/npm/[email protected]/dao/socketServer.js:4 
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b883f8535fcae51e — Filesystem access.
pkgs/npm/[email protected]/dao/socketServer.js:345 
        this.config.tls.key=fs.readFileSync(this.config.tls.private);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2c06f094e3fea1c — Filesystem access.
pkgs/npm/[email protected]/dao/socketServer.js:347 
        this.config.tls.key=fs.readFileSync(`${__dirname}/../local-node-ipc-certs/private/server.key`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afee60844c3f9202 — Filesystem access.
pkgs/npm/[email protected]/dao/socketServer.js:350 
        this.config.tls.cert=fs.readFileSync(this.config.tls.public);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #186d7a106d940e2e — Filesystem access.
pkgs/npm/[email protected]/dao/socketServer.js:352 
        this.config.tls.cert=fs.readFileSync(`${__dirname}/../local-node-ipc-certs/server.pub`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da59d1ffe333772a — Filesystem access.
pkgs/npm/[email protected]/dao/socketServer.js:355 
        this.config.tls.dhparam=fs.readFileSync(this.config.tls.dhparam);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d16a039798176d4 — Filesystem access.
pkgs/npm/[email protected]/dao/socketServer.js:364 
                fs.readFileSync(this.config.tls.trustedConnections[i])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64c97cf6830ae0ff — Filesystem access.
pkgs/npm/[email protected]/lcov.js:2 
import {writeFileSync} from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e7eb3535547282c — Filesystem access.
pkgs/npm/[email protected]/lcov.js:8 
        writeFileSync('./coverage/lcov.svg', svgBadge);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c84908f297dd77cb — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:265 
var import_fs = __toModule(require("fs"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #449236125d46ba00 — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:702 
        client.config.tls.key = import_fs.default.readFileSync(client.config.tls.private);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11def5b3148abb98 — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:705 
        client.config.tls.cert = import_fs.default.readFileSync(client.config.tls.public);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e375d76da34092f — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:713 
          client.config.tls.ca.push(import_fs.default.readFileSync(client.config.tls.trustedConnections[i]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c5afcfcd6467be26 — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:786 
var import_fs2 = __toModule(require("fs"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1217c8dc12760e56 — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:998 
    this.config.tls.key = import_fs2.default.readFileSync(this.config.tls.private);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15f42ee5939dae20 — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:1000 
    this.config.tls.key = import_fs2.default.readFileSync(`${__dirname}/../local-node-ipc-certs/private/server.key`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0117048c976a2e9 — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:1003 
    this.config.tls.cert = import_fs2.default.readFileSync(this.config.tls.public);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #789128a800fd9814 — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:1005 
    this.config.tls.cert = import_fs2.default.readFileSync(`${__dirname}/../local-node-ipc-certs/server.pub`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4ba8047db17c7a0 — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:1008 
    this.config.tls.dhparam = import_fs2.default.readFileSync(this.config.tls.dhparam);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f81aac20523cbb4 — Filesystem access.
pkgs/npm/[email protected]/node-ipc.cjs:1016 
      this.config.tls.ca.push(import_fs2.default.readFileSync(this.config.tls.trustedConnections[i]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ollama

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #d8c6f43b92e336c5 — Filesystem access.
pkgs/npm/[email protected]/src/index.ts:18 
        const fileBuffer = await promises.readFile(resolve(image))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

os-name

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #addc06af5e0222eb — Filesystem access.
pkgs/npm/[email protected]/index.js:8 
		const osRelease = fs.readFileSync('/etc/os-release', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pdf-parse

npm dependency
expand_more 9 low-confidence finding(s)
low env_fs dependency Excluded from app score #e6f530a3d64f64a2 — Filesystem access.
pkgs/npm/[email protected]/bin/cli.mjs:27 
	const pkg = JSON.parse(await readFile(new URL('../package.json', import.meta.url)));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4691fdfd05611b36 — Filesystem access.
pkgs/npm/[email protected]/bin/cli.mjs:103 
		const data = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1588f52f863eb83 — Filesystem access.
pkgs/npm/[email protected]/bin/cli.mjs:156 
		await writeFile(options.output, output);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0f7bfbad44b8b9c — Filesystem access.
pkgs/npm/[email protected]/bin/cli.mjs:167 
		await writeFile(options.output, output);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4e47863400c9746 — Filesystem access.
pkgs/npm/[email protected]/bin/cli.mjs:179 
		await writeFile(options.output, output);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d6f62df43e6215b — Filesystem access.
pkgs/npm/[email protected]/bin/cli.mjs:208 
				await writeFile(filepath, image.data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9cf2a601054070ec — Filesystem access.
pkgs/npm/[email protected]/bin/cli.mjs:278 
			await writeFile(filepath, page.data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5ff3a14975a75e36 — Filesystem access.
pkgs/npm/[email protected]/bin/cli.test.mjs:59 
	await fs.writeFile(dummyFile, 'dummy content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #364fdde742460f24 — Filesystem access.
pkgs/npm/[email protected]/bin/cli.test.mjs:90 
	await fs.writeFile(dummyFile, 'dummy content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

puppeteer-chromium-resolver

npm dependency
expand_more 7 low-confidence finding(s)
low env_fs dependency Excluded from app score #0e1523f42e7399b5 — Filesystem access.
pkgs/npm/[email protected]/lib/detect.js:1 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0808ff88ac01924e — Filesystem access.
pkgs/npm/[email protected]/lib/index.js:2 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efc5db67e9c4896c — Environment-variable access.
pkgs/npm/[email protected]/lib/index.js:18 
        const defaultHosts = process.env.PUPPETEER_DEFAULT_HOST || 'https://storage.googleapis.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d959e7ffb91030ca — Environment-variable access.
pkgs/npm/[email protected]/lib/index.js:134 
    let revision = options.revision || process.env.PUPPETEER_REVISION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cb1c94e2da827e4 — Filesystem access.
pkgs/npm/[email protected]/lib/index.js:201 
        fs.writeFileSync(statsPath, JSON.stringify(stats, null, 4));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d749c3a0a87288c4 — Filesystem access.
pkgs/npm/[email protected]/lib/index.js:213 
        stats = JSON.parse(fs.readFileSync(statsPath));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #e7337dd201898325 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/util.js:65 
            const request = isHttps ? https.request(options) : http.request(options);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

puppeteer-core

npm dependency
expand_more 43 low-confidence finding(s)
low env_fs dependency Excluded from app score #08422c712184e4e4 — Filesystem access.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:3407 
          await fileHandle.writeFile(value);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e68ae2f8d60d8040 — Filesystem access.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:9481 
          content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4c73cd10393211b — Filesystem access.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:9536 
          content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fe7a42286fd8e94 — Filesystem access.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:11665 
        await environment.value.fs.promises.writeFile(path, typedArray);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #15c961b5c6e3ad64 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23671 
    let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c783f79abdb2b8b8 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23677 
    let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #ec3dd88470d9e50b — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23687 
    let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #1a5e49268c6c830d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23693 
    let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #f510b95cdd347423 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23735 
    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5e9a7f55210d23cd — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23741 
    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #cafa478d1fc6b37d — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23748 
    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c0b3b721afd27e41 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23765 
    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5f93e892186a3456 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23775 
    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #78776fdee1dab936 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:23781 
    let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #94ff7acde3358f46 — Filesystem access.
pkgs/npm/[email protected]/lib/es5-iife/puppeteer-core-browser.js:27077 
        const fileContent = await environment.value.fs.promises.readFile(portPath, 'ascii');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f59c3a8f322aeb9 — Filesystem access.
pkgs/npm/[email protected]/lib/puppeteer/api/Frame.js:659 
                content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4521f254c1ed280d — Filesystem access.
pkgs/npm/[email protected]/lib/puppeteer/api/Frame.js:698 
                content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a43d2794b6389bb — Filesystem access.
pkgs/npm/[email protected]/lib/puppeteer/api/Page.js:835 
            await environment.value.fs.promises.writeFile(path, typedArray);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #992600d02cdadf33 — Environment-variable access.
pkgs/npm/[email protected]/lib/puppeteer/bidi/Connection.js:57 
        if (process.env['PUPPETEER_WEBDRIVER_BIDI_ONLY'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3210e15f417ee40 — Filesystem access.
pkgs/npm/[email protected]/lib/puppeteer/common/BrowserConnector.js:97 
            const fileContent = await environment.value.fs.promises.readFile(portPath, 'ascii');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #507a162741ba02ae — Filesystem access.
pkgs/npm/[email protected]/lib/puppeteer/common/util.js:163 
                await fileHandle.writeFile(value);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0e08dcd60fe2f36 — Environment-variable access.
pkgs/npm/[email protected]/lib/puppeteer/node/BrowserLauncher.js:241 
        const bidiOnly = process.env['PUPPETEER_WEBDRIVER_BIDI_ONLY'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b61191046204ce3b — Environment-variable access.
pkgs/npm/[email protected]/lib/puppeteer/node/ChromeLauncher.js:121 
        const turnOnExperimentalFeaturesForTesting = process.env['PUPPETEER_TEST_EXPERIMENTAL_CHROME_FEATURES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0cd8d159f161be23 — Environment-variable access.
pkgs/npm/[email protected]/lib/puppeteer/node/ChromeLauncher.js:191 
        if (process.env['PUPPETEER_DANGEROUS_NO_SANDBOX'] === 'true' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #fa03e9faf8804602 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:294 
  let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #781e3819d2336268 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:300 
  let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #810b051c4dd5a831 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:310 
  let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #356d397c6eec48e5 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:316 
  let r = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #3762cd166220d4a1 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:358 
  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #902a5b0b44713352 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:364 
  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #4d1837df5cb586b6 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:371 
  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #c060e9342cc9bc80 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:388 
  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #65378e827830c000 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:398 
  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #5903aea170b6d826 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/third_party/urlpattern-polyfill/urlpattern-polyfill.js:404 
  let t = new URL("https://example.com");

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #28a274def9f66a90 — Filesystem access.
pkgs/npm/[email protected]/src/api/Frame.ts:934 
      content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e8f96f5ec97343d — Filesystem access.
pkgs/npm/[email protected]/src/api/Frame.ts:1014 
      content = await environment.value.fs.promises.readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f25e3c4cd0976c4a — Filesystem access.
pkgs/npm/[email protected]/src/api/Page.ts:2462 
    await environment.value.fs.promises.writeFile(path, typedArray);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8c80ed5e5c0b9d8 — Environment-variable access.
pkgs/npm/[email protected]/src/bidi/Connection.ts:110 
    if (process.env['PUPPETEER_WEBDRIVER_BIDI_ONLY'] === 'true') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef049496e79c097c — Filesystem access.
pkgs/npm/[email protected]/src/common/BrowserConnector.ts:143 
      const fileContent = await environment.value.fs.promises.readFile(
        portPath,
        'ascii',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef221923a61c36dc — Filesystem access.
pkgs/npm/[email protected]/src/common/util.ts:220 
        await fileHandle.writeFile(value);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a839e4b6e24afda — Environment-variable access.
pkgs/npm/[email protected]/src/node/BrowserLauncher.ts:440 
    const bidiOnly = process.env['PUPPETEER_WEBDRIVER_BIDI_ONLY'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed09498d0ba0346d — Environment-variable access.
pkgs/npm/[email protected]/src/node/ChromeLauncher.ts:180 
      process.env['PUPPETEER_TEST_EXPERIMENTAL_CHROME_FEATURES'] === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a3983f8309a854a — Environment-variable access.
pkgs/npm/[email protected]/src/node/ChromeLauncher.ts:262 
      process.env['PUPPETEER_DANGEROUS_NO_SANDBOX'] === 'true' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

sanitize-filename

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs dependency Excluded from app score #1b982346d8570fc8 — Filesystem access.
pkgs/npm/[email protected]/test.js:200 
  fs.writeFile(filepath, "foobar", function(err) {
    t.ifError(err, "no error writing file");
    fs.readFile(filepath, function(err, data) {
      t.ifError(err, "no error reading file");
      t.equal(data.toString(), "foobar", "file contents equals");
      fs.unlink(filepath, function(err) {
        t.ifError(err, "no error unlinking file");
        t.end();
      });
    });
  });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d91a643c8961b34 — Filesystem access.
pkgs/npm/[email protected]/test.js:202 
    fs.readFile(filepath, function(err, data) {
      t.ifError(err, "no error reading file");
      t.equal(data.toString(), "foobar", "file contents equals");
      fs.unlink(filepath, function(err) {
        t.ifError(err, "no error unlinking file");
        t.end();
      });
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #955b055760d5fee4 — Filesystem access.
pkgs/npm/[email protected]/test.js:238 
  var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tiktoken

npm dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #9059bd8d6fda3f6b — Filesystem access.
pkgs/npm/[email protected]/lite/tiktoken.cjs:5 
const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9cc9e93529edccfa — Filesystem access.
pkgs/npm/[email protected]/lite/tiktoken.cjs:29 
    bytes = fs.readFileSync(candidate);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0628a74a69f05740 — Filesystem access.
pkgs/npm/[email protected]/tiktoken.cjs:5 
const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64be52881380d54f — Filesystem access.
pkgs/npm/[email protected]/tiktoken.cjs:29 
    bytes = fs.readFileSync(candidate);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tmp

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #f325fa8c995a11dd — Filesystem access.
pkgs/npm/[email protected]/lib/tmp.js:12 
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

undici

npm dependency
expand_more 13 low-confidence finding(s)
low env_fs dependency Excluded from app score #6e05ab12649925df — Environment-variable access.
pkgs/npm/[email protected]/lib/dispatcher/client-h1.js:67 
  const llhttpWasmData = process.env.JEST_WORKER_ID ? require('../llhttp/llhttp-wasm.js') : undefined

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #528f259cea6e1f69 — Environment-variable access.
pkgs/npm/[email protected]/lib/dispatcher/client-h1.js:74 
  if (process.env.UNDICI_NO_WASM_SIMD === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c7849b7ffb6207f — Environment-variable access.
pkgs/npm/[email protected]/lib/dispatcher/client-h1.js:76 
  } else if (process.env.UNDICI_NO_WASM_SIMD === '0') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #d0c5ab62485fcaf6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/dispatcher/client-h2.js:863 
    return session.request(headers, options)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #0425def4b7a77990 — Environment-variable access.
pkgs/npm/[email protected]/lib/dispatcher/env-http-proxy-agent.js:26 
    const HTTP_PROXY = httpProxy ?? process.env.http_proxy ?? process.env.HTTP_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61e6038e3f2700f2 — Environment-variable access.
pkgs/npm/[email protected]/lib/dispatcher/env-http-proxy-agent.js:33 
    const HTTPS_PROXY = httpsProxy ?? process.env.https_proxy ?? process.env.HTTPS_PROXY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #041451916d7e8c35 — Environment-variable access.
pkgs/npm/[email protected]/lib/dispatcher/env-http-proxy-agent.js:142 
    return process.env.no_proxy ?? process.env.NO_PROXY ?? ''

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f64665c06c51cd8a — Environment-variable access.
pkgs/npm/[email protected]/lib/mock/pending-interceptors-formatter.js:23 
        colors: !disableColors && !process.env.CI

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b03378a3dce620be — Filesystem access.
pkgs/npm/[email protected]/lib/mock/snapshot-recorder.js:424 
      const data = await readFile(resolve(path), 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8eaa1034e1fa389 — Filesystem access.
pkgs/npm/[email protected]/lib/mock/snapshot-recorder.js:470 
    await writeFile(resolvedPath, JSON.stringify(data, null, 2), { flush: true })

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b83218a74591d904 — Filesystem access.
pkgs/npm/[email protected]/scripts/strip-comments.js:7 
  ? transcode(readFileSync('./undici-fetch.js'), 'utf8', 'latin1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #fde7fb1b74e533b2 — Filesystem access.
pkgs/npm/[email protected]/scripts/strip-comments.js:8 
  : readFileSync('./undici-fetch.js')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0ef5284d06667c30 — Filesystem access.
pkgs/npm/[email protected]/scripts/strip-comments.js:10 
writeFileSync('./undici-fetch.js', buffer.toString('latin1'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

vscode-material-icons

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #14daf050946fa57b — Environment-variable access.
pkgs/npm/[email protected]__reposrc/src/app/main.ts:27 
const port = process.env.PORT || 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

web-tree-sitter

npm dependency
expand_more 16 low-confidence finding(s)
low env_fs dependency Excluded from app score #6aa1edc2a1bca659 — Filesystem access.
pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:79 
          var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff7d4ec78bba73cc — Filesystem access.
pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:83 
            var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #786c424aa32bf777 — Filesystem access.
pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:89 
            var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5da436c5182eccb7 — Filesystem access.
pkgs/npm/[email protected]/debug/web-tree-sitter.cjs:3757 
      binary2 = await fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f40f98167bca2196 — Filesystem access.
pkgs/npm/[email protected]/debug/web-tree-sitter.js:1488 
      binary2 = await fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f19272aafe34a533 — Filesystem access.
pkgs/npm/[email protected]/debug/web-tree-sitter.js:1559 
    var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8332b9e409e9aad5 — Filesystem access.
pkgs/npm/[email protected]/debug/web-tree-sitter.js:1565 
      var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e775e50f813733d7 — Filesystem access.
pkgs/npm/[email protected]/debug/web-tree-sitter.js:1571 
      var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d42b5630499fc79a — Filesystem access.
pkgs/npm/[email protected]/web-tree-sitter.cjs:70 
          var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9256e3adfb8b2f16 — Filesystem access.
pkgs/npm/[email protected]/web-tree-sitter.cjs:74 
            var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf662c7d80e75fed — Filesystem access.
pkgs/npm/[email protected]/web-tree-sitter.cjs:79 
            var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5109efebcd5696a3 — Filesystem access.
pkgs/npm/[email protected]/web-tree-sitter.cjs:3159 
      binary2 = await fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0bf016545031e0a — Filesystem access.
pkgs/npm/[email protected]/web-tree-sitter.js:1488 
      binary2 = await fs2.readFile(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c20c0182f375fe3e — Filesystem access.
pkgs/npm/[email protected]/web-tree-sitter.js:1550 
    var fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90d05b8d541cdb1b — Filesystem access.
pkgs/npm/[email protected]/web-tree-sitter.js:1556 
      var ret = fs.readFileSync(filename);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5acc7000913b0523 — Filesystem access.
pkgs/npm/[email protected]/web-tree-sitter.js:1561 
      var ret = fs.readFileSync(filename, binary2 ? void 0 : "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

zhipu-ai-provider

npm dependency
expand_more 10 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #89dc61ac9b603918 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:5 
  const value = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #417f19872d92304b — Environment-variable access.
pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:16 
  const baseURL = process.env.ZHIPU_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #64c0899228c6684c — Environment-variable access.
pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:17 
  const providerName = process.env.ZHIPU_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #7ae164456fa7e457 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:31 
  text: process.env.ZHIPU_TEXT_MODEL ?? "glm-4.7-flash",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #d795586c1f9ca67f — Environment-variable access.
pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:32 
  reasoning: process.env.ZHIPU_REASONING_MODEL ?? "glm-4.7-flash",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #571df3cd08c8cabe — Environment-variable access.
pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:33 
  vision: process.env.ZHIPU_VISION_MODEL ?? "glm-4.6v-flash",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #455ee51c4e2f7119 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:34 
  embedding: process.env.ZHIPU_EMBEDDING_MODEL ?? "embedding-3",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #f52a512691517412 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/examples/_shared.mjs:35 
  image: process.env.ZHIPU_IMAGE_MODEL ?? "glm-image",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #dadfcac7782b1415 — Environment-variable access.
pkgs/npm/[email protected]__reposrc/examples/generate-text-with-images.mjs:12 
  process.env.EXAMPLE_IMAGE_URL ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #dd7680dbf07ad6b8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]__reposrc/src/test-server.ts:51 
    http.post(url, async ({ request }) => {
      const requestBody = await request.text();
      const requestHeaders: Record<string, string> = {};
      request.headers.forEach((value, key) => {
        requestHeaders[key] = value;
      });

      let requestBodyJson: unknown;
      try {
        requestBodyJson = JSON.parse(requestBody);
      } catch (e) {
        console.error("Failed to parse request body:", requestBody);
        throw e;
      }

      const call: ServerCall = {
        requestBody,
        requestHeaders,
        requestBodyJson,
      };

      urlConfig.calls.push(call);
      allCalls.push(call);

      const response = urlConfig.response;

      if (response.type === "json-value") {
        return HttpResponse.json(response.body as Record<string, unknown>, {
          headers: response.headers,
        });
      }

      if (response.type === "stream-chunks") {
        return new Response(response.chunks.join(""), {
          headers: {
            "Content-Type": "text/event-stream",
            "Cache-Control": "no-cache",
            Connection: "keep-alive",
            ...response.headers,
          },
        });
      }

      return new Response(null, { status: 500 });
    }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

Skipped dependencies

Production

  • @lmstudio/sdk prod — dist-only: no readable source
  • @roo-code/core prod — registry 404
  • @roo-code/ipc prod — registry 404
  • partial-json prod — dist-only: no readable source
  • tree-sitter-wasms prod — no javascript source
  • hast-util-to-jsx-runtime prod — scan budget exceeded
  • i18next-http-backend prod — scan budget exceeded
  • katex prod — scan budget exceeded
  • knuth-shuffle-seeded prod — scan budget exceeded
  • lru-cache prod — scan budget exceeded
  • lucide-react prod — scan budget exceeded
  • mermaid prod — scan budget exceeded
  • react prod — scan budget exceeded
  • react-compiler-runtime prod — scan budget exceeded
  • react-dom prod — scan budget exceeded
  • react-i18next prod — scan budget exceeded
  • react-icons prod — scan budget exceeded
  • react-markdown prod — scan budget exceeded
  • react-remark prod — scan budget exceeded
  • react-textarea-autosize prod — scan budget exceeded
  • react-use prod — scan budget exceeded
  • react-virtuoso prod — scan budget exceeded
  • rehype-highlight prod — scan budget exceeded
  • rehype-katex prod — scan budget exceeded
  • remark-gfm prod — scan budget exceeded
  • remark-math prod — scan budget exceeded
  • remove-markdown prod — scan budget exceeded
  • shiki prod — scan budget exceeded
  • source-map prod — scan budget exceeded
  • stacktrace-js prod — scan budget exceeded
  • styled-components prod — scan budget exceeded
  • tailwind-merge prod — scan budget exceeded
  • tailwindcss prod — scan budget exceeded
  • tailwindcss-animate prod — scan budget exceeded
  • unist-util-visit prod — scan budget exceeded
  • use-sound prod — scan budget exceeded
  • vscrui prod — scan budget exceeded
  • @inkjs/ui prod — scan budget exceeded
  • @roo-code/vscode-shim prod — scan budget exceeded
  • @trpc/client prod — scan budget exceeded
  • @vscode/ripgrep prod — scan budget exceeded
  • commander prod — scan budget exceeded
  • cross-spawn prod — scan budget exceeded
  • fuzzysort prod — scan budget exceeded
  • ink prod — scan budget exceeded
  • superjson prod — scan budget exceeded
  • zustand prod — scan budget exceeded
  • @docusaurus/core prod — scan budget exceeded
  • @docusaurus/plugin-client-redirects prod — scan budget exceeded
  • @docusaurus/plugin-content-docs prod — scan budget exceeded
  • @docusaurus/plugin-sitemap prod — scan budget exceeded
  • @docusaurus/preset-classic prod — scan budget exceeded
  • @docusaurus/theme-common prod — scan budget exceeded
  • @easyops-cn/autocomplete.js prod — scan budget exceeded
  • @easyops-cn/docusaurus-search-local prod — scan budget exceeded
  • @mdx-js/react prod — scan budget exceeded
  • prism-react-renderer prod — scan budget exceeded