Close Open Privacy Scan

bolt Snapshot: commit da71a46
science engine v1.23
schedule 2026-07-26T12:10:34.082024+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

App Privacy Score

97 /100
Low privacy risk

Low risk · 1011 finding(s)

Based on: 1 first-party package(s) · 4/5 deps analyzed

Dependency score: 82 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 1011 low
First-party packages: 1
Dependency packages: 3
Ecosystem: python

swap_horiz External domains

aggregate.ee.engr.uky.eduapi.nuget.orgbugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcdn.mathjax.orgcens.ioc.eecrates.iodata-apis.orgdevelopers.google.comdigitalassets.lib.berkeley.edudmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.pytest.orgdocs.python.orgdocs.rsdocs.scipy.orgdoi.orgen.wikipedia.orggcc.gnu.orggithub.comgitlab.freedesktop.orggraphics.stanford.edugroups.google.comieeexplore.ieee.orgimageio.readthedocs.ioipython.orgj3-fortran.orglibsdl.orgmathworld.wolfram.commatplotlib.orgmesonbuild.commetacpan.orgnicolas.limare.netnumpy.orgnumpydoc.readthedocs.ioonnxruntime.aipackages.msys2.orgpandas.pydata.orgpeople.eecs.berkeley.edupersonal.math.ubc.capixi.shprotobuf.devpyinstaller.readthedocs.iopypi.orgpytorch.orgraw.githubusercontent.comschemas.microsoft.comscikit-image.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgsourceware.orgstackoverflow.comtruststore.readthedocs.iotyping.python.orgviews.scientific-python.orgweb.archive.orgwixtoolset.orgwrapdb.mesonbuild.comwww.ams.orgwww.ecma-international.orgwww.google.comwww.intel.comwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.oasis-open.orgwww.openblas.netwww.scipy.orgwww.stixfonts.orgwww.tensorflow.orgwww.w3.orgwww.xyz.edu

</> First-Party Code

first-party (python)

python first-party
expand_more 19 low-confidence finding(s)
low env_fs Filesystem access. 18 locations
low env_fs production #f7e5f78feaf1dcd0 capability detected · no path traced Environment-variable access.
repo/onnx/defs/gen_doc.py:24
ONNX_ML = not bool(os.getenv("ONNX_ML") == "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

numpy

python dependency
expand_more 982 low-confidence finding(s)
low env_fs Filesystem access. 618 locations
low env_fs Environment-variable access. 356 locations
low egress Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress Hardcoded external endpoint. Review what data is sent to this destination. 3 locations

protobuf

python dependency
expand_more 3 low-confidence finding(s)
low env_fs Environment-variable access. 2 locations
low env_fs dependency Excluded from app score #d8fedc3283aa7d98 capability detected · no path traced Filesystem access.
pkgs/python/[email protected]/setup.py:28
  with open(os.path.join('google', 'protobuf', '__init__.py')) as version_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • Pillow prod — sdist exceeds byte cap