Close Open Privacy Scan

link https://github.com/lobehub/lobe-chat
bolt Snapshot: commit 6c0c0a9
science engine v1.5
schedule 2026-07-15T04:15:45.679485+00:00

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

smart_toy MCP server detected: @anthropic-ai/sdk, @modelcontextprotocol/sdk, openai — detected in dependencies, not a safety judgment.
Incomplete scan — only 18/200 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

0 /100
High privacy risk — application leak confirmed

High risk · 4214 finding(s)

Dependency score: 57 (Medium risk)

bar_chart Score Breakdown

pii_flow −60
telemetry −25
egress −15
env_fs −3

list Scan Summary

79 high 34 medium 4101 low
First-party packages: 33
Dependency packages: 6
Ecosystem: npm

swap_horiz Confirmed data exfiltration in application code

External domains: 1-17-1-sandpack.codesandbox.io1.1.1.110.0.0.110.1.2.310.255.255.255169.254.169.254172.15.0.1172.16.0.1172.20.10.5172.31.255.255172.32.0.1192.167.1.1192.168.0.1192.168.1.1192.168.1.256192.168.255.255192.169.1.1256.256.256.256302.ai8.8.8.8a.comabc.comagent-gateway.lobehub.comai-gateway.vercel.shai-userxxxxxxxxxx.services.ai.azure.comai.360.cnai.360.comai.azure.comai.gitee.comai.google.devai.meta.comaiart.tencent.comaihubmix.comalipaytbox.yuque.comanalytics.umami.isanother.comanthropic.comapi-data.line.meapi-inference.modelscope.cnapi.302.aiapi.360.cnapi.abc.comapi.ai21.comapi.anthropic.comapi.anthropic.proxyapi.baichuan-ai.comapi.bfl.aiapi.bochaai.comapi.cerebras.aiapi.cloudai.tencent.comapi.cloudflare.comapi.codesandbox.ioapi.cohere.aiapi.cohere.comapi.comapi.cometapi.comapi.custom.comapi.deepseek.comapi.exa.aiapi.firecrawl.devapi.fireworks.aiapi.github.comapi.githubcopilot.comapi.groq.comapi.kimi.comapi.line.meapi.lingyiwanwu.comapi.lkeap.cloud.tencent.comapi.longcat.chatapi.minimax.ioapi.minimaxi.comapi.mistral.aiapi.moonshot.cnapi.newapi.comapi.novita.aiapi.openai.comapi.perplexity.aiapi.ppinfra.comapi.replicate.comapi.sambanova.aiapi.search.brave.comapi.search1api.comapi.sgroup.qq.comapi.siliconflow.cnapi.slack.comapi.stepfun.comapi.straico.comapi.studio.nebius.comapi.tavily.comapi.tbox.cnapi.telegram.orgapi.test.comapi.together.xyzapi.upstage.aiapi.v0.devapi.x.aiapi.xiaomimimo.comapig.console.aliyun.comapp.composio.devapp.lobehub.comapp.posthog.comapp.test.comark.ap-southeast.bytepluses.comark.cn-beijing.volces.comarxiv.orgauthauth.x.aiavatar.urlavatars0.githubusercontent.comazure.microsoft.comb.combackend.composio.devbad-url.combaijiahao.baidu.combaike.baidu.combedrock-runtimebedrock-runtime-fipsbfl.aibiz.finance.sina.com.cnbluebubbles.appbots.qq.combuild.nvidia.comcdncdn.discordapp.comcdn.examplecdn.hailuoai.comcdn.jsdelivr.netcdn.minimax.comcdn.openai.comcdn.qwen.comcdn.siliconcloud.cncdn.tailwindcss.comcdn.wenxin.comcdn.x.aicdn.zhipu.aicerebras.aichaoyu.bisu.edu.cnchat-plugins.lobehub.comchat-preview.lobehub.comchat.intern-ai.org.cnchatapi.akash.networkchatgpt.comchrome.browserless.iocitation.comclaude.aicloud.baidu.comcloud.google.comcloud.infini-ai.comcloud.langfuse.comcloud.lobehub.comcloud.sambanova.aicloud.tencent.comcloud.zidongtaichu.comcm.cau.edu.cncodesandbox.iocoding.dashscope.aliyuncs.comcohere.comcometapi.comcomposio.devconsole.bce.baidu.comconsole.cloud.google.comconsole.cloud.tencent.comconsole.groq.comcustomcustom-api.bfl.aicustom-azure.openai.azure.comcustom-comfyuicustom-endpoint.comcustom-ollamacustom-proxy.new-api.comcustom.api.comcustom.baidubce.comcustom.cloudflare.urlcustom.cohere.aicustom.comcustom.mocked.urlcustom.modelscope.cncustom.ollama.comcustom.openrouter.aicustom.spark.comcustom.urlcvpr.thecvf.comdashboard.composio.devdashscope-intl.aliyuncs.comdashscope.aliyuncs.comdashscope.oss-cn-beijing.aliyuncs.comdatatracker.ietf.orgdeepsearch.jina.aideepseek.comdemo.comdeveloper.mozilla.orgdeveloper.qiniu.comdevelopers.cloudflare.comdevelopers.line.bizdevelopers.openai.comdevelopers.upstage.aidevice-gateway.lobehub.comdiscord.comdiscord.ggdiscord.js.orgdocs.ai21.comdocs.aihubmix.comdocs.anthropic.comdocs.aws.amazon.comdocs.cohere.comdocs.composio.devdocs.expo.devdocs.mistral.aidocs.perplexity.aidocs.together.aidocs.vllm.aidocs.x.aidocs.z.aie.comethereal.emailexample1.comexample2.comexample3.comfailed.comfal.aifallback-endpoint.comfiles.examplefiles.slack.comfireworks.aifirst.comfist.xjtu.edu.cnfonts.googleapis.comfonts.gstatic.comgateway.ai.cloudflare.comgateway.test.comgenerativelanguage.googleapis.comgithub.comgitlab.comgroq.comgw.test.comhello.mockhelp.aliyun.comhigress.cnhooks.slack.comhttpbin.orghub-apac-1.lobeobjects.spacehuggingface.cohunyuan.tencent.comhyimg.tencentmaas.comi.redd.iticons.duckduckgo.comilinkai.weixin.qq.comimg.pnginference-docs.cerebras.aiinference.readthedocs.iointegrate.api.nvidia.cominternlm.intern-ai.org.cninvalid-url.comissuer.comjina.aikagi.comlearn.microsoft.comlinear.appling.tbox.cnlmstudio.ailobe.lilobechat.comlobehub.comlocal.filelongcat.chatm.mp.oeeee.comm.thepaper.cnmarket.lobehub.commedia.discordapp.netmedium.commetadata.google.internalminimax-cdn.commistral.aiml.azure.commodels.devmodels.github.aimodelscope.cnmoment.rednet.cnmultimedia.nt.qq.com.cnmy-aihubmix-mirror.commy-azure.openai.azure.commy-server.commyapp.commyresource.cognitiveservices.azure.comnebius.comnew-avatar.comnew.qq.comnextra.vercel.appnovac2c.cdn.weixin.qq.comnovita.ainpmmirror.comoaidalleapiprodscus.blob.core.windows.netollama.comopen.bigmodel.cnopen.feishu.cnopen.larksuite.comopenai.comopenai.qiniu.comopencode.aiopenrouter.aip4-fdl.klingai.compinchwork.devplacekitten.complatform.baichuan-ai.complatform.claude.complatform.deepseek.complatform.lingyiwanwu.complatform.minimax.ioplatform.minimaxi.complatform.moonshot.aiplatform.openai.complatform.sensenova.cnplatform.stepfun.complatform.xiaomimimo.complausible.ioplay.google.complugin.anspire.cnppinfra.compreview-url.vercel.apppreview.sandpack-static-server.codesandbox.ioq.qq.comqianfan-img-gen.bj.bcebos.comqianfan-model.bj.bcebos.comqianfan.baidubce.comqstash-eu-central-1.upstash.ioqstash.upstash.iorr.jina.air.jinaai.cnraw.githubusercontent.comregistry.npmjs.orgregistry.npmmirror.comreplicate.comresult1.comresult2.comrlzy.gdufe.edu.cnrouter.huggingface.coss.jina.ais.jinaai.cns3s3-fipss3-fips.dualstacks3-fips.dualstack.us-east-1s3-fips.us-east-1s3-object-lambdas3-object-lambda-fipss3.amazonaws.coms3.dualstacks3.dualstack.us-east-1s3express-controlsandbox.api.sgroup.qq.comsandpack-bundler.codesandbox.iosandpack.codesandbox.ioscribe.ripsecond.comself-hosted.examplesignedsiliconflow.cnslack.comsogou.comsource1.comsource2.comspace.bilibili.comspark-api-open.xf-yun.comstepfun.comstorage.googleapis.comstraico.comstudio.ai21.comstudio.nebius.comsuccess1.comsuccess2.comt.metech.sina.cntelemetry.composio.devtest-azure.openai.azure.comtest-ollama-url.localtest-searxng.comtest.azure.comtest.cognitiveservices.azure.comtest.comtest.openai.azure.comtest.unstructured.iotest1.comtest2.comtestflight.apple.comthird.comtianqi.moji.comtianqi.so.comtoken.sensenova.cntokenhub.tencentmaas.comunknown-endpoint.comunpkg.comupstage.aiuse-for-dev.r2.cloudflarestorage.comuser-azure.openai.azure.comuser-ollama-urlv.qq.comv0.devvalid.comvercel.comvertex-endpoint.comvertexaisearch.cloud.google.comwallstreetcn.comwanqing.streamlakeapi.comweather.cma.cnwenxin.comwizardforcel.gitbooks.ioworkflow-run-guard.localwww.36kr.comwww.accuweather.comwww.aliyun.comwww.bilibili.comwww.bing.comwww.chinanews.comwww.chinanews.com.cnwww.comfy.orgwww.douyin.comwww.example.co.ukwww.gks.mof.gov.cnwww.google.comwww.googleapis.comwww.hzqx.comwww.lingyiwanwu.comwww.minimaxi.comwww.mnw.cnwww.moonshot.aiwww.perplexity.aiwww.qiniu.comwww.qiumiwu.comwww.reddit.comwww.search1api.comwww.sensenova.cnwww.streamlake.comwww.thepaper.cnwww.together.aiwww.volcengine.comwww.w3.orgwww.weather.com.cnwww.xfyun.cnwww.youtube.comwww.zhihu.comxx.aix.comxai-cdn.comxinghuo.xfyun.cnxywctu-4000.preview.csb.appyour-proxy-url.comyour-resource.cognitiveservices.azure.comyour-server.comyour.new-api-provider.comyourapi.cnz.aizenmux.aizh.m.wikipedia.orgzh.numberempire.comzh.wikipedia.orgzhipuai.cnzhuanlan.zhihu.com

high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/docsWorkflow/utils.ts:87 → repo/scripts/docsWorkflow/utils.ts:96
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:131 → repo/scripts/serverLauncher/startServer.js:141
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:168 → repo/scripts/serverLauncher/startServer.js:185
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 → repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185
high first-party (npm) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/layout/AuthProvider/MarketAuth/oidc.ts:142 → repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:151
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:184
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:24 → repo/apps/server/src/modules/GitHub/index.ts:210
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:79
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:171
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:535
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:589
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:15 → repo/apps/server/src/routers/lambda/market/agent.ts:647
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:71
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:262
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:336
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:424
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:482
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:565
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:652
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → repo/apps/server/src/routers/lambda/market/agentGroup.ts:810
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:62
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:88
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:141
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → repo/apps/server/src/routers/lambda/market/socialProfile.ts:195
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → repo/apps/server/src/services/bot/BotMessageRouter.ts:767
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/platforms/discord/api.ts:90 → repo/apps/server/src/services/bot/platforms/discord/api.ts:90
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:54
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:92
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:34 → repo/apps/server/src/services/changelog/index.ts:207
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/desktopRelease/index.ts:120 → repo/apps/server/src/services/desktopRelease/index.ts:122
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:13 → repo/apps/server/src/services/market/index.ts:210
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:13 → repo/apps/server/src/services/market/index.ts:708
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 → repo/apps/server/src/services/oauthDeviceFlow/index.ts:105
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 → repo/apps/server/src/services/oauthDeviceFlow/index.ts:169
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 → repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/anspire/index.ts:74 → repo/apps/server/src/services/search/impls/anspire/index.ts:71
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/bocha/index.ts:64 → repo/apps/server/src/services/search/impls/bocha/index.ts:61
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/brave/index.ts:70 → repo/apps/server/src/services/search/impls/brave/index.ts:66
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/exa/index.ts:69 → repo/apps/server/src/services/search/impls/exa/index.ts:65
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:69 → repo/apps/server/src/services/search/impls/firecrawl/index.ts:66
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/jina/index.ts:48 → repo/apps/server/src/services/search/impls/jina/index.ts:44
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/kagi/index.ts:52 → repo/apps/server/src/services/search/impls/kagi/index.ts:50
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/search1api/index.ts:85 → repo/apps/server/src/services/search/impls/search1api/index.ts:82
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/tavily/index.ts:40 → repo/apps/server/src/services/search/impls/tavily/index.ts:60
high first-party (npm): apps/server User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/workflows/runGuard/qstashCancel.ts:79 → repo/apps/server/src/workflows/runGuard/qstashCancel.ts:93
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/browserless.ts:10 → repo/packages/web-crawler/src/crawImpl/browserless.ts:42
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/exa.ts:25 → repo/packages/web-crawler/src/crawImpl/exa.ts:32
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 → repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/jina.ts:11 → repo/packages/web-crawler/src/crawImpl/jina.ts:17
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/search1api.ts:19 → repo/packages/web-crawler/src/crawImpl/search1api.ts:26
high first-party (npm): packages/web-crawler User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/tavily.ts:26 → repo/packages/web-crawler/src/crawImpl/tavily.ts:33
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:51 → repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:167 → repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:163 → repo/packages/model-runtime/src/providers/aihubmix/index.ts:181
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/azureai/index.ts:33 → repo/packages/model-runtime/src/providers/azureai/index.ts:67
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:125 → repo/packages/model-runtime/src/providers/bfl/createImage.ts:121
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:161 → repo/packages/model-runtime/src/providers/bfl/createImage.ts:158
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → repo/packages/model-runtime/src/providers/cloudflare/index.ts:93
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → repo/packages/model-runtime/src/providers/cloudflare/index.ts:156
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/comfyui/index.ts:77 → repo/packages/model-runtime/src/providers/comfyui/index.ts:101
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/google/index.ts:135 → repo/packages/model-runtime/src/providers/google/index.ts:471
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:55 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:78 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:177 → repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/nebius/index.ts:34 → repo/packages/model-runtime/src/providers/nebius/index.ts:31
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:41 → repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:126 → repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/straico/index.ts:46 → repo/packages/model-runtime/src/providers/straico/index.ts:44
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:78 → repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:37 → repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:137 → repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:35 → repo/packages/model-runtime/src/providers/xai/createVideo.ts:33
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:127 → repo/packages/model-runtime/src/providers/xai/createVideo.ts:124
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:39 → repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:134 → repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:41 → repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:147 → repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144
high first-party (npm): packages/model-runtime User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/index.ts:222 → repo/packages/model-runtime/src/providers/zhipu/index.ts:220
medium first-party (npm): apps/server Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → repo/apps/server/src/services/bot/BotMessageRouter.ts:767

</> First-Party Code

first-party (npm): apps/server

npm first-party
high pii_flow production #47e9c006b6af0cd6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:151 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/modules/GitHub/index.ts:151 
    const response = await fetch(zipUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #1481fcd382230cd9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:184 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/modules/GitHub/index.ts:184 
    const response = await fetch(rawUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #23243dcfb1241467 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/modules/GitHub/index.ts:210 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/modules/GitHub/index.ts:24 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/modules/GitHub/index.ts:210 
    const response = await fetch(rawUrl, {
      headers: {
        'User-Agent': this.userAgent,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #161f3bee96a55706 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:79 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agent.ts:79 
    const response = await fetch(userInfoUrl, {
      headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #09048f621bee92ee — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:171 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agent.ts:171 
    const response = await fetch(forkUrl, {
      body: JSON.stringify({
        identifier: item.identifier,
        name: item.name,
        status: item.status,
        versionNumber: item.versionNumber,
        visibility: item.visibility,
      }),
      headers,
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b9f93469f9b3c948 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:535 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agent.ts:535 
        const response = await fetch(url, { headers, method: 'GET' });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #27a5650055f52151 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:589 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agent.ts:589 
        const response = await fetch(forkSourceUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cd3c7cdd19b5cbbb — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agent.ts:647 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agent.ts:15 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agent.ts:647 
        const response = await fetch(forksUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cd9f2b099f54e7e0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:71 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:71 
    const response = await fetch(userInfoUrl, {
      headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #09744c5fc90c846d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:262 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:262 
        const response = await fetch(deprecateUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7aedb31ba1f64b27 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:336 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:336 
        const response = await fetch(forkUrl, {
          body: JSON.stringify({
            identifier: input.identifier,
            name: input.name,
            status: input.status,
            versionNumber: input.versionNumber,
            visibility: input.visibility,
          }),
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e65acbf1d2a6f3b5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:424 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:424 
        const response = await fetch(forkSourceUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d225acb34b37eadf — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:482 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:482 
        const response = await fetch(forksUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #9ebd9a51f0182858 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:565 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:565 
        const response = await fetch(listUrl, {
          headers,
          method: 'GET',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #4d486412ffd48d64 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:652 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:652 
        const response = await fetch(publishUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #71efd462008037bc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:810 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/agentGroup.ts:810 
        const response = await fetch(unpublishUrl, {
          headers,
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3708f660cdaf0022 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:62 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/socialProfile.ts:62 
            const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims`, {
              body: JSON.stringify({
                assetId: Number(skillId),
                assetType: 'skill',
              }),
              headers: {
                ...headers,
                'Content-Type': 'application/json',
              },
              method: 'POST',
            });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #24c64be2a1091576 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:88 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/socialProfile.ts:88 
            const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims`, {
              body: JSON.stringify({
                assetId: Number(pluginId),
                assetType: 'plugin',
              }),
              headers: {
                ...headers,
                'Content-Type': 'application/json',
              },
              method: 'POST',
            });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #75d3acb8b1a2c8fc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:141 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/socialProfile.ts:141 
      const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims/scan`, {
        headers,
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ec7b055093429ecc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:195 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/routers/lambda/market/socialProfile.ts:195 
        const response = await fetch(`${MARKET_BASE_URL}/api/v1/user/claims/submit-repo`, {
          body: JSON.stringify({
            branch: input.branch,
            gitUrl: input.gitUrl,
            type: input.type,
          }),
          headers: {
            ...headers,
            'Content-Type': 'application/json',
            ...(input.actAs === undefined
              ? {}
              : { 'x-lobe-owner-account-id': String(input.actAs) }),
          },
          method: 'POST',
        });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #df67ccc16309ca50 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:767 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/bot/BotMessageRouter.ts:767 
        await thread.post(text);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #469c92ae7005f218 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/bot/platforms/discord/api.ts:90 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/bot/platforms/discord/api.ts:90 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/bot/platforms/discord/api.ts:90 
    const data = (await this.rest.post(Routes.userChannels(), {
      body: { recipient_id: recipientId },
    })) as { id: string };

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7682de2bbbe57437 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:54 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/changelog/index.ts:54 
      const res = await fetch(url, {
        next: { revalidate: 3600, tags: [FetchCacheTag.Changelog] },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7b1033cca80c60be — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:92 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/changelog/index.ts:92 
      const response = await fetch(url, {
        next: { revalidate: 3600, tags: [FetchCacheTag.Changelog] },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e36c1c008d50f8ad — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/changelog/index.ts:207 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/changelog/index.ts:34 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/changelog/index.ts:207 
        const res = await fetch(url);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #23fd3813b04ffaea — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/desktopRelease/index.ts:122 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/desktopRelease/index.ts:120 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/desktopRelease/index.ts:122 
  const res = await fetch(`https://api.github.com/repos/${owner}/${repo}/releases/latest`, {
    headers: {
      ...(token ? { Authorization: `Bearer ${token}` } : {}),
      'Accept': 'application/vnd.github+json',
      'User-Agent': 'lobehub-server',
    },
    next: { revalidate: 300, tags: [FetchCacheTag.DesktopRelease] },
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2bbed9a0c820e29a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:210 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/market/index.ts:13 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/market/index.ts:210 
    const response = await fetch(userInfoUrl, {
      // @ts-ignore
      headers: this.market.headers,
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c042f0c2e6edb233 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/market/index.ts:708 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/market/index.ts:13 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/market/index.ts:708 
    const response = await fetch(uploadUrl, {
      body: formData,
      headers: authHeaders,
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ac041f3c4c867e23 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/oauthDeviceFlow/index.ts:105 
    const response = await fetch(config.tokenEndpoint, {
      body: new URLSearchParams({
        client_id: config.clientId,
        device_code: deviceCode,
        grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
      }).toString(),
      headers: {
        'Accept': 'application/json',
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #db7757140cc643c6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/oauthDeviceFlow/index.ts:169 
    const response = await fetch(config.tokenEndpoint, {
      body: new URLSearchParams({
        client_id: config.clientId,
        grant_type: 'refresh_token',
        refresh_token: refreshToken,
      }).toString(),
      headers: {
        'Accept': 'application/json',
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8d29eeb4a2b01584 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/oauthDeviceFlow/providers/githubCopilot.ts:55 
    const response = await fetch(GithubCopilotOAuthService.TOKEN_EXCHANGE_URL, {
      headers: {
        'Accept': 'application/json',
        'Authorization': `token ${oauthToken}`,
        'User-Agent': 'LobeChat/1.0',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cacaff04b73ce96e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/anspire/index.ts:71 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/anspire/index.ts:74 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/anspire/index.ts:71 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          'Accept': '*/*',
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Connection': 'keep-alive ',
          'Content-Type': 'application/json',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a69b3fb6ba62cc37 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/bocha/index.ts:61 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/bocha/index.ts:64 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/bocha/index.ts:61 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5d62f6722a8270cc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/brave/index.ts:66 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/brave/index.ts:70 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/brave/index.ts:66 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          'Accept': 'application/json',
          'Accept-Encoding': 'gzip',
          'X-Subscription-Token': this.apiKey ? this.apiKey : '',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a796de96e572ec4e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/exa/index.ts:65 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/exa/index.ts:69 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/exa/index.ts:65 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Content-Type': 'application/json',
          'x-api-key': this.apiKey ? this.apiKey : '',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #32932240fe6582de — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:66 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/firecrawl/index.ts:69 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/firecrawl/index.ts:66 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cc19995403dee185 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/jina/index.ts:44 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/jina/index.ts:48 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/jina/index.ts:44 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Accept': 'application/json',
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
          'X-Respond-With': 'no-content',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #758d75e265c4ea16 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/kagi/index.ts:50 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/kagi/index.ts:52 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/kagi/index.ts:50 
      response = await fetch(`${endpoint}?${searchParams.toString()}`, {
        headers: {
          Authorization: this.apiKey ? `Bot ${this.apiKey}` : '',
        },
        method: 'GET',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #4f6e210d9874c45b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/search1api/index.ts:82 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/search1api/index.ts:85 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/search1api/index.ts:82 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #fadeb3de20b13ad0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/services/search/impls/tavily/index.ts:60 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/tavily/index.ts:40 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/search/impls/tavily/index.ts:60 
      response = await fetch(endpoint, {
        body: JSON.stringify(body),
        headers: {
          'Authorization': this.apiKey ? `Bearer ${this.apiKey}` : '',
          'Content-Type': 'application/json',
        },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a055eb93a3ce1e04 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/apps/server/src/workflows/runGuard/qstashCancel.ts:93 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/workflows/runGuard/qstashCancel.ts:79 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/workflows/runGuard/qstashCancel.ts:93 
  const response = await fetch(new URL('/v2/workflows/runs', qstashUrl), {
    body: JSON.stringify({ workflowUrl: [workflowUrlPrefix] }),
    headers: {
      'Authorization': `Bearer ${token}`,
      'Content-Type': 'application/json',
    },
    method: 'DELETE',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium pii_flow production #b673843fa2f61867 — Credentials parsed from the request URL are applied as authorization on the same outbound HTTP request. This is intentional URL authentication, not unexpected data exfiltration.
repo/apps/server/src/services/bot/BotMessageRouter.ts:767 · flow /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/bot/BotMessageRouter.ts:749 → /tmp/closeopen-g59q7b0s/repo/apps/server/src/services/bot/BotMessageRouter.ts:767 
        await thread.post(text);

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #5078d3342bdb19c3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/apps/server/src/services/user/index.ts:45 
    analytics?.track({
      name: 'user_register_completed',
      properties: {
        spm: 'user_service.init_user.user_created',
      },
      userId: user.id,
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 288 low-confidence finding(s)
low env_fs production #100b3d552a6fa506 — Environment-variable access.
repo/apps/server/src/agent-hono/handlers/finalizeAbandoned.ts:67 
      if (process.env.QSTASH_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6aa410dd3f0f573b — Environment-variable access.
repo/apps/server/src/agent-hono/handlers/gatewayCron.ts:42 
    appUrl: process.env.APP_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46057eb4bb577431 — Environment-variable access.
repo/apps/server/src/agent-hono/handlers/gatewayCron.ts:191 
  if (process.env.MESSAGE_GATEWAY_URL && process.env.MESSAGE_GATEWAY_SERVICE_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0eafe4d83484142 — Environment-variable access.
repo/apps/server/src/agent-hono/index.ts:55 
  bearerSecretAuth(() => process.env.CRON_SECRET),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34498b6b31efa57d — Environment-variable access.
repo/apps/server/src/agent-hono/index.ts:62 
  bearerSecretAuth(() => process.env.KEY_VAULTS_SECRET),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #daa95526a454fbc1 — Environment-variable access.
repo/apps/server/src/agent-hono/middlewares/qstashOrApiKeyAuth.ts:28 
  const apiKey = process.env.AGENT_EXEC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7da3c8ff5c86311c — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:39 
        delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c76a762284b5547 — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:100 
    process.env.OPENAI_MODEL_LIST = '+gpt-4,+gpt-3.5-turbo';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6180282da1985d2 — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:118 
    process.env.CUSTOM_OPENAI_MODELS = '+custom-model';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32678dbdb169656e — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.test.ts:134 
    process.env.OPENAI_MODEL_LIST = '+gpt-4->deployment1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e84e50b96918698c — Environment-variable access.
repo/apps/server/src/globalConfig/genServerAiProviderConfig.ts:47 
        process.env[providerConfig.modelListKey ?? `${providerUpperCase}_MODEL_LIST`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6167014efe99fcb1 — Environment-variable access.
repo/apps/server/src/globalConfig/index.ts:64 
      fetchOnClient: isDesktop ? false : !process.env.OLLAMA_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #639121fb4dce0a75 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:7 
const originalWorkflowParallelism = process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c43617878662764 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:12 
      delete process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #324b1cbdb40af26d — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:16 
    process.env[WORKFLOW_PARALLELISM_ENV] = originalWorkflowParallelism;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83ddf6db1f6e408b — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:20 
    delete process.env[WORKFLOW_PARALLELISM_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c3f7bec329d010a — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:26 
    process.env[WORKFLOW_PARALLELISM_ENV] = '17';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45a8b84ea45f8c47 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:32 
    process.env[WORKFLOW_PARALLELISM_ENV] = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c522d2593e0352e — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.test.ts:36 
    process.env[WORKFLOW_PARALLELISM_ENV] = 'abc';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce419e5b54a3b5cf — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:107 
  const apiKey = process.env.MEMORY_USER_MEMORY_GATEKEEPER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e847ca18612e6cc — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:108 
  const baseURL = process.env.MEMORY_USER_MEMORY_GATEKEEPER_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #15f6479fd52d9ae4 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:109 
  const model = process.env.MEMORY_USER_MEMORY_GATEKEEPER_MODEL || DEFAULT_MINI_MODEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bbb225dd44d0624 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:110 
  const provider = process.env.MEMORY_USER_MEMORY_GATEKEEPER_PROVIDER || DEFAULT_MINI_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #952f3d7ad064bd92 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:111 
  const language = process.env.MEMORY_USER_MEMORY_GATEKEEPER_LANGUAGE || 'English';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #348a7831f4579526 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:123 
  const model = process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_MODEL || fallback.model;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8772cc8aa874f0a — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:125 
    process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8c14426c139e62c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:130 
    apiKey: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_API_KEY ?? fallback.apiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b6787f857b9fd14 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:131 
    baseURL: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_BASE_URL ?? fallback.baseURL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc587652521876e3 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:132 
    language: process.env.MEMORY_USER_MEMORY_BENCHMARK_LOCOMO_AGENT_LANGUAGE ?? fallback.language,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6536e68487e470a — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:139 
  const apiKey = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ec2c1175d2a9447 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:140 
  const baseURL = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af3c94c158aed049 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:141 
  const model = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_MODEL || fallbackModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66ab4d6c2ddfb600 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:142 
  const provider = process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PROVIDER || DEFAULT_MINI_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #317e823f0f964ed4 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:145 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_CONTEXT_LIMIT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1285dc735ae7c822 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:151 
      const override = (process.env as Record<string, string | undefined>)[envKey];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dadd6968275421de — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:176 
  const model = process.env.MEMORY_USER_MEMORY_EMBEDDING_MODEL || fallbackModel || defaultModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #468bf7aa67bff0d4 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:178 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be4a26a7e0c51ec5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:184 
    apiKey: process.env.MEMORY_USER_MEMORY_EMBEDDING_API_KEY ?? fallbackApiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ed9edfcac04fb70 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:185 
    baseURL: process.env.MEMORY_USER_MEMORY_EMBEDDING_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfd89483b490396d — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:188 
    contextLimit: parseTokenLimitEnv(process.env.MEMORY_USER_MEMORY_EMBEDDING_CONTEXT_LIMIT),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48be63ebcd52c495 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:199 
  const model = process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_MODEL || fallbackModel;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eeb3f65bc456460c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:201 
    process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_PROVIDER ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59e65f3e3d074a91 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:206 
    apiKey: process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_API_KEY ?? fallbackApiKey,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #822189467d11fbe8 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:207 
    baseURL: process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #966ec40046774435 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:209 
    contextLimit: parseTokenLimitEnv(process.env.MEMORY_USER_MEMORY_PERSONA_WRITER_CONTEXT_LIMIT),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e575d2ea499ede6 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:216 
  const accessKeyId = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_ACCESS_KEY_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #365d418e5b4b67a2 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:217 
  const secretAccessKey = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_SECRET_ACCESS_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f6179187bf190fc — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:218 
  const bucketName = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_BUCKET_NAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cf6ad0074722124 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:219 
  const region = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_REGION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94417c7aa55d8f29 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:220 
  const endpoint = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f82ce497cca22ac — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:221 
  const forcePathStyle = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_FORCE_PATH_STYLE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0410b1d5690007c4 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:222 
  const pathPrefix = process.env.MEMORY_USER_MEMORY_EXTRACTOR_S3_PATH_PREFIX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63d1bbc073ef5fc2 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:268 
    enableBenchmarkLoCoMo: process.env.MEMORY_USER_MEMORY_FEATURE_FLAG_BENCHMARK_LOCOMO === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7478570a16bb3957 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:270 
  const concurrencyRaw = process.env.MEMORY_USER_MEMORY_CONCURRENCY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63ecb44d267fbf1c — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:278 
    process.env.MEMORY_USER_MEMORY_WORKFLOW_PROCESS_USER_TOPICS_PARALLELISM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #697f9be6efbb6ca4 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:282 
    process.env.MEMORY_USER_MEMORY_WORKFLOW_MAX_TOPICS_PER_USER_PER_RUN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d4e9010f5dca721 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:286 
  const whitelistUsers = process.env.MEMORY_USER_MEMORY_WHITELIST_USERS?.split(',')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df7cf5b76f6a80aa — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:290 
  const webhookHeaders = process.env.MEMORY_USER_MEMORY_WEBHOOK_HEADERS?.split(',')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca184456e94f9aa7 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:300 
  const upstashWorkflowExtraHeaders = process.env.MEMORY_USER_MEMORY_WORKFLOW_EXTRA_HEADERS?.split(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3016674128b1e7d5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:313 
    process.env.MEMORY_USER_MEMORY_GATEKEEPER_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5b4a65680091e9b — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:316 
    process.env.MEMORY_USER_MEMORY_GATEKEEPER_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c10e3455fc244f12 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:319 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e75aec76ede1ff5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:322 
    process.env.MEMORY_USER_MEMORY_EMBEDDING_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8285a94e2484900 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:325 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PREFERRED_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c30c250cde17763 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:328 
    process.env.MEMORY_USER_MEMORY_LAYER_EXTRACTOR_PREFERRED_MODELS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84ef4ad4b5251ae5 — Environment-variable access.
repo/apps/server/src/globalConfig/parseMemoryExtractionConfig.ts:348 
      baseUrl: process.env.MEMORY_USER_MEMORY_WEBHOOK_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdbb7fb8dc309c92 — Environment-variable access.
repo/apps/server/src/hono/dev.ts:6 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf62ec7ad1b38f14 — Environment-variable access.
repo/apps/server/src/hono/dev.ts:31 
(process.env as Record<string, string | undefined>).NODE_ENV ||= 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eda46457b3d67918 — Environment-variable access.
repo/apps/server/src/hono/standalone.ts:15 
  const parsed = Number.parseInt(process.env.HONO_PORT ?? process.env.PORT ?? '', 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5315f74ae13ba65 — Environment-variable access.
repo/apps/server/src/hono/standalone.ts:72 
const host = process.env.HONO_HOST || DEFAULT_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9bb10e472aa07ef — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:12 
    originalSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5eb25392cef09e8 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:13 
    process.env.KEY_VAULTS_SECRET = 'Q10pwdq00KXUu9R+c8A8p4PSlIRWi7KwgUophBtkHVk=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd620c8b068fd10f — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:19 
    process.env.KEY_VAULTS_SECRET = originalSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2510894e3284970 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:41 
    process.env.KEY_VAULTS_SECRET = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c46741d32ca116b8 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:52 
    process.env.KEY_VAULTS_SECRET = Buffer.from('short').toString('base64');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76015d306b6dc775 — Environment-variable access.
repo/apps/server/src/modules/KeyVaultsEncrypt/index.test.ts:86 
      process.env.KEY_VAULTS_SECRET = 'ofQiJCXLF8mYemwfMWLOHoHimlPu91YmLfU7YZ4lreQ=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86405d271a909ea9 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:36 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c442fa2b02a13cac — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:44 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e79ca6aa5ce77df4 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:61 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27fbc7a1acc86a74 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:72 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efc9dc668822bd48 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:95 
      process.env.API_KEY_SELECT_MODE = 'random';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f2bac509c999217 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:107 
      process.env.API_KEY_SELECT_MODE = 'turn';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b076d40a0c1b5353 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/apiKeyManager.test.ts:120 
      process.env.API_KEY_SELECT_MODE = nanoid();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4b159e08ba93cdc — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.test.ts:504 
      process.env.OPENAI_PROXY_URL = 'https://proxy.example.com/v1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f54f6d12f71f501 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.test.ts:514 
      process.env.OPENAI_PROXY_URL = 'https://proxy.example.com/v1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9a3a890c555d51d — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:202 
      const baseURL = payload?.baseURL || process.env[`${upperProvider}_PROXY_URL`];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #338b6d91a5c38840 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:208 
      const baseURL = payload?.baseURL || process.env.OLLAMA_PROXY_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d1672fa2b113665 — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:354 
  const rawCredentials = payload.apiKey || process.env.VERTEXAI_CREDENTIALS || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cc9a47f93d6dcfe — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:359 
  const projectFromEnv = process.env.VERTEXAI_PROJECT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a37926135d4e51a — Environment-variable access.
repo/apps/server/src/modules/ModelRuntime/index.ts:365 
    process.env.VERTEXAI_LOCATION ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #80ee30b174fae43f — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:173 
      const originalEnv = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5a4ee970cf6ec66b — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:174 
      process.env.VERCEL_AUTOMATION_BYPASS_SECRET = 'test-bypass-value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6f363f5df31fb277 — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:186 
        process.env.VERCEL_AUTOMATION_BYPASS_SECRET = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5588949f0c4bf1cc — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:188 
        delete process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1cb128254959880c — Environment-variable access.
repo/apps/server/src/routers/async/__tests__/caller.test.ts:193 
      delete process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9079812d8de9edcf — Environment-variable access.
repo/apps/server/src/routers/async/caller.ts:22 
  if (process.env.VERCEL_AUTOMATION_BYPASS_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28fffea9f9e0cd92 — Environment-variable access.
repo/apps/server/src/routers/async/caller.ts:23 
    headers['x-vercel-protection-bypass'] = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bc27a4b27c978267 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7fad4fb49f0182af — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execAgents.integration.test.ts:23 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f9bffb70c6cbcb02 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/execGroupAgent.integration.test.ts:24 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9460a389a40384b1 — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/multiRoundTools.integration.test.ts:25 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d698db375afb0e4b — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/serverCallAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cd636ea10d55485c — Environment-variable access.
repo/apps/server/src/routers/lambda/__tests__/integration/aiAgent/serverSubAgent.integration.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed51dbf078223927 — Environment-variable access.
repo/apps/server/src/routers/lambda/composio.ts:181 
      const callbackUrl = `${process.env.APP_URL || process.env.NEXTAUTH_URL || ''}/api/composio/oauth/callback`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f083a2f78194c27 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:28 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41bc660fb022e13c — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:37 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60809991f5612131 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:41 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #728f46349b48dfff — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:50 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05ff1d84445d7f6a — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:54 
          process.env.OPENAI_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c406d11b1b8c2189 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:65 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c13e542c91f294c — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:69 
          process.env.OPENAI_MODEL_LIST = '-gpt-4';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdc3b36641f338ab — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:77 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2da4c5a1cae0b3ea — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:81 
          process.env.OPENAI_MODEL_LIST = '+gpt-4-1106-preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10d41dc602683968 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:91 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #281e4d29d12c0086 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:95 
          process.env.OPENAI_MODEL_LIST = 'model1,model2,model3，model4';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48728a548a5437a7 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:130 
          process.env.OPENAI_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b289f9e218ca9c8f — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:136 
          process.env.OPENROUTER_MODEL_LIST =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a5c334857b73e82 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:146 
          process.env.OPENROUTER_MODEL_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #050557825fb7cfc9 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:151 
        const originalApiKey = process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #192a1806a99563ef — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:152 
        delete process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fde8059c4e0c7bb2 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:159 
          delete process.env.DEEPSEEK_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16a170bef6a40cc8 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:161 
          process.env.DEEPSEEK_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20c56f8d5d52ee7e — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:169 
      process.env.DEFAULT_AGENT_CONFIG =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c143c7591ae39b5 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:181 
      process.env.DEFAULT_AGENT_CONFIG = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7cbe33d024a5f33 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:185 
      process.env.DEFAULT_AGENT_CONFIG =

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #632319e6b3ae69b2 — Environment-variable access.
repo/apps/server/src/routers/lambda/config/index.test.ts:197 
      process.env.DEFAULT_AGENT_CONFIG = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #186568268ce60940 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/routers/lambda/exporter.ts:37 
  const response = await fetch(REGULAR_FONT_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #14cf0a0d5bd41a3a — Environment-variable access.
repo/apps/server/src/routers/lambda/image/index.ts:143 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c54f3d5d0a2b00a — Environment-variable access.
repo/apps/server/src/routers/lambda/market/agent.ts:15 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0197647cc6092ea — Environment-variable access.
repo/apps/server/src/routers/lambda/market/agentGroup.ts:14 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #048072d6f75b321a — Environment-variable access.
repo/apps/server/src/routers/lambda/market/index.ts:707 
          secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52c26e22347d13cb — Environment-variable access.
repo/apps/server/src/routers/lambda/market/index.ts:716 
          secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a09353af5f57485 — Environment-variable access.
repo/apps/server/src/routers/lambda/market/socialProfile.ts:10 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e84c7fd25ef7779f — Environment-variable access.
repo/apps/server/src/routers/lambda/userMemories.ts:931 
      if (process.env.NODE_ENV !== 'production' && process.env.DEV_DISABLE_AUTO_MEMORY === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #445851be1616503b — Environment-variable access.
repo/apps/server/src/routers/lambda/video/index.ts:139 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc34c9fdec97d5c3 — Environment-variable access.
repo/apps/server/src/routers/lambda/video/index.ts:255 
        const callbackBaseUrl = process.env.WEBHOOK_PROXY_URL || appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a2753cbcbc8c767 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:164 
    process.env.AGENT_RUNTIME_BASE_URL = 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47e6a88b5f273a03 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:196 
    delete process.env.AGENT_RUNTIME_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfbc5aff8798e0a3 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:202 
      delete process.env.AGENT_RUNTIME_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ed96ebdc60f19dd — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.test.ts:208 
      process.env.AGENT_RUNTIME_BASE_URL = 'http://custom:3000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2439470298286933 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.ts:90 
if (process.env.VERCEL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba69fc686c8d5ee5 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/AgentRuntimeService.ts:287 
    const baseUrl = process.env.AGENT_RUNTIME_BASE_URL || appEnv.APP_URL || 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1501d5522650b127 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:31 
    : urlJoin(process.env.INTERNAL_APP_URL || process.env.APP_URL || '', url);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00cdd53350cabf78 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:35 
      const qstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eba38cb740a114be — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:48 
          ...(process.env.VERCEL_AUTOMATION_BYPASS_SECRET && {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #073207407c3b8c65 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/HookDispatcher.ts:49 
            'x-vercel-protection-bypass': process.env.VERCEL_AUTOMATION_BYPASS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #335023a59bbfcc70 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:273 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a621e663f9df8ef9 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:278 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ad027135e2f49e40 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:282 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1c6cc15263894423 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:283 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #42dcf8132a39c768 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/hooks/__tests__/HookDispatcher.test.ts:305 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba0aea46141823e1 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:8 
  const explicitValue = process.env.ENABLE_AGENT_S3_TRACING;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d19dd0daf41710e2 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:12 
  return process.env.NODE_ENV === 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ba894b66a962119 — Environment-variable access.
repo/apps/server/src/services/agentRuntime/snapshotStore.ts:49 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d8a44d9de0f19e91 — Filesystem access.
repo/apps/server/src/services/agentSignal/__tests__/promptBoundaries.test.ts:9 
const read = (filePath: string) => readFileSync(path.join(root, filePath), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #391245d0beb5f7e5 — Environment-variable access.
repo/apps/server/src/services/aiAgent/__tests__/execAgent.memory.test.ts:28 
process.env.OPENAI_API_KEY = 'sk-test-fake-api-key-for-testing';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #108305bc5d8c2195 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/bot/platforms/discord/client.ts:533 
      const res = await fetch('https://discord.com/api/v10/users/@me', {
        headers: { Authorization: `Bot ${credentials.botToken}` },
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0ff02c677729155b — Environment-variable access.
repo/apps/server/src/services/changelog/index.test.ts:261 
        process.env.DOC_S3_PUBLIC_DOMAIN = 'https://cdn.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d0b14191150bbd0 — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:15 
const docCdnPrefix = process.env.DOC_S3_PUBLIC_DOMAIN || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42f6a34a425b2e68 — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:34 
    branch: process.env.DOCS_BRANCH || 'main',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36fef8c10a518f25 — Environment-variable access.
repo/apps/server/src/services/changelog/index.ts:41 
    urlTemplate: process.env.CHANGELOG_URL_TEMPLATE || URL_TEMPLATE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b7d6631735d6fde — Environment-variable access.
repo/apps/server/src/services/comfyui/core/comfyUIClientService.ts:70 
        options.baseURL || process.env.COMFYUI_DEFAULT_URL || COMFYUI_DEFAULTS.BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75d350eefebff2b4 — Environment-variable access.
repo/apps/server/src/services/desktopRelease/index.ts:120 
  const token = options?.token || process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc386af9cb8a725a — Environment-variable access.
repo/apps/server/src/services/desktopRelease/index.ts:175 
    options?.baseUrl || process.env.DESKTOP_UPDATE_SERVER_URL || process.env.UPDATE_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d17f30fbafbce91a — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:106 
      process.env.MARKET_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab9c9cfe5766d317 — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:115 
      if (process.env.VERCEL_PROJECT_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d24d025b9644230a — Environment-variable access.
repo/apps/server/src/services/discover/index.ts:116 
        return process.env.VERCEL_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ddef61d8551ac48 — Environment-variable access.
repo/apps/server/src/services/gateway/GatewayManager.ts:253 
      appUrl: process.env.APP_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #477d6f82086bd471 — Environment-variable access.
repo/apps/server/src/services/gateway/index.ts:105 
const isVercel = !!process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c3714c43f3b40b1 — Filesystem access.
repo/apps/server/src/services/generation/video.ts:74 
        fs.readFile(String(tempVideoPath)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #974de90518ab9153 — Filesystem access.
repo/apps/server/src/services/generation/video.ts:99 
      const coverBuffer = await fs.readFile(String(tempCoverPath));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ed3f8e9ac1956092 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:500 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #03222c7c5c19f2d0 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:501 
    const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #67842e7671865e52 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:537 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2850fd7a57c7f58d — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:538 
      process.env.APP_URL = 'https://app.test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #44ddaff1bf9133c4 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:543 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7b030dfbb7602345 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:544 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b46fcceeb80d6aa3 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:545 
      if (originalAppUrl === undefined) delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d8e10077c8538f2 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:546 
      else process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #386ee0b60d215cc1 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:594 
    const originalToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #97ced4b5e76cfbbc — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:595 
    const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8bd4a4ff5437db50 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:645 
      process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a6089311168a23db — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:646 
      process.env.APP_URL = 'https://app.test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ec1d264eabe22568 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:652 
      if (originalToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5f81fa1c17902cc7 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:653 
      else process.env.QSTASH_TOKEN = originalToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7e78375e6d0cd3c1 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:654 
      if (originalAppUrl === undefined) delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4b08da2a1467a623 — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/__tests__/index.test.ts:655 
      else process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ee66e4bffa6961d — Environment-variable access.
repo/apps/server/src/services/heterogeneousAgent/sandboxRunner.ts:193 
  const serverUrl = process.env.LOBEHUB_HETERO_SERVER_URL ?? appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2eb2856809cf2ba9 — Environment-variable access.
repo/apps/server/src/services/llmGenerationTracing/index.ts:262 
  if (process.env.ENABLE_LLM_GENERATION_TRACING_S3 === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89d5228ca2cb2119 — Environment-variable access.
repo/apps/server/src/services/llmGenerationTracing/index.ts:273 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80588c8d2a1761b7 — Environment-variable access.
repo/apps/server/src/services/market/index.ts:13 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6437527481f64507 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:65 
  const originalServiceUserId = process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #71ba76ecdffdbaf3 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:66 
  const originalQstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d2267942e0bdf61d — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:73 
    process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID = 'service-account-user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #23de6c19fbf1b6fa — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:74 
    process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0e0b6ca2b0175128 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:96 
      delete process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2d7c31fbe33c5a6f — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:98 
      process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID = originalServiceUserId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e75f2a0728730c2b — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:102 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #96dfcd4f1082a892 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:104 
      process.env.QSTASH_TOKEN = originalQstashToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6d59b759129c6e2f — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/__tests__/extract.workflow.test.ts:257 
    delete process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b06dfcd1824e3058 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2765 
  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b5442c093e0c457 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2770 
  if (process.env.QSTASH_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #439f27a558a37fc2 — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2771 
    (config as Record<string, unknown>).url = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #57ef41a48d040b5d — Environment-variable access.
repo/apps/server/src/services/memory/userMemory/extract.ts:2844 
    const userId = process.env.MEMORY_EXTRACTION_HOURLY_TASK_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #e159937c44036f29 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/oauth/slackOAuth.ts:29 
  const url = new URL(SLACK_AUTHORIZE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #d933d7f6145f67cf — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:81 
  const url = new URL(DISCORD_AUTHORIZE_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a50383fdab8a88f1 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:108 
  const tokenResponse = await fetch(DISCORD_TOKEN_URL, {
    body,
    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
    method: 'POST',
  });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #e47ad7c7dd2eece1 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/discord/oauth.ts:132 
    const userResponse = await fetch(`${DISCORD_API_BASE}/users/@me`, {
      headers: { Authorization: `Bearer ${data.access_token}` },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #cc1af963f35c571c — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/server/src/services/messenger/platforms/slack/oauth.ts:103 
  const url = new URL('https://slack.com/app/open');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only #e5ab39ce367a5141 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:128 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8f2ecd64978d158d — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:139 
      process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #be92aaf70cb1d453 — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:148 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a379d35cb3e0c31e — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:153 
      process.env.QSTASH_TOKEN = 'test-qstash-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3a96c41af22fbbbf — Environment-variable access.
repo/apps/server/src/services/queue/__tests__/QueueService.test.ts:161 
      delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fadc2df660811af0 — Environment-variable access.
repo/apps/server/src/services/queue/impls/index.ts:26 
    const qstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #632953e6ae6b84be — Environment-variable access.
repo/apps/server/src/services/search/impls/anspire/index.ts:21 
    return process.env.ANSPIRE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f55877af21ee8f68 — Environment-variable access.
repo/apps/server/src/services/search/impls/bocha/index.ts:28 
    return process.env.BOCHA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #159c8cf0dc2222e1 — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:30 
    process.env.BRAVE_API_KEY = 'test-brave-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa47658ba914f838 — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:35 
    delete process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d970dd994d48811 — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.test.ts:145 
      delete process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7be32488a174e2bc — Environment-variable access.
repo/apps/server/src/services/search/impls/brave/index.ts:28 
    return process.env.BRAVE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edb26c6da432b73b — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:27 
    process.env.EXA_API_KEY = 'test-exa-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a89d2a0a157c1bbe — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:32 
    delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3a2ef488ab8c895 — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.test.ts:153 
      delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d210ac89be7912b1 — Environment-variable access.
repo/apps/server/src/services/search/impls/exa/index.ts:21 
    return process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #246d78cad7b65f4a — Environment-variable access.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:28 
    return process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #664d057ade83708e — Environment-variable access.
repo/apps/server/src/services/search/impls/firecrawl/index.ts:33 
    return process.env.FIRECRAWL_URL || 'https://api.firecrawl.dev/v2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcea86afc1b18f38 — Environment-variable access.
repo/apps/server/src/services/search/impls/google/index.ts:28 
    return process.env.GOOGLE_PSE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e902ec6fb91df6d9 — Environment-variable access.
repo/apps/server/src/services/search/impls/google/index.ts:32 
    return process.env.GOOGLE_PSE_ENGINE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e2d6b41e02fb6b7 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:21 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a03f4099c70fa1f7 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:22 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b2406ef6fcd6e14 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:23 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02baeba3c1493732 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:28 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1de2b40925f065da — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:29 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a15b37efcd28a9a9 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:30 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #369964550e4eb145 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:34 
    process.env.JINA_READER_API_KEY = 'test-jina-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1641027281ddfb42 — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.test.ts:79 
    process.env.JINA_USE_CN_DOMAINS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42092604b4e1d72e — Environment-variable access.
repo/apps/server/src/services/search/impls/jina/index.ts:22 
    return process.env.JINA_READER_API_KEY || process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6bc0cb5a109b8259 — Environment-variable access.
repo/apps/server/src/services/search/impls/kagi/index.ts:21 
    return process.env.KAGI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #311990b122439ba4 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.integration.test.ts:7 
const apiKey = process.env.SEARCH1API_SEARCH_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5e474eb0f35ab91 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:39 
    process.env.SEARCH1API_SEARCH_API_KEY = 'test-search1api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b7889fbdd296562 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:40 
    delete process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dab387a37522c53e — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:45 
    delete process.env.SEARCH1API_SEARCH_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6a37916077d8f82 — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.test.ts:46 
    delete process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ba4a161855547fb — Environment-variable access.
repo/apps/server/src/services/search/impls/search1api/index.ts:41 
    return process.env.SEARCH1API_SEARCH_API_KEY || process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5bb627c9b448e69 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:27 
    process.env.TAVILY_API_KEY = 'test-tavily-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6df6fcfb1ac4d83 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:28 
    delete process.env.TAVILY_SEARCH_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4b6dd3e9fa6a705 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:33 
    delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fe9c99e8c0dcbf1 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:34 
    delete process.env.TAVILY_SEARCH_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #622a670329bf26cd — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:147 
      process.env.TAVILY_SEARCH_DEPTH = 'advanced';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5e91f41815900a6 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.test.ts:170 
      delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13636f28b596d11b — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.ts:21 
    return process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71323bd737775df8 — Environment-variable access.
repo/apps/server/src/services/search/impls/tavily/index.ts:40 
      search_depth: process.env.TAVILY_SEARCH_DEPTH || 'basic', // basic or advanced

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66cd810ff6930eea — Filesystem access.
repo/apps/server/src/services/skill/importer.ts:116 
      const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5810b4d0b6fdfe83 — Filesystem access.
repo/apps/server/src/services/skill/parser.test.ts:825 
      await writeFile(testZipPath, zipped);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #348e89df4f38b31a — Filesystem access.
repo/apps/server/src/services/skill/parser.test.ts:851 
      await writeFile(invalidZipPath, Buffer.from([1, 2, 3, 4]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13e0835b0cfcc783 — Filesystem access.
repo/apps/server/src/services/skill/parser.ts:61 
      const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b74aa7799e122fa0 — Environment-variable access.
repo/apps/server/src/services/taskScheduler/impls/index.ts:24 
    const baseUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d93b9a32ca9b8861 — Environment-variable access.
repo/apps/server/src/services/taskTemplate/index.ts:23 
  process.env.VERCEL_PROJECT_ID || process.env.VERCEL_PROJECT_PRODUCTION_URL || appEnv.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61c8ea29cff9c35f — Environment-variable access.
repo/apps/server/src/services/toolExecution/serverRuntimes/agentDocuments.ts:22 
    return process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83d6431e152aa66a — Filesystem access.
repo/apps/server/src/utils/tempFileManager.ts:29 
      writeFileSync(filePath, data);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1667eecfe4794a52 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:25 
    process.env.VERCEL = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc1ef579c0f692b0 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:26 
    process.env.VERCEL_ENV = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9946f73a6c40c9a — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:35 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8678963ae1f0533 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:36 
    process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7fabccf34ce267f — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:37 
    process.env.VERCEL_URL = 'preview-url.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #114b210b666cba29 — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:46 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98f93a99dfd1a8bd — Environment-variable access.
repo/apps/server/src/utils/url.test.ts:47 
    process.env.VERCEL_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #580bbf3474c036cb — Environment-variable access.
repo/apps/server/src/utils/url.ts:3 
const isVercelPreview = process.env.VERCEL === '1' && process.env.VERCEL_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4516c487e368932 — Environment-variable access.
repo/apps/server/src/utils/url.ts:5 
const vercelPreviewUrl = `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e86fe77aa8685939 — Environment-variable access.
repo/apps/server/src/workflows-hono/middlewares/qstashAuth.ts:27 
  if (process.env.QSTASH_CURRENT_SIGNING_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba30dcdf51090e96 — Environment-variable access.
repo/apps/server/src/workflows-hono/qstashClient.ts:13 
    token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e20730cfa67c50d — Environment-variable access.
repo/apps/server/src/workflows-hono/task/handlers/scheduleDispatch.ts:106 
    if (!process.env.APP_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cccdff1a7e347f6b — Environment-variable access.
repo/apps/server/src/workflows-hono/task/handlers/scheduleDispatch.ts:109 
    const url = `${process.env.APP_URL.replace(/\/$/, '')}${SCHEDULE_EXECUTE_PATH}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0cd87a8f8280145 — Environment-variable access.
repo/apps/server/src/workflows/agentEvalRun/index.ts:127 
  const baseUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #168766b271959f99 — Environment-variable access.
repo/apps/server/src/workflows/agentSignal/run.ts:104 
  if (process.env.NODE_ENV !== 'development') return null;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0319be84447bdddb — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:6 
  const originalQstashToken = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b602c99a0f964bc4 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:7 
  const originalQstashUrl = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4cd8739cf07c5f6f — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:10 
    process.env.QSTASH_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1e593458e7ae7434 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:11 
    delete process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #14d276a279799e93 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:21 
    if (originalQstashToken === undefined) delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #25851158aa82202a — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:22 
    else process.env.QSTASH_TOKEN = originalQstashToken;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #69dd5e87b80564af — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:24 
    if (originalQstashUrl === undefined) delete process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1c17dabdb2e0447e — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:25 
    else process.env.QSTASH_URL = originalQstashUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b704333cae582a23 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/__tests__/qstashCancel.test.ts:136 
    delete process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f10b16302c1dab3 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/qstashCancel.ts:79 
  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ec6ad6f044cd160 — Environment-variable access.
repo/apps/server/src/workflows/runGuard/qstashCancel.ts:83 
  const qstashUrl = process.env.QSTASH_URL || DEFAULT_QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56d37133d8bd7a32 — Filesystem access.
repo/apps/server/viteNodeServer.config.ts:22 
    return `export default ${JSON.stringify(readFileSync(filepath, 'utf8'))};`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/model-runtime

npm first-party
high pii_flow production #b2639c096f94215e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:51 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:49 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #83bfd74265c511a2 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:167 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/core/openaiCompatibleFactory/createVideo.ts:164 
  const response = await fetch(`${baseURL}/videos`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8032fc1d3c1002bf — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:181 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/aihubmix/index.ts:163 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/aihubmix/index.ts:181 
      const response = await fetch(urlJoin(rootBaseURL, '/api/v1/models'), {
        headers: {
          'Authorization': `Bearer ${apiKey}`,
          'APP-Code': 'LobeHub',
        },
        signal: controller.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #207a3c5ca5f61455 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/azureai/index.ts:67 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/azureai/index.ts:33 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/azureai/index.ts:67 
      const response = this.client.path('/chat/completions').post({
        body: {
          messages: updatedMessages as OpenAI.ChatCompletionMessageParam[],
          model,
          ...params,
          stream: enableStreaming,
          temperature: model.includes('o3') || model.includes('o4') ? undefined : temperature,
          tool_choice: params.tools ? 'auto' : undefined,
          top_p: model.includes('o3') || model.includes('o4') ? undefined : top_p,
        },
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8d387fce6e0683b6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:121 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/bfl/createImage.ts:125 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/bfl/createImage.ts:121 
  const response = await fetch(url, {
    body: JSON.stringify(payload),
    headers: {
      'Content-Type': 'application/json',
      'x-key': options.apiKey,
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e1e9b77d170e9f03 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/bfl/createImage.ts:158 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/bfl/createImage.ts:161 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/bfl/createImage.ts:158 
  const response = await fetch(pollingUrl, {
    headers: {
      'accept': 'application/json',
      'x-key': options.apiKey,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #1a673bde3447cb10 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:93 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/cloudflare/index.ts:93 
      response = await fetch(url, {
        body: JSON.stringify({ tools: functions, ...restPayload }),
        headers: { 'Content-Type': 'application/json', ...headers },
        method: 'POST',
        signal: options?.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #eeab528fd5484bcd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:156 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/cloudflare/index.ts:77 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/cloudflare/index.ts:156 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${this.apiKey}`,
        'Content-Type': 'application/json',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b4ac49e1b3831623 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/comfyui/index.ts:101 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/comfyui/index.ts:77 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/comfyui/index.ts:101 
      const response = await fetch(`${appUrl}/webapi/create-image/comfyui`, {
        body: JSON.stringify({
          model: payload.model,
          options: this.options,
          params: payload.params,
        }),
        headers,
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #56e575d09afe1b04 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/google/index.ts:471 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/google/index.ts:135 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/google/index.ts:471 
      const response = await fetch(url, {
        headers: {
          'x-goog-api-key': this.apiKey!,
        },
        method: 'GET',
        signal: options?.signal,
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3dda123b488383b8 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:55 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:53 
  const response = await fetch(urlWithParams.toString(), {
    headers: {
      Authorization: `Bearer ${options.apiKey}`,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5441b9c6f91f71a3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:78 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:76 
  const response = await fetch(urlWithParams.toString(), {
    headers: {
      Authorization: `Bearer ${options.apiKey}`,
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c46cd6304eb6052f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:177 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/minimax/createVideo.ts:174 
  const response = await fetch(`${baseURL}/video_generation`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #fb68e80fa6dd8c67 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/nebius/index.ts:31 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/nebius/index.ts:34 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/nebius/index.ts:31 
    const res = await fetch(url, {
      headers: {
        Accept: 'application/json',
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f8ee2789b2915ffc — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:41 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:38 
  const response = await fetch(statusUrl, {
    body: JSON.stringify({ requestId }),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #48578bf02fd2c95c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:126 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/siliconcloud/createVideo.ts:123 
  const response = await fetch(`${baseURL}/video/submit`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #42a1967ab6c1070a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/straico/index.ts:44 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/straico/index.ts:46 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/straico/index.ts:44 
    const response = await fetch(url, {
      headers: {
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #7e4ba862c6e2a948 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:78 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/volcengine/video/createVideo.ts:75 
  const response = await fetch(`${baseURL}/contents/generations/tasks`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #86be92fe15de9f3b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:37 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:35 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #d83f30c0b1c24455 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:137 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/wenxin/createVideo.ts:134 
  const response = await fetch(`${baseURL}/video/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #80a283e9877fa527 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:33 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/xai/createVideo.ts:35 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/xai/createVideo.ts:33 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #147364304de91b2f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/xai/createVideo.ts:124 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/xai/createVideo.ts:127 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/xai/createVideo.ts:124 
  const response = await fetch(`${baseURL}/videos/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8556e70e59c6f8e1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:39 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:37 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #003694d1bcc6210d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:134 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/zhipu/createImage.ts:131 
  const response = await fetch(endpoint, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f35bd36780b7210b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:41 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:39 
  const response = await fetch(statusUrl, {
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'GET',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #ffd56facfc6c4cab — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:147 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/zhipu/createVideo.ts:144 
  const response = await fetch(`${baseURL}/videos/generations`, {
    body: JSON.stringify(body),
    headers: {
      'Authorization': `Bearer ${options.apiKey}`,
      'Content-Type': 'application/json',
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5c3bb1fa66d4c86b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/model-runtime/src/providers/zhipu/index.ts:220 · flow /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/zhipu/index.ts:222 → /tmp/closeopen-g59q7b0s/repo/packages/model-runtime/src/providers/zhipu/index.ts:220 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${client.apiKey}`,
        'Bigmodel-Organization': 'lobehub',
        'Bigmodel-Project': 'lobechat',
      },
      method: 'GET',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 382 low-confidence finding(s)
low env_fs production #310f07fc023fa69c — Environment-variable access.
repo/packages/model-runtime/src/core/RouterRuntime/createRuntime.ts:265 
      if (process.env.NODE_ENV !== 'development') return effectiveUserId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac042a3135368df5 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:25 
const originalAnthropicClientTimeout = process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0622345418e6221f — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:29 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1d77d13c4121ce7 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:31 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = originalAnthropicClientTimeout;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a4682acbc21d023 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:68 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f078cd18cbe7354 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:81 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = '780000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bd7406e18287ac5 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:91 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8deab7c680752313 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:96 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = 'invalid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83ae157f8cff4e4c — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:106 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9168b82146fac12a — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:111 
    process.env.ANTHROPIC_CLIENT_TIMEOUT = '780000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc4262b731d72ae3 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.test.ts:124 
    delete process.env.ANTHROPIC_CLIENT_TIMEOUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e58484514e06a31 — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.ts:66 
  const timeout = Number(process.env[ANTHROPIC_CLIENT_TIMEOUT_ENV]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ea20ee21734675d — Environment-variable access.
repo/packages/model-runtime/src/core/anthropicCompatibleFactory/index.ts:275 
  const betaHeaders = process.env.ANTHROPIC_BETA_HEADERS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a164e540edb2a84b — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/anthropic.ts:479 
  const maxUses = process.env.ANTHROPIC_MAX_USES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8469d10ac73434f — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:39 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d2ead762f678ed7 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:64 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d580dc0dcb522c21 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:80 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74b6c6714b43af21 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:104 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #688023e2f9c9db0e — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:127 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9af56a64599ab39e — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:131 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c544c253991020c — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:147 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab61dc16b7457cb4 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:171 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6e09a4f3cdc9194 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:185 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5aff04e1bcee3e5e — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:219 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd89a4d2afcf1be7 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:238 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79dda698f7704d7a — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:1055 
    process.env.LLM_VISION_VIDEO_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #649990e6f35e678c — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.test.ts:1097 
    process.env.LLM_VISION_IMAGE_USE_BASE64 = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ec6669d5c25eae0 — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.ts:43 
      options?.forceImageBase64 || process.env.LLM_VISION_IMAGE_USE_BASE64 === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #762445e604a40ebc — Environment-variable access.
repo/packages/model-runtime/src/core/contextBuilders/openai.ts:59 
      options?.forceVideoBase64 || process.env.LLM_VISION_VIDEO_USE_BASE64 === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acde9bae3b099937 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:43 
    chatCompletion: () => process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d0a9193a5405712 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1664 
        const originalDebugValue = process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49165b65e0f20b97 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1667 
        process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7e5b2cc1d7f28a7 — Environment-variable access.
repo/packages/model-runtime/src/core/openaiCompatibleFactory/index.test.ts:1683 
        process.env.DEBUG_MOCKPROVIDER_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7705a05de694036c — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:338 
          const originalDebugValue = process.env[debugEnv];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d4b98ccca8564d9 — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:340 
          process.env[debugEnv] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #003d08ed56e4fb62 — Environment-variable access.
repo/packages/model-runtime/src/providerTestUtils.ts:356 
          process.env[debugEnv] = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5518450b54b73df4 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai21/index.ts:16 
    chatCompletion: () => process.env.DEBUG_AI21_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24806f858937bfd6 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai302/index.ts:36 
    chatCompletion: () => process.env.DEBUG_AI302_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fccdbc2bfbfb997 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:34 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6acc39a4a76599d — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:40 
      process.env.DEBUG_AI360_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f918f733011533c7 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:43 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d353286dc6e803e — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:47 
      process.env.DEBUG_AI360_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #850174041bea6501 — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.test.ts:50 
      delete process.env.DEBUG_AI360_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dec0a9ed7adc32ee — Environment-variable access.
repo/packages/model-runtime/src/providers/ai360/index.ts:39 
    chatCompletion: () => process.env.DEBUG_AI360_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ea9a4016890bda1 — Environment-variable access.
repo/packages/model-runtime/src/providers/aihubmix/index.ts:156 
    chatCompletion: () => process.env.DEBUG_AIHUBMIX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81f97aa9da7bef41 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:68 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2a1817bcb083c56 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:74 
      process.env.DEBUG_AKASH_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #707b41ab25c7b6ba — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:77 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5118b61ee8fa6058 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:81 
      process.env.DEBUG_AKASH_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d5ce0faa02c3777 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.test.ts:84 
      delete process.env.DEBUG_AKASH_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88e9071b626a8892 — Environment-variable access.
repo/packages/model-runtime/src/providers/akashchat/index.ts:36 
    chatCompletion: () => process.env.DEBUG_AKASH_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2014ee5d228bd8a — Environment-variable access.
repo/packages/model-runtime/src/providers/antgroup/index.ts:22 
    chatCompletion: () => process.env.DEBUG_ANTGROUP_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2cadea03b41e8f3 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:262 
      const originalDebugValue = process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5eade14bf7d9f4e5 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:264 
      process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a59e9759483823c9 — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.test.ts:278 
      process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a451adca83a8e9ea — Environment-variable access.
repo/packages/model-runtime/src/providers/anthropic/index.ts:23 
    chatCompletion: () => process.env.DEBUG_ANTHROPIC_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #413d3fbbeb1c16cc — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.test.ts:436 
        process.env.DEBUG_AZURE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4ff720344e4bd45 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.test.ts:451 
        delete process.env.DEBUG_AZURE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83a25daab797ff93 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:19 
const azureSearchContextSize = process.env.OPENAI_SEARCH_CONTEXT_SIZE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7e4765995ae1a8e — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:141 
    chatCompletion: () => process.env.DEBUG_AZURE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb08e905d3d34816 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureOpenai/index.ts:142 
    responses: () => process.env.DEBUG_AZURE_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bea7b1becf67648 — Environment-variable access.
repo/packages/model-runtime/src/providers/azureai/index.ts:115 
        if (process.env.DEBUG_AZURE_AI_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59ac5d418f373252 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:45 
      delete process.env.DEBUG_BAICHUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0598ac05edc7b0cf — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:51 
      process.env.DEBUG_BAICHUAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6cf793c61b21042 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:54 
      delete process.env.DEBUG_BAICHUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9053ef2982fd09d4 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:110 
      delete process.env.BAICHUAN_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #579b4cf5cb1e2609 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:124 
      process.env.BAICHUAN_SEARCH_MODE = 'quality_first';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f4029028e3da58f — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.test.ts:136 
      delete process.env.BAICHUAN_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e87eccedd0433168 — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.ts:30 
                search_mode: process.env.BAICHUAN_SEARCH_MODE || 'performance_first', // performance_first or quality_first

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adec2d6d87c3257d — Environment-variable access.
repo/packages/model-runtime/src/providers/baichuan/index.ts:56 
    chatCompletion: () => process.env.DEBUG_BAICHUAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #083bf0cec3a5c5de — Environment-variable access.
repo/packages/model-runtime/src/providers/bailianCodingPlan/index.ts:45 
    chatCompletion: () => process.env.DEBUG_BAILIAN_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7fa9afcd7d49562 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:569 
        process.env.DEBUG_BEDROCK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c39555d4f2f9e438 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:583 
        delete process.env.DEBUG_BEDROCK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7924d0c579c749f9 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:973 
        process.env.DEBUG_BEDROCK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #111c208c661f7fcc — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.test.ts:987 
        delete process.env.DEBUG_BEDROCK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dafe632250ff0f92 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.ts:372 
      if (process.env.DEBUG_BEDROCK_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #429e1f0c00fd8f61 — Environment-variable access.
repo/packages/model-runtime/src/providers/bedrock/index.ts:433 
      if (process.env.DEBUG_BEDROCK_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28cb753278921b35 — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:66 
      delete process.env.DEBUG_CEREBRAS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b73bd2544bced430 — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:72 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0af9e7926c1557b5 — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:78 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1e154ddd2d6f4a2 — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.test.ts:84 
      process.env.DEBUG_CEREBRAS_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cfb9ae794136439 — Environment-variable access.
repo/packages/model-runtime/src/providers/cerebras/index.ts:25 
    chatCompletion: () => process.env.DEBUG_CEREBRAS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5977b6b442f73ab0 — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:255 
      const originalDebugValue = process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49a9d13d6a9c55dc — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:257 
      process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #591e1e96fd98d949 — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.test.ts:271 
      process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40484dec6fc754b8 — Environment-variable access.
repo/packages/model-runtime/src/providers/cloudflare/index.ts:136 
    if (process.env.DEBUG_CLOUDFLARE_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d5c03e89d233e8a — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:44 
      delete process.env.DEBUG_COHERE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba19b65ce85cd0ad — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:50 
      process.env.DEBUG_COHERE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82a555171ae4c0c7 — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.test.ts:53 
      delete process.env.DEBUG_COHERE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a16098bde7392092 — Environment-variable access.
repo/packages/model-runtime/src/providers/cohere/index.ts:42 
    chatCompletion: () => process.env.DEBUG_COHERE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e46bf5f9df83ce35 — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:49 
      delete process.env.DEBUG_COMETAPI_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #835a5e94242dc386 — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:55 
      process.env.DEBUG_COMETAPI_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88c44915fccdd452 — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.test.ts:58 
      delete process.env.DEBUG_COMETAPI_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0655d0370cdee161 — Environment-variable access.
repo/packages/model-runtime/src/providers/cometapi/index.ts:27 
    chatCompletion: () => process.env.DEBUG_COMETAPI_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3c9a97f6b794f7b4 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:49 
      const originalEnv = process.env.COMFYUI_DEFAULT_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bb9b43d6021b5167 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:50 
      process.env.COMFYUI_DEFAULT_URL = 'https://env.comfyui.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #38b04f4e3914ad38 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:58 
        delete process.env.COMFYUI_DEFAULT_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #11ace47623e7bf58 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:60 
        process.env.COMFYUI_DEFAULT_URL = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c596e6f3c4fea477 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:202 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #68813c98a037c053 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:203 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5fc2d2db851e032b — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:204 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #04143052790c6953 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:205 
      process.env.APP_URL = 'http://localhost:3010';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #02db182292e51bba — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:237 
        delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b5a7490a27b7c345 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:239 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #78a83f2228f38744 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:242 
        delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #734bfe20fca17ebe — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:244 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dc5aa412f874c7b6 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:261 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e5b2484f1bfcb8e2 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:262 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #23038c7e4406a2b8 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:263 
      process.env.INTERNAL_APP_URL = 'http://internal-service:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8fad6e7802c19105 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:264 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0e8b8ae04915035b — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:274 
        delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #01e322050b786150 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:276 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #19ca59180ed47219 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:279 
        delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #142e37a9de6dc52d — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:281 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ce11411a2317aeb — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:300 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3c69e053cca049e2 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:301 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d0d1877f7015fe6c — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:302 
      const originalPort = process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8764915149a0d263 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:303 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f907529344b171c1 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:304 
      delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8fd66c89fce7be28 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:305 
      process.env.PORT = '3000';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #37877e80f8379123 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:317 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ecb1f6db11ea8193 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:320 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0b4d3442525bd0f7 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:323 
        delete process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b7740bd7e5816f01 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:325 
        process.env.PORT = originalPort;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c0aa598ddf7e3cce — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:344 
      const originalInternalAppUrl = process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #52bc7b863a851879 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:345 
      const originalAppUrl = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a72d3acb442c6cb0 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:346 
      const originalPort = process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #089913fa0ebd4cc4 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:347 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2dc85fa2affb5071 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:348 
      delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f763d0b043b338a5 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:349 
      delete process.env.PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6b1017f1e768477b — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:361 
        process.env.INTERNAL_APP_URL = originalInternalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1349f5601cac7b67 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:364 
        process.env.APP_URL = originalAppUrl;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4774f7d68d9d7954 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/__tests__/index.test.ts:367 
        process.env.PORT = originalPort;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ffc1781d37a9782 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:28 
    this.baseURL = options.baseURL || process.env.COMFYUI_DEFAULT_URL || 'http://localhost:8188';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f491d20fcdf0de12 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:76 
      const isInVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6df63c915baa112f — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:77 
      const vercelUrl = `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d60c880a671037b3 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:79 
        process.env.INTERNAL_APP_URL ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #174853d1cc767928 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:80 
        process.env.APP_URL ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cb52d6fd4911e37 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:81 
        (isInVercel ? vercelUrl : `http://localhost:${process.env.PORT || 3010}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6181ed7abfd03282 — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:90 
      if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bdd9f1f1647c63c — Environment-variable access.
repo/packages/model-runtime/src/providers/comfyui/index.ts:96 
      const keyVaultSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8d74dd628e7590ab — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:158 
    delete process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1b80ff5a1a61b698 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:164 
    process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9cf3c53aa3731d1f — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/__tests__/index.test.ts:167 
    delete process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #843a4754de37f234 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/index.ts:46 
    chatCompletion: () => process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f609b98158ba96e8 — Environment-variable access.
repo/packages/model-runtime/src/providers/deepseek/index.ts:64 
    chatCompletion: () => process.env.DEBUG_DEEPSEEK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78e8207f365256d8 — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:40 
      delete process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7527ff750248cda1 — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:44 
      process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4002a8eb195f6b98 — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.test.ts:48 
      delete process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7887bf5bbc65118 — Environment-variable access.
repo/packages/model-runtime/src/providers/fireworksai/index.ts:17 
    chatCompletion: () => process.env.DEBUG_FIREWORKSAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdc86f99f9b8745d — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:55 
      delete process.env.DEBUG_GITEE_AI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6ae184204f80de8 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:61 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ed76955564ac80c — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:67 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05e85d388b8c35a9 — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.test.ts:73 
      process.env.DEBUG_GITEE_AI_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2118c44d0f7c588a — Environment-variable access.
repo/packages/model-runtime/src/providers/giteeai/index.ts:14 
    chatCompletion: () => process.env.DEBUG_GITEE_AI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ea04935aabe3222 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:48 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d580a36635efc73f — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:54 
      process.env.DEBUG_GITHUB_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4528d63294e32fb6 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:57 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3bddd25fbe96718 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:61 
      process.env.DEBUG_GITHUB_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67696e886465c7b9 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.test.ts:64 
      delete process.env.DEBUG_GITHUB_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1d48b5b3a34cb87 — Environment-variable access.
repo/packages/model-runtime/src/providers/github/index.ts:47 
    chatCompletion: () => process.env.DEBUG_GITHUB_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #fc1a759f14c988f5 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/github/index.ts:54 
    const response = await fetch('https://models.github.ai/catalog/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #cf817dd0492383f4 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:389 
      process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25562c41b0f62bff — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:411 
      delete process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aff4ee84c09dc830 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:436 
      process.env.DEBUG_GITHUBCOPILOT_RESPONSES = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f29b2bd466102a55 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.test.ts:458 
      delete process.env.DEBUG_GITHUBCOPILOT_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2285b4b91a0de02e — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:32 
  chatCompletion: () => process.env.DEBUG_GITHUBCOPILOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccbeba02a04481c1 — Environment-variable access.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:33 
  responses: () => process.env.DEBUG_GITHUBCOPILOT_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #3b60dc681751f838 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:79 
    const response = await fetch(TOKEN_EXCHANGE_URL, {
      headers: {
        'Accept': 'application/json',
        'Authorization': `Token ${githubToken}`,
        'User-Agent': 'LobeChat/1.0',
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a97fbe5838ef983f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/githubCopilot/index.ts:402 
        const response = await fetch(`${COPILOT_BASE_URL}/models`, {
          headers: {
            'Accept': 'application/json',
            'Authorization': `Bearer ${bearerToken}`,
            'Copilot-Integration-Id': 'vscode-chat',
            'Editor-Plugin-Version': 'LobeChat/1.0',
            'Editor-Version': 'LobeChat/1.0',
          },
          method: 'GET',
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #1504a38b27319e3a — Environment-variable access.
repo/packages/model-runtime/src/providers/glmCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_GLM_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf4c305257015522 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.test.ts:163 
      process.env.DEBUG_GOOGLE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3830b6ecbec73b29 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.test.ts:188 
      delete process.env.DEBUG_GOOGLE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d4a5c0fc1b52e99 — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.ts:230 
      if (process.env[key] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ec52d5e62ce69ad — Environment-variable access.
repo/packages/model-runtime/src/providers/google/index.ts:240 
      if (process.env[key] === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #893afb631cd954a1 — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:487 
      delete process.env.DEBUG_GROQ_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0324cd01ce329f0 — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:493 
      process.env.DEBUG_GROQ_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3576daff896b554d — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.test.ts:496 
      delete process.env.DEBUG_GROQ_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25963843146e33c8 — Environment-variable access.
repo/packages/model-runtime/src/providers/groq/index.ts:82 
    chatCompletion: () => process.env.DEBUG_GROQ_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30ef4ee5cba4d655 — Environment-variable access.
repo/packages/model-runtime/src/providers/higress/index.ts:27 
    chatCompletion: () => process.env.DEBUG_HIGRESS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #240c6dc925fd6fe7 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:78 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad153b0e70d2aa78 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:84 
      process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e5dc63cda99049f — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:87 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47356c3cc2e9d992 — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:91 
      process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d48598fb8860d9f — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.test.ts:94 
      delete process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9599fe550896442c — Environment-variable access.
repo/packages/model-runtime/src/providers/huggingface/index.ts:54 
    chatCompletion: () => process.env.DEBUG_HUGGINGFACE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #8e08849157bfb89a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/huggingface/index.ts:57 
    const response = await fetch('https://router.huggingface.co/v1/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #8632085deded0d7b — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:51 
      delete process.env.DEBUG_HUNYUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66f1123674ce3e67 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:57 
      process.env.DEBUG_HUNYUAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f33232ff370bf0f9 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:60 
      delete process.env.DEBUG_HUNYUAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b543dd4b858a43d8 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:144 
      process.env.HUNYUAN_ENABLE_SPEED_SEARCH = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e987d43fc2b5ac08 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.test.ts:156 
      delete process.env.HUNYUAN_ENABLE_SPEED_SEARCH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a30cd8f2e1f5d82 — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.ts:56 
          enable_speed_search: process.env.HUNYUAN_ENABLE_SPEED_SEARCH === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2b5f1be19f0d44e — Environment-variable access.
repo/packages/model-runtime/src/providers/hunyuan/index.ts:69 
    chatCompletion: () => process.env.DEBUG_HUNYUAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adb9b601354538de — Environment-variable access.
repo/packages/model-runtime/src/providers/infiniai/index.ts:24 
    chatCompletion: () => process.env.DEBUG_INFINIAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76857225b877b6eb — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:43 
      delete process.env.DEBUG_INTERNLM_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b84cb7a0a24b91b — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:49 
      process.env.DEBUG_INTERNLM_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b253311e63398edf — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.test.ts:52 
      delete process.env.DEBUG_INTERNLM_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f54496875119496d — Environment-variable access.
repo/packages/model-runtime/src/providers/internlm/index.ts:26 
    chatCompletion: () => process.env.DEBUG_INTERNLM_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #896e2495d34481b6 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:40 
      delete process.env.DEBUG_JINA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c85b051acb26664 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:44 
      process.env.DEBUG_JINA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #913c77dba5c571a7 — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.test.ts:48 
      delete process.env.DEBUG_JINA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9ddfdeb1d330cbb — Environment-variable access.
repo/packages/model-runtime/src/providers/jina/index.ts:14 
    chatCompletion: () => process.env.DEBUG_JINA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6f7cbcbe670b16b — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:549 
      const originalDebugValue = process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e13a01f4b58b337 — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:551 
      process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb27288b1e98d46b — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.test.ts:565 
      process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19140eee59de08b8 — Environment-variable access.
repo/packages/model-runtime/src/providers/kimiCodingPlan/index.ts:105 
    chatCompletion: () => process.env.DEBUG_KIMI_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e7827eebeccd267 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:47 
      delete process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c99a96c9189c6980 — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:52 
      process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbf981164cc55cef — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.test.ts:54 
      delete process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43ea1d94f7011d8e — Environment-variable access.
repo/packages/model-runtime/src/providers/lmstudio/index.ts:15 
    chatCompletion: () => process.env.DEBUG_LMSTUDIO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73f93060a3cb2c88 — Environment-variable access.
repo/packages/model-runtime/src/providers/longcat/index.ts:30 
    chatCompletion: () => process.env.DEBUG_LONGCAT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64043777db8703b5 — Environment-variable access.
repo/packages/model-runtime/src/providers/minimax/index.ts:298 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6bdf5ae7d5b62ba7 — Environment-variable access.
repo/packages/model-runtime/src/providers/minimax/index.ts:319 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2807d01e5081245d — Environment-variable access.
repo/packages/model-runtime/src/providers/minimaxCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_MINIMAX_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #461f5cfaa1eba3e2 — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:39 
      delete process.env.DEBUG_MISTRAL_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02eefc12a0afb162 — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:45 
      process.env.DEBUG_MISTRAL_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90fbaf06f64137f6 — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.test.ts:48 
      delete process.env.DEBUG_MISTRAL_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68b24f357ec69094 — Environment-variable access.
repo/packages/model-runtime/src/providers/mistral/index.ts:59 
    chatCompletion: () => process.env.DEBUG_MISTRAL_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2902e46594710301 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:44 
      delete process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b61045245ef1f70 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:50 
      process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ceb429676096323d — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.test.ts:56 
      process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18329b9d79f3a796 — Environment-variable access.
repo/packages/model-runtime/src/providers/modelscope/index.ts:17 
    chatCompletion: () => process.env.DEBUG_MODELSCOPE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae11a29643fb5b56 — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:140 
      delete process.env.DEBUG_MOONSHOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e25c35281ec6fac — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:146 
      process.env.DEBUG_MOONSHOT_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98fcf2a0c0d4fb6c — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.test.ts:149 
      delete process.env.DEBUG_MOONSHOT_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb93a305dad7d3e5 — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.ts:258 
    chatCompletion: () => process.env.DEBUG_MOONSHOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c33b2d50e48554f1 — Environment-variable access.
repo/packages/model-runtime/src/providers/moonshot/index.ts:275 
    chatCompletion: () => process.env.DEBUG_MOONSHOT_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db7b3bd9512bb3b9 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:47 
      delete process.env.DEBUG_NEBIUS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ab96ed8ae0bec05 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:52 
      process.env.DEBUG_NEBIUS_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4dffc0035022c2cc — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.test.ts:54 
      delete process.env.DEBUG_NEBIUS_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6b7ac3017023a53 — Environment-variable access.
repo/packages/model-runtime/src/providers/nebius/index.ts:25 
    chatCompletion: () => process.env.DEBUG_NEBIUS_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a5e8a3d750465d8 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:38 
    delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a60137a120eea293 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:43 
    delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d2c04a7cfafc428 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:48 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6631acc712eb9e5 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:49 
      const debugResult = process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aca22e052a6ff9ac — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:54 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfad2834cce427e1 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:55 
      const debugResult = process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #362621f17f066f4e — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:683 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33dbf3ed25ffbaab — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:689 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a71b2e0dc19f85e — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:692 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9484611bbd9136a7 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:696 
      process.env.DEBUG_NEWAPI_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #112d8008c103bd17 — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.test.ts:699 
      delete process.env.DEBUG_NEWAPI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f381ec751328b3b — Environment-variable access.
repo/packages/model-runtime/src/providers/newapi/index.ts:76 
    chatCompletion: () => process.env.DEBUG_NEWAPI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b106d53e17977c0 — Environment-variable access.
repo/packages/model-runtime/src/providers/novita/index.ts:23 
    chatCompletion: () => process.env.DEBUG_NOVITA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6d963ee58ab47ec — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:235 
      process.env.DEBUG_NVIDIA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53c29a60c8ce3bd2 — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:238 
      delete process.env.DEBUG_NVIDIA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #730b7e9d371f60da — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.test.ts:242 
      delete process.env.DEBUG_NVIDIA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75264d2c592c250d — Environment-variable access.
repo/packages/model-runtime/src/providers/nvidia/index.ts:82 
    chatCompletion: () => process.env.DEBUG_NVIDIA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aada4eab5d528c0a — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:303 
        const originalDebugValue = process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef7f919aa2bf5c99 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:304 
        process.env.DEBUG_OLLAMA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #303ec50042b49cf0 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:326 
        process.env.DEBUG_OLLAMA_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f5057ff8e865788 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1041 
      delete process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0493129749dd2660 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1047 
      process.env.DEBUG_OLLAMA_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c3204aa756d703a — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.test.ts:1050 
      delete process.env.DEBUG_OLLAMA_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9e97c55e3e63d5b — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.ts:34 
    chatCompletion: () => process.env.DEBUG_OLLAMA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21051478d0a30731 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollama/index.ts:81 
      if (process.env.DEBUG_OLLAMA_CHAT_COMPLETION === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a20fe5d7987294e — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:52 
      delete process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93c9949269960333 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:58 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c641f6d16be57439 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:64 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95039f9d6e2f0069 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.test.ts:70 
      process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cccff638ed05584 — Environment-variable access.
repo/packages/model-runtime/src/providers/ollamacloud/index.ts:20 
    chatCompletion: () => process.env.DEBUG_OLLAMA_CLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc01264ab64494ac — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:243 
        const originalDebugValue = process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e4d645af562ce0b — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:246 
        process.env.DEBUG_OPENAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b13c8129646d9cee — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:262 
        process.env.DEBUG_OPENAI_CHAT_COMPLETION = originalDebugValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c38ac73fbebd9bd — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:540 
      delete process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cce63e1e374e1d8 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:546 
      const originalEnv = process.env.DEBUG_OPENAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2552da7059ef652b — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:547 
      process.env.DEBUG_OPENAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b924b54e6832431 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:550 
      process.env.DEBUG_OPENAI_CHAT_COMPLETION = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fe898049ae9ba13 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:554 
      delete process.env.DEBUG_OPENAI_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #701b622c3c7b95a8 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:560 
      const originalEnv = process.env.DEBUG_OPENAI_RESPONSES;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efa8e11a22c7b1d4 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:561 
      process.env.DEBUG_OPENAI_RESPONSES = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0f32dd8ab5f3f14 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.test.ts:564 
      process.env.DEBUG_OPENAI_RESPONSES = originalEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5f7c4997ed63a6d — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:20 
const oaiSearchContextSize = process.env.OPENAI_SEARCH_CONTEXT_SIZE; // low, medium, high

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da7ec615e9db4184 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:21 
const enableServiceTierFlex = process.env.OPENAI_SERVICE_TIER_FLEX === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e891e632f08b5d5d — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:67 
    chatCompletion: () => process.env.DEBUG_OPENAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #812fa9cc5ce40006 — Environment-variable access.
repo/packages/model-runtime/src/providers/openai/index.ts:68 
    responses: () => process.env.DEBUG_OPENAI_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #d28c0ccc05401470 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:99 
    const res = await fetch(MODELS_DEV_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7d3fe90d10314927 — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:395 
    chatCompletion: () => process.env.DEBUG_OPENCODE_GO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #283535e0388887ee — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeCodingPlan/index.ts:408 
    chatCompletion: () => process.env.DEBUG_OPENCODE_GO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4568c0e6dc13388f — Environment-variable access.
repo/packages/model-runtime/src/providers/opencodeZen/index.ts:26 
    chatCompletion: () => process.env.DEBUG_OPENCODE_ZEN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ea3138c742ec8c8 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:80 
      delete process.env.DEBUG_OPENROUTER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8182b92cebd718f — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:86 
      process.env.DEBUG_OPENROUTER_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c17f38264b85e450 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.test.ts:89 
      delete process.env.DEBUG_OPENROUTER_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52d892e47494ac95 — Environment-variable access.
repo/packages/model-runtime/src/providers/openrouter/index.ts:93 
    chatCompletion: () => process.env.DEBUG_OPENROUTER_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c314119e1dd4c9ac — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/openrouter/index.ts:96 
    const response = await fetch('https://openrouter.ai/api/v1/models');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7b39e08faaa429c4 — Environment-variable access.
repo/packages/model-runtime/src/providers/perplexity/index.ts:42 
    chatCompletion: () => process.env.DEBUG_PERPLEXITY_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cc4cece6db5a7de — Environment-variable access.
repo/packages/model-runtime/src/providers/ppio/index.ts:15 
    chatCompletion: () => process.env.DEBUG_PPIO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2eb7fd28c6b959b2 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:37 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6da3f6524d25a4b6 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:43 
      process.env.DEBUG_QINIU_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e82c5573df5c3d2a — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:46 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48da2b2236751802 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:50 
      process.env.DEBUG_QINIU_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe6cc99d261b22a9 — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.test.ts:53 
      delete process.env.DEBUG_QINIU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fddc99fc7626069b — Environment-variable access.
repo/packages/model-runtime/src/providers/qiniu/index.ts:11 
    chatCompletion: () => process.env.DEBUG_QINIU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c307d35551db9b7b — Environment-variable access.
repo/packages/model-runtime/src/providers/qwen/index.ts:114 
            search_strategy: process.env.QWEN_SEARCH_STRATEGY || 'standard', // standard or pro

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #372049d0a1358487 — Environment-variable access.
repo/packages/model-runtime/src/providers/qwen/index.ts:126 
    chatCompletion: () => process.env.DEBUG_QWEN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e30b66a7ab3f4210 — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:416 
      process.env.DEBUG_REPLICATE === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #846b1fa79decd44c — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:417 
      process.env.DEBUG_REPLICATE_CHAT_COMPLETION === '1' ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cef273b5b7e326a4 — Environment-variable access.
repo/packages/model-runtime/src/providers/replicate/index.ts:418 
      process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c35f5a5e2daab0b3 — Environment-variable access.
repo/packages/model-runtime/src/providers/sambanova/index.ts:8 
    chatCompletion: () => process.env.DEBUG_SAMBANOVA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0eb185e1895d45f5 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:37 
      delete process.env.DEBUG_SEARCH1API_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9e6e939ca078138 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:43 
      process.env.DEBUG_SEARCH1API_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ce74c97ba215e73 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.test.ts:46 
      delete process.env.DEBUG_SEARCH1API_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ddc74a05abe6ce89 — Environment-variable access.
repo/packages/model-runtime/src/providers/search1api/index.ts:38 
    chatCompletion: () => process.env.DEBUG_SEARCH1API_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30c1f3f44a20c2e9 — Environment-variable access.
repo/packages/model-runtime/src/providers/sensenova/index.ts:50 
    chatCompletion: () => process.env.DEBUG_SENSENOVA_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a4d0ca4431c5d0e — Environment-variable access.
repo/packages/model-runtime/src/providers/siliconcloud/index.ts:142 
    chatCompletion: () => process.env.DEBUG_SILICONCLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #127d9f666d522565 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:43 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1f1f1932090a957 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:49 
      process.env.DEBUG_SPARK_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f2d761a468690f4 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:52 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7343cf2f5e1fee8 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:56 
      process.env.DEBUG_SPARK_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c391951bfb3b187b — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:59 
      delete process.env.DEBUG_SPARK_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2fce2419d3dd4a40 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:111 
      delete process.env.SPARK_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e3fac0cf049f06d — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:125 
      process.env.SPARK_SEARCH_MODE = 'deep';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56940a5118abe0e0 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.test.ts:136 
      delete process.env.SPARK_SEARCH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0b222b16d535231 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.ts:46 
                search_mode: process.env.SPARK_SEARCH_MODE || 'normal', // normal or deep

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #232b1f73bb4aed56 — Environment-variable access.
repo/packages/model-runtime/src/providers/spark/index.ts:67 
    chatCompletion: () => process.env.DEBUG_SPARK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91926ece42685ef2 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:47 
      delete process.env.DEBUG_STEPFUN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31104ddf702bb6fb — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:52 
      process.env.DEBUG_STEPFUN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d1a2da6bd2c8568 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.test.ts:54 
      delete process.env.DEBUG_STEPFUN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62f78bc02e8e5344 — Environment-variable access.
repo/packages/model-runtime/src/providers/stepfun/index.ts:38 
    chatCompletion: () => process.env.DEBUG_STEPFUN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e83c591cec280a4 — Environment-variable access.
repo/packages/model-runtime/src/providers/straico/index.ts:40 
    chatCompletion: () => process.env.DEBUG_STRAICO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #6b244e6f76bcbde9 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/straico/index.ts:44 
    const response = await fetch(url, {
      headers: {
        Authorization: `Bearer ${client.apiKey}`,
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #228467acf5e9d7cd — Environment-variable access.
repo/packages/model-runtime/src/providers/streamlake/index.ts:19 
    chatCompletion: () => process.env.DEBUG_STREAMLAKE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43aff0cae0374f82 — Environment-variable access.
repo/packages/model-runtime/src/providers/superGrok/index.ts:31 
    chatCompletion: () => process.env.DEBUG_SUPERGROK_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #462a4452ad3e8550 — Environment-variable access.
repo/packages/model-runtime/src/providers/superGrok/index.ts:32 
    responses: () => process.env.DEBUG_SUPERGROK_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7bff7bd04362f518 — Environment-variable access.
repo/packages/model-runtime/src/providers/taichu/index.ts:21 
    chatCompletion: () => process.env.DEBUG_TAICHU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a45ee963021db46 — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:40 
      delete process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f649f6911c69648a — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:44 
      process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #296357d0259cb701 — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.test.ts:48 
      delete process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd2e6ba86db72df1 — Environment-variable access.
repo/packages/model-runtime/src/providers/tencentcloud/index.ts:14 
    chatCompletion: () => process.env.DEBUG_TENCENT_CLOUD_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8743a9b99edf0ca0 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:47 
      delete process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b24ac019270a0b8c — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:51 
      process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc46203e97cf1892 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.test.ts:55 
      delete process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f72191e03b744d30 — Environment-variable access.
repo/packages/model-runtime/src/providers/togetherai/index.ts:17 
    chatCompletion: () => process.env.DEBUG_TOGETHERAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75ed5d60cd443f92 — Environment-variable access.
repo/packages/model-runtime/src/providers/upstage/index.ts:8 
    chatCompletion: () => process.env.DEBUG_UPSTAGE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5756415ec1bab78 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:61 
      delete process.env.DEBUG_V0_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #443383ff6a96bb4c — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:67 
      process.env.DEBUG_V0_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b097e66f8cafcb2c — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:73 
      process.env.DEBUG_V0_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1bba6fd7dde3e8f — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.test.ts:79 
      process.env.DEBUG_V0_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fecb4a3297bc969 — Environment-variable access.
repo/packages/model-runtime/src/providers/v0/index.ts:14 
    chatCompletion: () => process.env.DEBUG_V0_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5775552c6c315a30 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:51 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a453aaa27c3c071 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:57 
      process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #603d4ae49cb23771 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:60 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95a5b964fbb2c753 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:64 
      process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #051be7b335d889d1 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.test.ts:67 
      delete process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b715bfa3a253aac0 — Environment-variable access.
repo/packages/model-runtime/src/providers/vercelaigateway/index.ts:87 
    chatCompletion: () => process.env.DEBUG_VERCELAIGATEWAY_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2aff57109f514f7 — Environment-variable access.
repo/packages/model-runtime/src/providers/vllm/index.ts:13 
    chatCompletion: () => process.env.DEBUG_VLLM_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f77e4a7f7afd159 — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengine/index.ts:70 
    chatCompletion: () => process.env.DEBUG_VOLCENGINE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a845e76fba5c9225 — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengine/index.ts:71 
    responses: () => process.env.DEBUG_VOLCENGINE_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0b876039a1579f1 — Environment-variable access.
repo/packages/model-runtime/src/providers/volcengineCodingPlan/index.ts:28 
    chatCompletion: () => process.env.DEBUG_VOLCENGINE_CODING_PLAN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4382937266a6392 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:126 
      delete process.env.DEBUG_WENXIN_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6619ebf9db1b1e58 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:132 
      process.env.DEBUG_WENXIN_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #900018c53e1575e5 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.test.ts:138 
      process.env.DEBUG_WENXIN_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f75d1bac98466091 — Environment-variable access.
repo/packages/model-runtime/src/providers/wenxin/index.ts:49 
    chatCompletion: () => process.env.DEBUG_WENXIN_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b19e226af7b5d770 — Environment-variable access.
repo/packages/model-runtime/src/providers/xai/index.ts:149 
    chatCompletion: () => process.env.DEBUG_XAI_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #942625005d06f9e8 — Environment-variable access.
repo/packages/model-runtime/src/providers/xai/index.ts:150 
    responses: () => process.env.DEBUG_XAI_RESPONSES === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad02fce4be262bec — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:277 
      delete process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #632fced122484af6 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:283 
      process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d768a40dada3ec2 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.test.ts:286 
      delete process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28627761d90eba83 — Environment-variable access.
repo/packages/model-runtime/src/providers/xiaomimimo/index.ts:107 
    chatCompletion: () => process.env.DEBUG_XIAOMIMIMO_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5141315e8eb908d1 — Environment-variable access.
repo/packages/model-runtime/src/providers/xinference/index.ts:18 
    chatCompletion: () => process.env.DEBUG_XINFERENCE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54c46b4938ada71e — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:31 
    delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8251bdc806e366f — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:36 
    delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6948cd6f79d508c5 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:41 
      delete process.env.DEBUG_ZENMUX_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af8c0ca333e0b027 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:42 
      const debugResult = process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49e36063bee9d688 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:47 
      process.env.DEBUG_ZENMUX_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f195efdf227ea255 — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.test.ts:48 
      const debugResult = process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2982d5c31867a9ae — Environment-variable access.
repo/packages/model-runtime/src/providers/zenmux/index.ts:39 
    chatCompletion: () => process.env.DEBUG_ZENMUX_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f8ae1721d21481b — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:55 
      delete process.env.DEBUG_ZEROONE_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e46aafb3b9ae24f — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:61 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36873bbe3b2b7e52 — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:67 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2c60d319726c725 — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.test.ts:73 
      process.env.DEBUG_ZEROONE_CHAT_COMPLETION = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de505016d57c6a73 — Environment-variable access.
repo/packages/model-runtime/src/providers/zeroone/index.ts:14 
    chatCompletion: () => process.env.DEBUG_ZEROONE_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #170c9a4e2ad230f1 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:44 
      delete process.env.DEBUG_ZHIPU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b38fa02ce1addbe — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:50 
      process.env.DEBUG_ZHIPU_CHAT_COMPLETION = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6e628108cdadf40 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:53 
      delete process.env.DEBUG_ZHIPU_CHAT_COMPLETION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e59f4d987e579597 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:112 
        process.env.ZHIPU_SEARCH_ENGINE = 'search_pro';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb6fd68ab34314d9 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.test.ts:129 
        delete process.env.ZHIPU_SEARCH_ENGINE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f3802ebb5dfe818 — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.ts:85 
                search_engine: process.env.ZHIPU_SEARCH_ENGINE || 'search_std', // search_std, search_pro

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6d2dd61de5d043f — Environment-variable access.
repo/packages/model-runtime/src/providers/zhipu/index.ts:215 
    chatCompletion: () => process.env.DEBUG_ZHIPU_CHAT_COMPLETION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #612b671016c67376 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/model-runtime/src/providers/zhipu/index.ts:220 
    const response = await fetch(url, {
      headers: {
        'Authorization': `Bearer ${client.apiKey}`,
        'Bigmodel-Organization': 'lobehub',
        'Bigmodel-Project': 'lobechat',
      },
      method: 'GET',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a017af276ab3f686 — Filesystem access.
repo/packages/model-runtime/src/utils/modelConfigImport.test.ts:13 
        readFile(path.resolve(utilsDir, file), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm)

npm first-party
high pii_flow production #1d6aa39b4541c036 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/docsWorkflow/utils.ts:96 · flow /tmp/closeopen-g59q7b0s/repo/scripts/docsWorkflow/utils.ts:87 → /tmp/closeopen-g59q7b0s/repo/scripts/docsWorkflow/utils.ts:96 
    const response = await fetch(url, { headers });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #c6c47e75333c105d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:141 · flow /tmp/closeopen-g59q7b0s/repo/scripts/serverLauncher/startServer.js:131 → /tmp/closeopen-g59q7b0s/repo/scripts/serverLauncher/startServer.js:141 
      const res = await fetch(url, {
        method: 'POST',
        headers: {
          'Authorization': `Bearer ${KEY_VAULTS_SECRET}`,
          'Content-Type': 'application/json',
        },
        body: JSON.stringify({}),
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3d9d2bf6007b1b2f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/scripts/serverLauncher/startServer.js:185 · flow /tmp/closeopen-g59q7b0s/repo/scripts/serverLauncher/startServer.js:168 → /tmp/closeopen-g59q7b0s/repo/scripts/serverLauncher/startServer.js:185 
    const res = await fetch(url, {
      method: 'POST',
      headers: {
        'Authorization': `Bearer ${QSTASH_TOKEN}`,
        'Content-Type': 'application/json',
        'Upstash-Method': 'POST',
        'Upstash-Cron': '*/10 * * * *',
        'Upstash-Schedule-Id': 'lobe-task-schedule-dispatch',
      },
      body: JSON.stringify({}),
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #1f7ead83c73b728a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185 · flow /tmp/closeopen-g59q7b0s/repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 → /tmp/closeopen-g59q7b0s/repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:185 
          const response = await fetch(userInfoUrl, {
            headers: {
              'Content-Type': 'application/json',
              'x-lobe-trust-token': trustedClientToken,
            },
            method: 'GET',
          });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #cdbe9ca3697714ed — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150 · flow /tmp/closeopen-g59q7b0s/repo/src/layout/AuthProvider/MarketAuth/oidc.ts:142 → /tmp/closeopen-g59q7b0s/repo/src/layout/AuthProvider/MarketAuth/oidc.ts:150 
    const response = await fetch(tokenUrl, {
      body: body.toString(),
      headers: {
        'Content-Type': 'application/x-www-form-urlencoded',
      },
      method: 'POST',
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #12b489ad5bd46074 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/components/Analytics/HomePageTracker.tsx:15 
      analytics.track({
        name: 'main_page_view',
        properties: {
          spm: 'homepage.main_page.view',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #ed63cea3a83bcb2f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/AgentSetting/store/action.ts:316 
        analytics.track({
          name: 'agent_meta_updated',
          properties: {
            assistant_avatar: mergedMeta.avatar,
            assistant_background_color: mergedMeta.backgroundColor,
            assistant_description: mergedMeta.description,
            assistant_name: mergedMeta.title,
            assistant_tags: mergedMeta.tags,
            is_inbox: id === 'inbox',
            session_id: id || 'unknown',
            timestamp: Date.now(),
            user_id: useUserStore.getState().user?.id || 'anonymous',
          },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #b6551eee6fa5fccb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/Billboard/Carousel.tsx:146 
      analytics?.track({
        name: 'billboard_cta_clicked',
        properties: {
          billboard_slug: billboardSlug,
          item_id: item.id,
          link_url: item.linkUrl,
          position,
          spm: 'billboard.cta.clicked',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #557af8f86aa3d50e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/Billboard/Carousel.tsx:245 
      void analytics.track({
        name: 'billboard_served',
        properties: {
          billboard_slug: set.slug,
          item_count: set.items.length,
          spm: 'billboard.card.served',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #3107553b4dfd2bbf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/Billboard/index.tsx:48 
      analytics?.track({
        name: 'billboard_dismissed',
        properties: {
          billboard_slug: billboard.slug,
          item_count: billboard.items.length,
          spm: 'billboard.dismiss.clicked',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #55493cc68acbbd98 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/features/User/UserLoginOrSignup/trackLoginOrSignupClicked.ts:23 
    await analytics.track({
      name: 'login_or_signup_clicked',
      properties: {
        ...(lhCid && { lh_cid: lhCid }),
        ...(provider && { provider }),
        spm,
      },
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #70764f4857bd2108 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/libs/analytics/productUsageEvent.ts:27 
    await analytics.track(event);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e56e2a78c7eac06f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(main)/home/_layout/Footer/index.tsx:177 
        analytics?.track({ name: eventName, properties });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #adcebd63272c5b73 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(main)/home/_layout/Footer/index.tsx:188 
        analytics?.track({
          name: 'home_footer_menu_clicked',
          properties: { key, spm: `homepage.footer.${key}.clicked` },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #7b0bc1d1210c4edc — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(main)/home/_layout/Footer/index.tsx:451 
        analytics?.track({
          name: 'home_footer_menu_opened',
          properties: { keys: trackedMenuKeys.join(','), spm: 'homepage.footer.opened' },
        });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #35c7fa3d8d33e793 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/routes/(mobile)/(home)/features/SessionListContent/List/index.tsx:65 
                analytics?.track({
                  name: 'switch_session',
                  properties: {
                    assistant_name: session.meta?.title || 'Untitled Agent',
                    assistant_tags: session.meta?.tags || [],
                    group_id: sessionGroupId,
                    group_name: groupName,
                    session_id: id,
                    spm: 'homepage.chat.session_list_item.click',
                    user_id: userId || 'anonymous',
                  },
                });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #3a8eacb6b85911dd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/services/onboardingFeedback/index.ts:62 
    options.analytics?.track({
      name: FEEDBACK_EVENT_NAME,
      properties: {
        rating: payload.rating,
        spm: FEEDBACK_SPM,
      },
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #81ac0b7655dddd00 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/services/onboardingMetrics/index.ts:34 
    client.track({ name, properties });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #4bef72c618ce7d21 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/store/agent/slices/agent/action.ts:152 
      analytics.track({
        name: 'new_agent_created',
        properties: {
          agent_id: result.agentId,
          assistant_name: params.config?.title || 'Untitled Agent',
          assistant_tags: params.config?.tags || [],
          user_id: userId || 'anonymous',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #9b343d6c3dbfd0b8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/src/store/session/slices/session/action.ts:80 
      analytics.track({
        name: 'new_agent_created',
        properties: {
          assistant_name: newSession.meta?.title || 'Untitled Agent',
          assistant_tags: newSession.meta?.tags || [],
          session_id: id,
          user_id: userId || 'anonymous',
        },
      });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 620 low-confidence finding(s)
low env_fs production #92e800c963ae322d — Filesystem access.
repo/.agents/scripts/check/autofix.ts:39 
        return [file, await readFile(path.join(rootDir(), file), 'utf8')];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02416e0b44120b64 — Filesystem access.
repo/.agents/scripts/check/autofix.ts:62 
      current = await readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14a95d9f77b0f9c4 — Filesystem access.
repo/.agents/scripts/check/autofix.ts:69 
    await writeFile(origCopy, original);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecef3a352b698d2c — Filesystem access.
repo/.agents/scripts/check/autofix.ts:85 
  await writeFile(diffFile, diffs.map((entry) => entry.diff).join('\n\n') + '\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f60b74327a3f7a5 — Filesystem access.
repo/.agents/scripts/check/check.test.ts:84 
    const pkg = JSON.parse(await readFile(path.join(repoRoot, 'package.json'), 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6eeac54fe4cb476b — Filesystem access.
repo/.agents/scripts/check/delegate.ts:29 
    content = await readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c28ff8f299007ae8 — Filesystem access.
repo/.agents/scripts/check/delegate.ts:41 
    const pkg = JSON.parse(await readFile(path.join(hostRoot, 'package.json'), 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1321f63473e3f94 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:99 
  const raw = await readFile(tracePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4297c4d35ff2ad9 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:204 
  const raw = await readFile(resultPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f42960c3fcde23d1 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm-analyze.mjs:209 
    await writeFile(resultPath, `${JSON.stringify(result, null, 2)}\n`, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdf7d6fc37784f5b — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:99 
    checkItemId: process.env.AGENT_BROWSER_KLM_CHECK || process.env.KLM_CHECK_ITEM_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c972847195c7025 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:100 
    label: process.env.AGENT_BROWSER_KLM_LABEL || process.env.KLM_LABEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #227c8fd12dd4a97c — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:101 
    phaseId: process.env.AGENT_BROWSER_KLM_PHASE || process.env.KLM_PHASE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8332ed7d6551b9ea — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:102 
    surface: process.env.AGENT_BROWSER_KLM_SURFACE || process.env.KLM_SURFACE || 'web',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97f3f6e4d5abae7a — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:103 
    commandTimeoutMs: parseNumber(process.env.AGENT_BROWSER_KLM_COMMAND_TIMEOUT_MS, undefined),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2cb6a8244cec332 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:105 
      process.env.AGENT_BROWSER_KLM_TRACE ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bcc6c6b3afd01aa — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:106 
      process.env.INTERACTION_TRACE ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa72a7d97eadb3a9 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:109 
  let binary = process.env.AGENT_BROWSER_BIN || 'agent-browser';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0e21f1af601ecf4 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-browser-klm.mjs:325 
    const text = readFileSync(file, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9123d715b738080d — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/analyze-events.ts:32 
const raw = readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #844f807193a5d93f — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/analyze.mjs:29 
const raw = JSON.parse(fs.readFileSync(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cfe6496e2143a1e — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:26 
const WS_BASE = process.env.GATEWAY_WS || 'ws://localhost:8787';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdd3ef540d79b22e — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:30 
  const m = readFileSync(p, 'utf8').match(/^JWKS_KEY=(.*)$/m);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c22afc4fd54e5134 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:34 
  process.env.JWKS_KEY?.trim() ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41ff45e05df51376 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/local-gateway-probe.mjs:35 
  fromFile(process.env.JWKS_SOURCE) ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #250a2512cdfb02f5 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/agent-gateway/run.ts:153 
  writeFileSync(dumpPath, json, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37b2e1431b318c96 — Filesystem access.
repo/.agents/skills/agent-testing/scripts/cdp-capture.cjs:106 
  fs.writeFileSync(OUT, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8451e5121825f6bb — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:11 
const endpoint = process.env.S3_ENDPOINT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a141f00d70478576 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:12 
const bucket = process.env.S3_BUCKET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #17135058360fea33 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:21 
    accessKeyId: process.env.S3_ACCESS_KEY_ID || 'S3RVER',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #467d43f83d03ac1b — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:22 
    secretAccessKey: process.env.S3_SECRET_ACCESS_KEY || 'S3RVER',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e0b579b78993221 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:25 
  forcePathStyle: process.env.S3_ENABLE_PATH_STYLE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eaa548d714a86e5f — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/check-s3.mjs:26 
  region: process.env.S3_REGION || 'us-east-1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a6bd09646a7fcd5 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:8 
const port = Number(process.env.S3_DEV_PORT || 29_000);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f0ad70a54c0929d — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:9 
const address = process.env.S3_DEV_ADDRESS || '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44709141636acc4d — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:10 
const bucket = process.env.S3_BUCKET || 'agent-testing-bucket';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dac37776ab450bbe — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:11 
const directory = path.resolve(process.env.S3_DATA_DIR || '.records/data/agent-testing-s3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #457d2c293a7b71f9 — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:14 
for (const candidate of [process.env.APP_URL, process.env.S3_ALLOWED_ORIGIN]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fee97c537a0786b — Environment-variable access.
repo/.agents/skills/agent-testing/scripts/start-s3.mjs:23 
for (const candidatePort of [process.env.PORT, process.env.SPA_PORT, process.env.VITE_DEV_PORT]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #669157c20bced51e — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:17 
const map: Record<string, string> = JSON.parse(readFileSync(mapPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a82c49fb6b4f2c25 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:28 
  const lines = readFileSync(path, 'utf8').split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32f09569b650bec8 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-cutoffs.ts:65 
    writeFileSync(path, out.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0cdc8cb86225b6b1 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:5 
  readFileSync('/tmp/family-map.json', 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f62aeae1a00a165d — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:14 
  const lines = readFileSync(path, 'utf8').split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53753ef59482654e — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/apply-family.ts:45 
    writeFileSync(path, out.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #047b3cb885416e78 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/derive-family.ts:11 
const ids: string[] = JSON.parse(readFileSync('/tmp/model-ids.json', 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95edac59b620db5d — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/derive-family.ts:235 
  writeFileSync('/tmp/family-map.json', JSON.stringify(map, null, 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de4d20bfc2f21a71 — Filesystem access.
repo/.agents/skills/model-bank-metadata/scripts/extract-model-ids.ts:22 
writeFileSync(out, JSON.stringify([...ids].sort(), null, 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #40acbf25e57e9162 — Environment-variable access.
repo/.github/scripts/auto-close-duplicates.ts:94 
  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ebe5f7db3ee21741 — Environment-variable access.
repo/.github/scripts/auto-close-duplicates.ts:100 
  const owner = process.env.GITHUB_REPOSITORY_OWNER || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ca46533933874b8 — Environment-variable access.
repo/.github/scripts/auto-close-duplicates.ts:101 
  const repo = process.env.GITHUB_REPOSITORY_NAME || 'lobe-chat';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cdb68883903a97f0 — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:157 
  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7b45d4edeb96b542 — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:160 
  const owner = process.env.GITHUB_REPOSITORY_OWNER || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #df6ebb20b24cccf7 — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:161 
  const repo = process.env.GITHUB_REPOSITORY_NAME || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3184d52abb34d14e — Environment-variable access.
repo/.github/scripts/auto-handle-mcp-submission.ts:162 
  const issueNumber = Number(process.env.ISSUE_NUMBER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ada56b3a91e65bc0 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:13 
    validateEnv: process.env.ERROR_VALIDATE_ENV || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8dcef85a541b255b — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:14 
    rebaseAttempt: process.env.ERROR_REBASE_ATTEMPT || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d0126485c43bba62 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:15 
    createBranch: process.env.ERROR_CREATE_BRANCH || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c63c9b286e0073db — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:16 
    installDeps: process.env.ERROR_INSTALL_DEPS || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #35d0d702ab2e0f91 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:17 
    runI18n: process.env.ERROR_RUN_I18N || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f6441349d591440e — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:18 
    commitPush: process.env.ERROR_COMMIT_PUSH || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #77d28e5f169eb05f — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:23 
    validateEnv: process.env.STEP_VALIDATE_ENV || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b8b43917088bf8ec — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:24 
    checkBranch: process.env.STEP_CHECK_BRANCH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #66c21127ec872ee9 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:25 
    rebaseAttempt: process.env.STEP_REBASE_ATTEMPT || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c8a721eb95da5402 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:26 
    createBranch: process.env.STEP_CREATE_BRANCH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #02e4ae9424609451 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:27 
    installDeps: process.env.STEP_INSTALL_DEPS || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8a9e3287eb087489 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:28 
    runI18n: process.env.STEP_RUN_I18N || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a49993b1cf6b4eae — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:29 
    commitPush: process.env.STEP_COMMIT_PUSH || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #57d910ddf3e00f4a — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:30 
    createPr: process.env.STEP_CREATE_PR || 'Not run',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e48ca223c40e3f6d — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:77 
- **Runner OS:** ${process.env.RUNNER_OS || 'Unknown'}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #584ca16303ca71e3 — Environment-variable access.
repo/.github/scripts/create-failure-issue.js:78 
- **Bun Version:** ${process.env.BUN_VERSION || 'Default'}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b2481ec36171a924 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:63 
  const outputPath = process.env.GITHUB_OUTPUT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d7fab563a918bd41 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:105 
  const token = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2e288015105bbe45 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:108 
  const repository = process.env.GITHUB_REPOSITORY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #da65658ebcc28dff — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:110 
  const owner = process.env.GITHUB_REPOSITORY_OWNER || repositoryOwner || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c1738e9aca652525 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:111 
  const repo = process.env.GITHUB_REPOSITORY_NAME || repositoryName || 'lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cf1b726d6db8fb42 — Environment-variable access.
repo/.github/scripts/should-run-dedupe.ts:112 
  const issueNumber = Number(process.env.ISSUE_NUMBER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3bbe09e3d585595d — Filesystem access.
repo/.i18nrc.js:37 
      fs.readFileSync(path.join(__dirname, 'docs/glossary.mdx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c369636b4d9ca7ae — Environment-variable access.
repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:16 
const AGENT_ID = process.env.AGENT_FS_E2E_AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f6c46fd8d47ce12 — Environment-variable access.
repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:17 
const CLI = process.env.LH_CLI_PATH || 'LOBEHUB_CLI_HOME=.lobehub-dev bun src/index.ts';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #400bddd468b9bc90 — Environment-variable access.
repo/apps/cli/e2e/agent-fs-vfs.e2e.test.ts:23 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0520e1b15cd179ec — Environment-variable access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:26 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe3bbc784ac2ea82 — Environment-variable access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:27 
const AGENT_ID = process.env.AGENT_SIGNAL_AGENT_ID || process.env.AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3fd4645782de946 — Filesystem access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:33 
const golden = JSON.parse(readFileSync(goldenPath, 'utf-8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9de68e159a3041eb — Environment-variable access.
repo/apps/cli/e2e/agent-signal.e2e.test.ts:38 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6dc95962b54ccede — Environment-variable access.
repo/apps/cli/e2e/agent.e2e.test.ts:18 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b6cf1f1ebc6c33a — Environment-variable access.
repo/apps/cli/e2e/agent.e2e.test.ts:24 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da963f7a2dbf8145 — Environment-variable access.
repo/apps/cli/e2e/doc.e2e.test.ts:19 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec0a93cf57ab6d3a — Environment-variable access.
repo/apps/cli/e2e/doc.e2e.test.ts:25 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #befbed9647b72a6a — Filesystem access.
repo/apps/cli/e2e/doc.e2e.test.ts:146 
      fs.writeFileSync(tmpFile, '# File Content\nFrom body-file flag');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8072b544521fc17 — Filesystem access.
repo/apps/cli/e2e/doc.e2e.test.ts:197 
      fs.writeFileSync(tmpFile, '# Created from file\nTest content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5097ce1eca44e6cf — Filesystem access.
repo/apps/cli/e2e/doc.e2e.test.ts:229 
      fs.writeFileSync(tmpFile, JSON.stringify(docs));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbd90609ae9f9523 — Environment-variable access.
repo/apps/cli/e2e/file.e2e.test.ts:17 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e24535a741ed133 — Environment-variable access.
repo/apps/cli/e2e/file.e2e.test.ts:23 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90e12037e2bb1eb0 — Filesystem access.
repo/apps/cli/e2e/file.e2e.test.ts:88 
      fs.writeFileSync(tmpFile, 'hello from lh e2e upload');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4b235c5f895f351 — Filesystem access.
repo/apps/cli/e2e/file.e2e.test.ts:101 
      fs.writeFileSync(tmpFile, 'hello from lh e2e --file upload');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7fe6632b4faf201f — Environment-variable access.
repo/apps/cli/e2e/generate.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9574317b5e1f65dd — Environment-variable access.
repo/apps/cli/e2e/generate.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #425bffca929848f3 — Environment-variable access.
repo/apps/cli/e2e/kb.e2e.test.ts:19 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29782920c1d8b5d1 — Environment-variable access.
repo/apps/cli/e2e/kb.e2e.test.ts:25 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfecf551fcd6a892 — Filesystem access.
repo/apps/cli/e2e/kb.e2e.test.ts:221 
      fs.writeFileSync(tmpFile, 'E2E upload test content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70e498f2920209e0 — Environment-variable access.
repo/apps/cli/e2e/memory.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7891de2a8fa66582 — Environment-variable access.
repo/apps/cli/e2e/memory.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf4a29af66241ff0 — Environment-variable access.
repo/apps/cli/e2e/message.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a49512d4e3bcd6f2 — Environment-variable access.
repo/apps/cli/e2e/message.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #382f9f4b676540d3 — Environment-variable access.
repo/apps/cli/e2e/model.e2e.test.ts:17 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d6c86508579b719 — Environment-variable access.
repo/apps/cli/e2e/model.e2e.test.ts:24 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af3e7ac679f3f40f — Environment-variable access.
repo/apps/cli/e2e/plugin.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46d2b78d8486b5b1 — Environment-variable access.
repo/apps/cli/e2e/plugin.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d31f8ae9ee56cf8d — Environment-variable access.
repo/apps/cli/e2e/provider.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6968538ae0c9ee97 — Environment-variable access.
repo/apps/cli/e2e/provider.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94d2e383a92173da — Environment-variable access.
repo/apps/cli/e2e/search.e2e.test.ts:14 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71b706d9359641ea — Environment-variable access.
repo/apps/cli/e2e/search.e2e.test.ts:20 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7252b1e9597ea2f4 — Environment-variable access.
repo/apps/cli/e2e/skill.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d1434b6742dbd2c — Environment-variable access.
repo/apps/cli/e2e/skill.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7ec16fc4150adff — Environment-variable access.
repo/apps/cli/e2e/topic.e2e.test.ts:16 
const CLI = process.env.LH_CLI_PATH || 'lh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d54e6d5d9a575087 — Environment-variable access.
repo/apps/cli/e2e/topic.e2e.test.ts:22 
    env: { ...process.env, PATH: `${process.env.HOME}/.bun/bin:${process.env.PATH}` },

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d253fdc3680ff7a1 — Environment-variable access.
repo/apps/cli/src/api/client.ts:22 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95a7075512f21d22 — Environment-variable access.
repo/apps/cli/src/api/client.ts:32 
  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae0f93530648025e — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:19 
  const originalJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a56bf661d949399 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:20 
  const originalWorkspaceId = process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a4866a2066085c6 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:24 
    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79b26414906b71b2 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:25 
    delete process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca629269f50bc5dd — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:29 
    if (originalJwt === undefined) delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72bfe08f8935dd9e — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:30 
    else process.env.LOBEHUB_JWT = originalJwt;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92e947946a0427bc — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:32 
    if (originalWorkspaceId === undefined) delete process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fd7bc7753fce85c — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:33 
    else process.env.LOBEHUB_WORKSPACE_ID = originalWorkspaceId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f818cbc957d559c1 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:37 
    process.env.LOBEHUB_JWT = 'env-jwt';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84344f9b7816084e — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:38 
    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7aafd46bcebd489d — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:56 
    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e82e7096fedac386 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:71 
    process.env.LOBEHUB_JWT = 'env-jwt';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36fd6871ceda9df5 — Environment-variable access.
repo/apps/cli/src/api/http.test.ts:72 
    process.env.LOBEHUB_WORKSPACE_ID = 'workspace-1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8335e901149cb928 — Environment-variable access.
repo/apps/cli/src/api/http.ts:16 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fa6c73d3d7b682b — Environment-variable access.
repo/apps/cli/src/api/http.ts:33 
    if (process.env[CLI_API_KEY_ENV]) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #013ed301e2bc6a49 — Environment-variable access.
repo/apps/cli/src/api/http.ts:80 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e34ace966f9d9c4 — Environment-variable access.
repo/apps/cli/src/api/http.ts:90 
  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68b822d567505e90 — Environment-variable access.
repo/apps/cli/src/api/workspace.ts:10 
  const fromEnv = process.env.LOBEHUB_WORKSPACE_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba23fffa3dc7f9c8 — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:63 
      const raw = fs.readFileSync(credentialsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f1666c6e0298a57 — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:93 
      fs.writeFileSync(credentialsFile, JSON.stringify(testCredentials));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #434bcb64f8ad0af3 — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:100 
      const raw = fs.readFileSync(credentialsFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee495f862f37fb08 — Filesystem access.
repo/apps/cli/src/auth/credentials.test.ts:106 
      fs.writeFileSync(credentialsFile, 'not-valid-base64-or-json!!!');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a2dedd0020d072f — Environment-variable access.
repo/apps/cli/src/auth/credentials.ts:12 
const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #409c7b9ec31510a2 — Filesystem access.
repo/apps/cli/src/auth/credentials.ts:48 
  fs.writeFileSync(CREDENTIALS_FILE, encrypted, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #672277973a48afc4 — Filesystem access.
repo/apps/cli/src/auth/credentials.ts:53 
    const data = fs.readFileSync(CREDENTIALS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #acaad61be63302a5 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:16 
    (process.env.LOBEHUB_SERVER || 'https://app.lobehub.com').replace(/\/$/, ''),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f91213cb3374ccec — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:37 
  const originalApiKey = process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6d5236378d7c1cb — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:38 
  const originalJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45a349394820b0b5 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:39 
  const originalServer = process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44ccc375b8f54348 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:45 
    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95150ed04a483760 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:46 
    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #876904675d07ad09 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:47 
    delete process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f8b3f211ecbebd2 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:51 
    process.env.LOBEHUB_CLI_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #852f8702cca6146b — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:52 
    process.env.LOBEHUB_JWT = originalJwt;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80e234bfe906934b — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:53 
    process.env.LOBEHUB_SERVER = originalServer;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5eee3525638c0e78 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:109 
      process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f328209178015d7 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:124 
      process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea228b103b4fcbb4 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.test.ts:125 
      process.env.LOBEHUB_SERVER = 'https://self-hosted.example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c03c0111d7a60ed2 — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.ts:38 
  const envJwt = process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f77c31972327142c — Environment-variable access.
repo/apps/cli/src/auth/resolveToken.ts:73 
  const envApiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bdbaf2cc52e10bc — Filesystem access.
repo/apps/cli/src/commands/agent.test.ts:162 
    await writeFile(graphFile, JSON.stringify(graph), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f303e0b8ae100198 — Filesystem access.
repo/apps/cli/src/commands/agent.ts:22 
  const content = await readFile(graphFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d334b767dbab89ec — Filesystem access.
repo/apps/cli/src/commands/agent/spaceFs.ts:275 
    return readFileSync(options.contentFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f6195a0219681c9 — Filesystem access.
repo/apps/cli/src/commands/botMessage.test.ts:99 
    await writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #438936a118a64425 — Filesystem access.
repo/apps/cli/src/commands/botMessage.ts:87 
  const bytes = await readFile(raw);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23eafb6dc65d0ac2 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:8 
  const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #842a524926507924 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:16 
    delete process.env.LOBEHUB_COMP_CWORD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b76ed67c0595a4fb — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:17 
    process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03904fa7435b8948 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:39 
    process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49e14b4257a742d7 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:58 
    process.env.LOBEHUB_COMP_CWORD = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b9a69113ba2d62d — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:67 
    process.env.LOBEHUB_COMP_CWORD = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e806b68c9a581cd2 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:76 
    process.env.LOBEHUB_COMP_CWORD = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7518fa0126865a89 — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:85 
    process.env.LOBEHUB_COMP_CWORD = '2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34e983af79ed67fa — Environment-variable access.
repo/apps/cli/src/commands/completion.test.ts:94 
    process.env.LOBEHUB_COMP_CWORD = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3491b60afa8c71ba — Environment-variable access.
repo/apps/cli/src/commands/completion.ts:23 
      const currentWordIndex = parseCompletionWordIndex(process.env.LOBEHUB_COMP_CWORD, words);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2407e377f11f3691 — Environment-variable access.
repo/apps/cli/src/commands/connect.ts:106 
      const isServiceChild = options.serviceChild || process.env.LOBEHUB_CONNECT_SERVICE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12743d72a56fc293 — Environment-variable access.
repo/apps/cli/src/commands/connect.ts:108 
        options.daemonChild || isServiceChild || process.env.LOBEHUB_DAEMON === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #913ef0d319f3733d — Environment-variable access.
repo/apps/cli/src/commands/connect.ts:369 
  const channel = process.env.LOBEHUB_CLI_CHANNEL || 'cli';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22f6f51cd32b6dcf — Filesystem access.
repo/apps/cli/src/commands/doc.ts:18 
    return fs.readFileSync(options.bodyFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de6bfb49253453bd — Filesystem access.
repo/apps/cli/src/commands/doc.ts:168 
        const raw = fs.readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b372cbfce752123 — Filesystem access.
repo/apps/cli/src/commands/file.test.ts:220 
      fs.writeFileSync(tmpFile, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adba36b096b8ecf6 — Filesystem access.
repo/apps/cli/src/commands/file.test.ts:257 
      fs.writeFileSync(tmpFile, '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #678450b6f8a530b8 — Filesystem access.
repo/apps/cli/src/commands/file.test.ts:281 
      fs.writeFileSync(tmpFile, 'dedup me');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c33643c9c9026de — Filesystem access.
repo/apps/cli/src/commands/generate.test.ts:376 
      await fsWriteFile(bigPath, Buffer.alloc(4 * 1024 * 1024));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8b04137e6c30d1c — Filesystem access.
repo/apps/cli/src/commands/generate/asr.ts:59 
            await writeFile(tempPath, downloaded.bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #223d54c885f960a5 — Filesystem access.
repo/apps/cli/src/commands/generate/asr.ts:90 
            const bytes = await readFile(localPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #695fe2eacee0f8db — Filesystem access.
repo/apps/cli/src/commands/generate/tts.ts:54 
        writeFileSync(options.output, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #654d713a06c70cb1 — Filesystem access.
repo/apps/cli/src/commands/hetero.test.ts:434 
    await writeFile(
      file,
      JSON.stringify([
        { text: 'analyze', type: 'text' },
        { source: { type: 'url', url: 'https://x/y.png' }, type: 'image' },
      ]),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc1a8a42cd0a467b — Filesystem access.
repo/apps/cli/src/commands/hetero.test.ts:1127 
    const meta = JSON.parse(await readFile(path.join(sessionDir, 'meta.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc4c650411b2e3f9 — Filesystem access.
repo/apps/cli/src/commands/hetero.test.ts:1131 
    const stderrDump = await readFile(path.join(sessionDir, 'attempt-1.stderr.log'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da9897649907cbd8 — Filesystem access.
repo/apps/cli/src/commands/hetero.ts:141 
  return readFile(location, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88018d4eb147a023 — Filesystem access.
repo/apps/cli/src/commands/hetero.ts:388 
      await writeFile(
        path.join(dir, 'meta.json'),
        `${JSON.stringify({ ...meta, operationId, startedAt: new Date().toISOString() }, null, 2)}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a098f93fcc858196 — Environment-variable access.
repo/apps/cli/src/commands/hetero.ts:494 
      process.env.LOBEHUB_ASSISTANT_MESSAGE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #613518dd78cb782c — Filesystem access.
repo/apps/cli/src/commands/hetero.ts:529 
    await writeFile(
      askMcpConfigPath,
      JSON.stringify({
        mcpServers: {
          lobe_cc: {
            alwaysLoad: true,
            type: 'http',
            url: askServer.urlForOperation(operationId),
          },
        },
      }),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7005f0d4e5d543e8 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:44 
  const originalApiKey = process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fbd7ef2b8b0d452 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:45 
  const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e53c343a669f895 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:46 
  const originalPathext = process.env.PATHEXT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #293c82db3f217541 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:47 
  const originalSystemRoot = process.env.SystemRoot;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd90d22b890bdeac — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:54 
    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ea7a991ad0f2a51 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:60 
    process.env.LOBEHUB_CLI_API_KEY = originalApiKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c3093b7a7c76b7a — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:61 
    process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae719bbcc0b559d7 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:62 
    process.env.PATHEXT = originalPathext;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #581c14e863154d44 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:63 
    process.env.SystemRoot = originalSystemRoot;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c1ad35ba3d697f6 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:145 
    process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-env-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39ea543d2ef7e0b0 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:187 
    process.env.LOBEHUB_CLI_API_KEY = 'sk-lh-env-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c1b9d2f00560e94 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:346 
    process.env.PATH = 'C:\\Tools';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3535371e60800c89 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:347 
    process.env.PATHEXT = '.EXE;.CMD';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afeb9e43d37aed77 — Environment-variable access.
repo/apps/cli/src/commands/login.test.ts:348 
    process.env.SystemRoot = 'C:\\Windows';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c8e47fbd017ed28 — Environment-variable access.
repo/apps/cli/src/commands/login.ts:65 
      const apiKey = process.env[CLI_API_KEY_ENV];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a265523932ef7efd — Environment-variable access.
repo/apps/cli/src/commands/login.ts:270 
  const pathValue = process.env.PATH || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f661f16ac28d48de — Environment-variable access.
repo/apps/cli/src/commands/login.ts:275 
    const pathext = (process.env.PATHEXT || '.COM;.EXE;.BAT;.CMD').split(';').filter(Boolean);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e56fe5ec0d9c1248 — Environment-variable access.
repo/apps/cli/src/commands/login.ts:280 
    const systemRoot = process.env.SystemRoot || process.env.WINDIR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1b15bf653283631 — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.test.ts:71 
  fs.writeFileSync(fullPath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d004878d8a796491 — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.test.ts:277 
      fs.writeFileSync(binPath, Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x00, 0x00, 0x01]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b93d7a2a06c200e — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.ts:198 
    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7034c119245d3e8d — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.ts:231 
    ig.add(fs.readFileSync(gitignorePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f1397f77b8bb1cb — Filesystem access.
repo/apps/cli/src/commands/migrate/openclaw.ts:432 
            const content = fs.readFileSync(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #234851fcb7ea9b62 — Filesystem access.
repo/apps/cli/src/commands/topic.ts:148 
        const content = fs.readFileSync(options.file, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd61b32497fe888f — Environment-variable access.
repo/apps/cli/src/commands/update.ts:31 
  const ua = process.env.npm_config_user_agent;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6f8539f003755e9 — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:209 
    expect(readFileSync(path.join(skillDir, 'SKILL.md'), 'utf8')).toBe('# Verify SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1459f535be5be40 — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:210 
    expect(readFileSync(path.join(skillDir, 'references/plan-format.md'), 'utf8')).toBe('plan');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc3d4751d8220334 — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:211 
    expect(readFileSync(path.join(skillDir, 'surfaces/cli.md'), 'utf8')).toBe('cli');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #214b16056d5fe2b7 — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:227 
    expect(readFileSync(skillFile, 'utf8')).toBe('# Verify SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4f56e5caba13ac0 — Filesystem access.
repo/apps/cli/src/commands/verify.test.ts:230 
    expect(readFileSync(skillFile, 'utf8')).toBe('# Updated SKILL');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79a9a8419ee82c56 — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:444 
    process.env.LOBEHUB_AGENT_ID = 'agt_1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccb379253fcc2d99 — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:445 
    process.env.LOBEHUB_TOPIC_ID = 'tpc_1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d0b20988b6f226f — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:446 
    process.env.LOBEHUB_OPERATION_ID = 'op_1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5be93f6422a462fd — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:459 
    process.env.LOBEHUB_OPERATION_ID = 'op_authoring_run';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5018ee8be1fe0857 — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:467 
    delete process.env.LOBEHUB_AGENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95d097c073520ef2 — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:468 
    delete process.env.LOBEHUB_TOPIC_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #655f07ea269eb273 — Environment-variable access.
repo/apps/cli/src/commands/verify.test.ts:469 
    delete process.env.LOBEHUB_OPERATION_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18adc2d5ea759922 — Filesystem access.
repo/apps/cli/src/commands/verify.ts:76 
    const buffer = readFileSync(file);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a8900cb9aa5af2a — Environment-variable access.
repo/apps/cli/src/commands/verify.ts:358 
    agentId: firstString(process.env.LOBEHUB_AGENT_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #165f4e2786180b6e — Environment-variable access.
repo/apps/cli/src/commands/verify.ts:359 
    operationId: firstString(process.env.LOBEHUB_OPERATION_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56c3bb0e94a60a5a — Environment-variable access.
repo/apps/cli/src/commands/verify.ts:360 
    topicId: firstString(process.env.LOBEHUB_TOPIC_ID),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e404c9c37bf14907 — Filesystem access.
repo/apps/cli/src/commands/verify.ts:407 
    const parsed = JSON.parse(readFileSync(p, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a18365fa0ed0554c — Filesystem access.
repo/apps/cli/src/commands/verify.ts:416 
    writeFileSync(path.join(dir, RUN_SIDECAR), `${JSON.stringify({ verifyRunId }, null, 2)}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3108ce6493e11c5 — Filesystem access.
repo/apps/cli/src/commands/verify.ts:466 
          writeFileSync(dest, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31870ba5fd0a2e5d — Filesystem access.
repo/apps/cli/src/commands/verify.ts:1313 
          result = JSON.parse(readFileSync(resultPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06e578f6afc1aa2b — Filesystem access.
repo/apps/cli/src/commands/verify.ts:1322 
        const content = existsSync(reportMdPath) ? readFileSync(reportMdPath, 'utf8') : undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1890364baf773695 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:72 
      await writeFile(path.join(mockDir, 'daemon.pid'), 'not-a-number');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8dfefa35dca7860 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:217 
      const content = fs.readFileSync(getLogPath(), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec770a3c036bc9b0 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:228 
      await writeFile(logPath, bigContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41e10f600a0deec1 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:240 
      await writeFile(logPath, 'small content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a1799a23ed57e51 — Filesystem access.
repo/apps/cli/src/daemon/manager.test.ts:245 
      expect(fs.readFileSync(logPath, 'utf8')).toBe('small content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1c6c8374169e9af — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:40 
    const raw = fs.readFileSync(getPidPath(), 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2afb7381fb76ee21 — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:50 
  fs.writeFileSync(getPidPath(), String(pid), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #423bd5d44ca26ba0 — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:123 
  fs.writeFileSync(getStatusPath(), JSON.stringify(status, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9516a068cda99a8 — Filesystem access.
repo/apps/cli/src/daemon/manager.ts:128 
    return JSON.parse(fs.readFileSync(getStatusPath(), 'utf8')) as DaemonStatus;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5c0e7f8f0bc7c4d — Filesystem access.
repo/apps/cli/src/daemon/taskRegistry.ts:26 
    return JSON.parse(fs.readFileSync(getRegistryPath(), 'utf8')) as Record<string, TaskEntry>;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6f8912108b61cda — Filesystem access.
repo/apps/cli/src/daemon/taskRegistry.ts:35 
  fs.writeFileSync(getRegistryPath(), JSON.stringify(entries, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7132a512a1f77390 — Filesystem access.
repo/apps/cli/src/man/generate.ts:14 
  writeFile(`${outputDir}lh.1`, generateRootManPage(program, cliVersion)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #693199a1e70ce434 — Filesystem access.
repo/apps/cli/src/man/generate.ts:15 
  writeFile(`${outputDir}lobe.1`, generateAliasManPage('lh')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d95388281dfacf4b — Filesystem access.
repo/apps/cli/src/man/generate.ts:16 
  writeFile(`${outputDir}lobehub.1`, generateAliasManPage('lh')),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ab00ad94a03e14a — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:52 
    fs.writeFileSync(entryPath, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5f94f3080d9f7c3 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:60 
    delete process.env.LOBEHUB_CLI_HOME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7984b94841080fc1 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:61 
    delete process.env.LOBEHUB_CLI_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #591a29a6e13f594a — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:62 
    delete process.env.LOBEHUB_JWT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd1dc4f9514681b9 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:63 
    delete process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f51ecc5fcba3e9e1 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:64 
    delete process.env.AWS_SECRET_ACCESS_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85a0cc4bccc1d3a0 — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:103 
    expect(fs.readFileSync(unitPath, 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e2b386dca76d0ad — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:106 
    expect(fs.readFileSync(unitPath, 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #749955b19af35c00 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:142 
    process.env.ANTHROPIC_API_KEY = 'anthropic-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1dcae667309f339 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:143 
    process.env.AWS_SECRET_ACCESS_KEY = 'aws-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ece7c1430ba0356 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:144 
    process.env.LOBEHUB_CLI_API_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b32612340a3bfcc4 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:145 
    process.env.QUOTED_ENV = 'value with "quotes", \\slashes, and $dollars';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c22f91955656ed30 — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:150 
    const envFile = fs.readFileSync(envFilePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e24ecbe861e95eb7 — Environment-variable access.
repo/apps/cli/src/service/connect.test.ts:168 
    process.env.LOBEHUB_CLI_API_KEY = 'rotated-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a36cc4a08d9ff2dd — Filesystem access.
repo/apps/cli/src/service/connect.test.ts:172 
    expect(fs.readFileSync(path.join(tmpDir, '.lobehub', 'connect-service.env'), 'utf8')).toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27e5d5213238b6c2 — Environment-variable access.
repo/apps/cli/src/service/connect.ts:35 
    process.env.LOBEHUB_CONNECT_SERVICE_UNIT_DIR ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b47e9df13ba0cea — Environment-variable access.
repo/apps/cli/src/service/connect.ts:41 
  return path.join(os.homedir(), process.env.LOBEHUB_CLI_HOME || '.lobehub');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2abc05fee3ef6e8 — Filesystem access.
repo/apps/cli/src/service/connect.ts:144 
  fs.writeFileSync(envFilePath, `${lines.join('\n')}\n`, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2483e1beae4b9c20 — Environment-variable access.
repo/apps/cli/src/service/connect.ts:162 
  if (process.env.LOBEHUB_JWT || process.env[CLI_API_KEY_ENV] || loadCredentials()) return;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02e0c24f34b51386 — Filesystem access.
repo/apps/cli/src/service/connect.ts:176 
  fs.writeFileSync(path.join(getUserServiceDir(), SERVICE_NAME), renderUnit(), { mode: 0o644 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b92f611043824e43 — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:19 
const originalServer = process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f29619d47fd1259 — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:41 
    delete process.env.LOBEHUB_SERVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7458cf4f65833073 — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:46 
    process.env.LOBEHUB_SERVER = originalServer;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2c1ec9ed5ccadbe — Filesystem access.
repo/apps/cli/src/settings/index.test.ts:71 
    fs.writeFileSync(settingsFile, '{invalid json');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d43ddf3bc31747cb — Environment-variable access.
repo/apps/cli/src/settings/index.test.ts:86 
    process.env.LOBEHUB_SERVER = 'https://env.example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #404aa1f2cb46a8b7 — Environment-variable access.
repo/apps/cli/src/settings/index.ts:15 
const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb859ad205d22788 — Environment-variable access.
repo/apps/cli/src/settings/index.ts:31 
  const envServerUrl = normalizeUrl(process.env.LOBEHUB_SERVER);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #312fc9ecec1e1cf8 — Environment-variable access.
repo/apps/cli/src/settings/index.ts:38 
  const envUrl = normalizeUrl(process.env.AGENT_GATEWAY_URL);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7da1633a2429f240 — Filesystem access.
repo/apps/cli/src/settings/index.ts:64 
  fs.writeFileSync(SETTINGS_FILE, JSON.stringify(normalized, null, 2), { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67905f06ab7bf9f6 — Filesystem access.
repo/apps/cli/src/settings/index.ts:76 
    const existing = fs.readFileSync(CONNECTION_ID_FILE, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #835c7fb1b526514a — Filesystem access.
repo/apps/cli/src/settings/index.ts:85 
    fs.writeFileSync(CONNECTION_ID_FILE, id, { mode: 0o600 });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4b43526748a2bed — Filesystem access.
repo/apps/cli/src/settings/index.ts:99 
    const data = fs.readFileSync(WORKSPACE_ENROLLMENTS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a88ba37860b28d9f — Filesystem access.
repo/apps/cli/src/settings/index.ts:115 
    fs.writeFileSync(WORKSPACE_ENROLLMENTS_FILE, JSON.stringify(workspaceIds, null, 2), {
      mode: 0o600,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2e9ee65cde326f5 — Filesystem access.
repo/apps/cli/src/settings/index.ts:139 
    const data = fs.readFileSync(SETTINGS_FILE, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6a3fbc49ae1ebee — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:40 
    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efb64f2669ec36a9 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:54 
    expect(fs.readFileSync(filePath, 'utf8')).toBe('written');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9f09c4812eca033 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:59 
    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3715e0aeac388793 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:72 
    await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f033625015c56f28 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:80 
    await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #105307f8973ccea4 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:81 
    await writeFile(path.join(tmpDir, 'b.js'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6ddb30c9fb906e2 — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:90 
    await writeFile(path.join(tmpDir, 'search.txt'), 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f41371a4edbc08e — Filesystem access.
repo/apps/cli/src/tools/file.test.ts:99 
    await writeFile(path.join(tmpDir, 'config.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f59b77a245a4e0ba — Filesystem access.
repo/apps/cli/src/tools/getAgentProfile.ts:32 
    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96e48e27c96d080d — Filesystem access.
repo/apps/cli/src/tools/getAgentProfile.ts:126 
    const content = fs.readFileSync(soulPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03b88cf2ee806940 — Environment-variable access.
repo/apps/cli/src/tools/heteroTask.ts:16 
const LOBEHUB_DIR_NAME = process.env.LOBEHUB_CLI_HOME || '.lobehub';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f66a46df265f7f7 — Filesystem access.
repo/apps/cli/src/tools/heteroTask.ts:21 
    const data = JSON.parse(fs.readFileSync(HERMES_SESSIONS_FILE, 'utf8')) as Record<

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dab36a0b4c57d6ac — Filesystem access.
repo/apps/cli/src/tools/heteroTask.ts:34 
    data = JSON.parse(fs.readFileSync(HERMES_SESSIONS_FILE, 'utf8')) as Record<string, string>;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #977cfe588873de32 — Filesystem access.
repo/apps/cli/src/tools/heteroTask.ts:40 
  fs.writeFileSync(HERMES_SESSIONS_FILE, JSON.stringify(data), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ebaa8dfb0ac3cd3 — Environment-variable access.
repo/apps/cli/src/tools/heteroTask.ts:171 
    const openclawAgent = process.env.OPENCLAW_AGENT_ID ?? 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae122f9b75f80d86 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:35 
    await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1dc7418255bc9fb — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:56 
    expect(fs.readFileSync(filePath, 'utf8')).toBe('written');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #302ccc790383a695 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:61 
    await writeFile(filePath, 'legacy hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb827aac2c28fba9 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:114 
    await writeFile(filePath, 'old content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30c5ef98ace3fd0a — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:127 
    expect(fs.readFileSync(filePath, 'utf8')).toBe('new content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16087bc7c39fd604 — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:139 
    await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86cc089d6da49eee — Filesystem access.
repo/apps/cli/src/tools/index.test.ts:157 
    await writeFile(path.join(tmpDir, 'grep.txt'), `${pattern} here`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6aaee6148765c9b8 — Environment-variable access.
repo/apps/cli/src/tools/isolatedWorker.ts:8 
  ISOLATED_TOOL_APIS.has(apiName) && process.env[TOOL_WORKER_ENV] !== '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0b49e3d5edca173 — Filesystem access.
repo/apps/cli/src/tools/localSystemRuntime.ts:141 
      return runtime.readFile({
        endLine: p.loc?.[1],
        path: p.path,
        startLine: p.loc?.[0],
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf8f1ad5a23136f2 — Filesystem access.
repo/apps/cli/src/tools/localSystemRuntime.ts:149 
      return runtime.writeFile(args as WriteFileParams);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cf067610b987726 — Environment-variable access.
repo/apps/cli/src/utils/completion.ts:120 
  const fallbackShell = process.env.SHELL?.split('/').pop() || 'zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #be60bcf0ea81ce5f — Filesystem access.
repo/apps/cli/src/utils/uploadLocalFile.ts:143 
  const fileBuffer = fs.readFileSync(resolved);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdad0216e038cb2e — Environment-variable access.
repo/apps/cli/tsdown.config.ts:12 
  minify: !!process.env.MINIFY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc989d6f5bde5ed3 — Filesystem access.
repo/apps/desktop/electron-builder.mjs:24 
const packageJSON = JSON.parse(await fs.readFile(path.join(__dirname, 'package.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31d5915529d8e242 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:26 
const channel = process.env.UPDATE_CHANNEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #afbe73a04f505cf5 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:28 
const hasAppleCertificate = Boolean(process.env.CSC_LINK);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40f023b9abbcd4f9 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:31 
const updateServerUrl = process.env.UPDATE_SERVER_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62d78d331380da6c — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:82 
  process.env.CSC_IDENTITY_AUTO_DISCOVERY = 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #49b57a7e40389cf5 — Filesystem access.
repo/apps/desktop/electron-builder.mjs:132 
      await fs.readFile(path.resolve(__dirname, '../cli/package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20797d0e888483d7 — Filesystem access.
repo/apps/desktop/electron-builder.mjs:134 
    await fs.writeFile(
      path.resolve(__dirname, 'resources/cli-package.json'),
      JSON.stringify({ name: cliPkg.name, type: 'module', version: cliPkg.version }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f552b098f783ad5 — Environment-variable access.
repo/apps/desktop/electron-builder.mjs:326 
    releaseNotes: process.env.RELEASE_NOTES || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4546e579aba9a99d — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:24 
const DEV_VITE_PORT = Number(process.env.LOBE_DESKTOP_VITE_PORT) || 5173;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32e61e0ea2a5e47b — Filesystem access.
repo/apps/desktop/electron.vite.config.ts:183 
      return injectDynamicBusinessFeatureFlag(readFileSync(sourcePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a99281932bbf57bd — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:200 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce38d4675d4c109c — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:203 
const isCloudDesktopBuild = process.env.CLOUD_DESKTOP === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d330bf106e7f4d49 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:204 
const mode = process.env.NODE_ENV === 'production' ? 'production' : 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #361a59f1a06b2331 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:207 
const updateChannel = process.env.UPDATE_CHANNEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5aa153573119271 — Filesystem access.
repo/apps/desktop/electron.vite.config.ts:209 
  readFileSync(path.resolve(__dirname, 'package.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6195de41e8e3f27d — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:218 
  process.env.DESKTOP_EXTERNAL_NAVIGATION_HOSTS ?? (isCloudDesktopBuild ? 'stripe.com' : '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6861dc043d886ef0 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:291 
      'process.env.UPDATE_CHANNEL': JSON.stringify(process.env.UPDATE_CHANNEL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d05e1727b0817e99 — Environment-variable access.
repo/apps/desktop/electron.vite.config.ts:292 
      'process.env.UPDATE_SERVER_URL': JSON.stringify(process.env.UPDATE_SERVER_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f825697b3d83d6a5 — Filesystem access.
repo/apps/desktop/module-deps.config.mjs:31 
    const packageJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #473f92b5fc6f27fc — Environment-variable access.
repo/apps/desktop/native-deps.config.mjs:27 
  return process.env.npm_config_platform || os.platform();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #819d638d668ed880 — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:58 
  const configuredArch = process.env.npm_config_arch;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e91f6c2f57a43244 — Filesystem access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:76 
    const installedVersion = readFileSync(
      path.join(electronDir, 'dist', 'version'),
      'utf8',
    ).replace(/^v/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7751da83a51101b2 — Filesystem access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:80 
    const installedPath = readFileSync(path.join(electronDir, 'path.txt'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e01e8c346e53fde — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:135 
  const platform = process.env.npm_config_platform || process.platform;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ea89db6fb0b1976 — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:153 
    cacheRoot: process.env.electron_config_cache,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3011dc7f291eaf78 — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:155 
      process.env.electron_use_remote_checksums ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1d22df68cdce7d4 — Environment-variable access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:156 
      process.env.npm_config_electron_use_remote_checksums

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7101ee3c3f249191 — Filesystem access.
repo/apps/desktop/scripts/fix-electron-runtime.mjs:168 
  writeFileSync(path.join(electronDir, 'path.txt'), platformPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97daffd010efb681 — Filesystem access.
repo/apps/desktop/scripts/i18nWorkflow/utils.ts:9 
  const data = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f50b23901905b88 — Filesystem access.
repo/apps/desktop/scripts/i18nWorkflow/utils.ts:15 
  writeFileSync(filePath, jsonStr, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50073a272774266d — Environment-variable access.
repo/drizzle.config.ts:10 
let connectionString = process.env.DATABASE_URL!;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #126cca7b4aee81ce — Environment-variable access.
repo/next.config.ts:3 
const isVercel = !!process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e376ae5b9abb85ae — Filesystem access.
repo/plugins/vite/envRestartKeys.ts:36 
      for (const line of readFileSync(file, 'utf8').split('\n')) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23b2cdfe0bd5011f — Filesystem access.
repo/plugins/vite/markdownImport.test.ts:15 
    await writeFile(markdownPath, markdownContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32e3ba534022ee9f — Filesystem access.
repo/plugins/vite/markdownImport.ts:35 
      const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #caaa1fdb43d4ef79 — Environment-variable access.
repo/plugins/vite/routeChunkPreload.ts:387 
function appendDeploymentQuery(href: string, deploymentId = process.env.VERCEL_DEPLOYMENT_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #351d739827f5c700 — Environment-variable access.
repo/plugins/vite/routeChunkPreload.ts:566 
        const deploymentId = process.env.VERCEL_DEPLOYMENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9645b82a420b7600 — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:199 
const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e328e8035e27773c — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:200 
const enableRouteChunkPreload = process.env.LOBE_ROUTE_CHUNK_PRELOAD !== 'false';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4fc6f27b0fb7d09 — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:241 
    '__CI__': process.env.CI === 'true' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48cf4a1401a06a5a — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:242 
    '__DEV__': process.env.NODE_ENV !== 'production' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c115289d47899fb — Environment-variable access.
repo/plugins/vite/sharedRendererConfig.ts:245 
    '__REACT_SCAN__': process.env.REACT_SCAN === 'true' ? 'true' : 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07bc1a7f9137fb76 — Environment-variable access.
repo/plugins/vite/vercelSkewProtection.ts:28 
  const id = deploymentId || process.env.VERCEL_DEPLOYMENT_ID || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ecd682d8250d00f — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:35 
        (key) => process.env[key],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85c785bd274db275 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:54 
      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #928f2cc0714c2a55 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:59 
    getVars: () => (process.env['NEXT_PUBLIC_SERVICE_MODE'] ? ['NEXT_PUBLIC_SERVICE_MODE'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #379a56b535e03a31 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:65 
    getVars: () => (process.env['ACCESS_CODE'] ? ['ACCESS_CODE'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b734a67278b8aa7 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:72 
      process.env['NEXT_PUBLIC_ENABLE_BETTER_AUTH'] ? ['NEXT_PUBLIC_ENABLE_BETTER_AUTH'] : [],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91d80ad985aa0a3f — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:78 
    getVars: () => ['NEXT_PUBLIC_AUTH_URL', 'AUTH_URL'].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b451723df9c1485 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:104 
      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee488671190f0163 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:120 
        (key) => process.env[key],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #132f64073c385c81 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:127 
    getVars: () => (process.env['OIDC_JWKS_KEY'] ? ['OIDC_JWKS_KEY'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b66ab5d3cb4c9671 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:133 
    getVars: () => (process.env['APP_URL']?.endsWith('/') ? ['APP_URL'] : []),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2966ab60a4fbcf85 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:141 
      const providers = process.env['AUTH_SSO_PROVIDERS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1d04071328abe34 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:142 
      if (providers.includes('casdoor') && !process.env['CASDOOR_WEBHOOK_SECRET']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f4927973b8e5cb0 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:155 
      const providers = process.env['AUTH_SSO_PROVIDERS'] || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85aad272de61d63a — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:156 
      if (providers.includes('logto') && !process.env['LOGTO_WEBHOOK_SIGNING_KEY']) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2991c20d24f1bf1c — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:183 
      ].filter((key) => process.env[key]),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6c08129ce86e1e1 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:192 
        process.env['SMTP_HOST'] || process.env['EMAIL_SERVICE_PROVIDER'] === 'resend';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd3100329eb8c227 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.js:193 
      const hasEmailVerification = process.env['AUTH_EMAIL_VERIFICATION'] === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2855fcef0c9d6f37 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:35 
    process.env.NEXT_AUTH_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4498fca53096cd3 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:45 
    process.env.NEXTAUTH_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d84836358f510868 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:54 
    process.env.CLERK_SECRET_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d8222fb564290d5 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:63 
    process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c29595c94396b78c — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:72 
    process.env.APP_URL = 'https://example.com/';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c7cd3b667246c2b — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:81 
    process.env.APP_URL = 'https://example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82fd43a817f59dbc — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:91 
      process.env.AUTH_SSO_PROVIDERS = 'casdoor';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8918fd0d93c9796f — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:102 
      process.env.AUTH_SSO_PROVIDERS = 'logto';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c610383c7b398167 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:113 
      process.env.AUTH_SSO_PROVIDERS = 'casdoor';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #328720222877ffb0 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:114 
      process.env.CASDOOR_WEBHOOK_SECRET = 'test-secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b770038acf3f9b0f — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:124 
      process.env.AUTH_SSO_PROVIDERS = 'logto';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f7ebb194e118f3c — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:125 
      process.env.LOGTO_WEBHOOK_SIGNING_KEY = 'test-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba3120b3a4f10a3d — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:135 
      process.env.AUTH_SSO_PROVIDERS = 'google';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a52f7f96d77e637 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:147 
      process.env.AUTH_SSO_PROVIDERS = 'logto'; // warning

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f88cf347ea858deb — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:148 
      process.env.ACCESS_CODE = 'test-code'; // error

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d0068f62cece40d — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:161 
      process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bb02ad1a2a5b803 — Environment-variable access.
repo/scripts/_shared/checkDeprecatedAuth.test.ts:171 
      process.env.ACCESS_CODE = 'test-code';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6c5f65829845f16 — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:47 
      this.cache = JSON.parse(readFileSync(CACHE_FILE, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22c05e5b889d5776 — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:56 
      writeFileSync(CACHE_FILE, JSON.stringify(this.cache, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1502c5cc1a33f63 — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:65 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52227971dc3c8b66 — Environment-variable access.
repo/scripts/cdnWorkflow/index.ts:119 
        cdnLinks[link] = cdnUrl.replaceAll(process.env.DOC_S3_PUBLIC_DOMAIN || '', '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21e2afc2095e1c3a — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:147 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97c5d48d89452050 — Filesystem access.
repo/scripts/cdnWorkflow/index.ts:170 
      writeFileSync(post, matter.stringify(content, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0de2fdc6b66377d5 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:10 
if (!process.env.DOC_S3_ACCESS_KEY_ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11f94275de652f9c — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:16 
if (!process.env.DOC_S3_SECRET_ACCESS_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e7f662b44a20e1a — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:22 
if (!process.env.DOC_S3_PUBLIC_DOMAIN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #474d7de0877b5daf — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:44 
    accessKeyId: process.env.DOC_S3_ACCESS_KEY_ID || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #974ce1b98a3254c3 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:47 
    pathPrefix: process.env.DOC_S3_PUBLIC_DOMAIN || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14db54a4f16fd620 — Environment-variable access.
repo/scripts/cdnWorkflow/uploader.ts:50 
    secretAccessKey: process.env.DOC_S3_SECRET_ACCESS_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ceeec8564b33b33a — Filesystem access.
repo/scripts/changelogWorkflow/buildStaticChangelog.ts:119 
      const data = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59ef5b241981b1b5 — Filesystem access.
repo/scripts/changelogWorkflow/generateChangelog.ts:160 
  const version = JSON.parse(readFileSync(pkgPath, 'utf8')).version;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d22a9b91df1a187d — Filesystem access.
repo/scripts/changelogWorkflow/generateChangelog.ts:199 
  const currentFile = readFileSync(changelogPath, 'utf8').trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7f6e0cd133b56af — Filesystem access.
repo/scripts/changelogWorkflow/generateChangelog.ts:205 
  writeFileSync(changelogPath, newContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41d44ee7cedd0e6e — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:9 
  const mode = process.env.CLERK_TO_BETTERAUTH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b794110a30f2e76 — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:29 
  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d224fda9841edd05 — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:43 
  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2d7c3a7c108b622 — Environment-variable access.
repo/scripts/clerk-to-betterauth/_internal/config.ts:53 
  const driver = process.env.CLERK_TO_BETTERAUTH_DATABASE_DRIVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b9e815d63d5dc88 — Filesystem access.
repo/scripts/clerk-to-betterauth/_internal/load-data-from-files.ts:50 
  const csv = await readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bc31b34423bc95f — Filesystem access.
repo/scripts/clerk-to-betterauth/_internal/load-data-from-files.ts:59 
    const file = await readFile(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bee4d7c24272fa1b — Environment-variable access.
repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:19 
const CONCURRENCY = Number(process.env.CLERK_EXPORT_CONCURRENCY ?? 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #825a8626396b4ace — Environment-variable access.
repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:20 
const MAX_RETRIES = Number(process.env.CLERK_EXPORT_RETRIES ?? 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2118f13362f29ba3 — Filesystem access.
repo/scripts/clerk-to-betterauth/export-clerk-users-with-api.ts:203 
  await writeFile(outputPath, JSON.stringify(clerkUsers, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7535c8da32dfe611 — Environment-variable access.
repo/scripts/clerk-to-betterauth/index.ts:9 
const BATCH_SIZE = Number(process.env.CLERK_TO_BETTERAUTH_BATCH_SIZE) || 300;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b400fbb32801b25 — Environment-variable access.
repo/scripts/clerk-to-betterauth/index.ts:12 
  process.argv.includes('--dry-run') || process.env.CLERK_TO_BETTERAUTH_DRY_RUN === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af4a691f7f7148fd — Filesystem access.
repo/scripts/countEnWord.ts:48 
    const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fefe3dcdbd12496 — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:44 
      this.cache = JSON.parse(readFileSync(CACHE_FILE, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c014120644a0486c — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:53 
      writeFileSync(CACHE_FILE, JSON.stringify(this.cache, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e983461c514a2ffe — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:62 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f51bf3f60b566bc0 — Environment-variable access.
repo/scripts/docsWorkflow/autoCDN.ts:98 
        cdnLinks[link] = cdnUrl.replaceAll(process.env.DOC_S3_PUBLIC_DOMAIN || '', '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbeca4a8ab886928 — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:126 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0511c9aab0c8282 — Filesystem access.
repo/scripts/docsWorkflow/autoCDN.ts:149 
      writeFileSync(post, matter.stringify(content, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f49a1dc63a154be5 — Filesystem access.
repo/scripts/docsWorkflow/utils.ts:14 
  const md = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9be550c65bdda920 — Filesystem access.
repo/scripts/docsWorkflow/utils.ts:18 
  writeFileSync(path, result, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a78ba93f23297658 — Filesystem access.
repo/scripts/docsWorkflow/utils.ts:27 
  const md = readFileSync(path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19fef8632c5833c0 — Environment-variable access.
repo/scripts/docsWorkflow/utils.ts:87 
    const githubToken = process.env.GITHUB_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c1845829f26a615 — Filesystem access.
repo/scripts/electronWorkflow/buildDesktopChannel.ts:65 
    return await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8474274412c27060 — Filesystem access.
repo/scripts/electronWorkflow/buildDesktopChannel.ts:73 
  await fs.writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #baba40dd6ca57c71 — Filesystem access.
repo/scripts/electronWorkflow/mergeMacReleaseFiles.js:44 
      const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d22824fa53aa8e50 — Filesystem access.
repo/scripts/electronWorkflow/mergeMacReleaseFiles.js:58 
    fs.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #547c21ac7f85a0da — Filesystem access.
repo/scripts/hotfixWorkflow/index.ts:32 
    const pkg = JSON.parse(fs.readFileSync(PACKAGE_JSON_PATH, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1db35e68a548cbc1 — Filesystem access.
repo/scripts/i18nWorkflow/analyzeUnusedKeys.ts:175 
    const content = fs.readFileSync(file, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30be77b6639f2202 — Filesystem access.
repo/scripts/i18nWorkflow/analyzeUnusedKeys.ts:448 
  fs.writeFileSync(
    reportPath,
    JSON.stringify(
      {
        generatedAt: new Date().toISOString(),
        statistics: {
          totalKeys: allKeysCount,
          unusedKeys: unusedKeys.length,
          usageRate: ((usedKeysCount / allKeysCount) * 100).toFixed(2) + '%',
          usedKeys: usedKeysCount,
        },
        unusedKeys: unusedKeys.map((k) => ({
          filePath: k.filePath,
          fullKey: k.fullKey,
          key: k.key,
          namespace: k.namespace,
        })),
        unusedKeysByNamespace: Array.from(byNamespace.entries()).map(([ns, keys]) => ({
          count: keys.length,
          keys: keys.map((k) => k.key),
          namespace: ns,
        })),
      },
      null,
      2,
    ),
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c17975867ea8f6d — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:137 
          fs.writeFileSync(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0da0d3465c1bbdf — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:193 
        const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c234eafb3eafb7e — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:213 
            fs.writeFileSync(filePath, JSON.stringify(translations, null, 2) + '\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c976b48c598b92cb — Filesystem access.
repo/scripts/i18nWorkflow/cleanUnusedKeys.ts:277 
  const reportContent = fs.readFileSync(reportPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7fc93489caaa231 — Filesystem access.
repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:78 
  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #461820d1fe8f44e8 — Filesystem access.
repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:87 
  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a3ea3fd3ce698c3 — Filesystem access.
repo/scripts/i18nWorkflow/flattenLocaleKeys.ts:116 
      const raw = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76985bb04e332b7b — Filesystem access.
repo/scripts/i18nWorkflow/utils.ts:13 
  const data = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #032b994329fa0cc1 — Filesystem access.
repo/scripts/i18nWorkflow/utils.ts:19 
  writeFileSync(filePath, jsonStr, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #118a262c85c22f39 — Filesystem access.
repo/scripts/i18nWorkflow/utils.ts:28 
  writeFileSync(filePath, formatted, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77d4aaa2cd3c83ed — Filesystem access.
repo/scripts/mdxWorkflow/index.ts:17 
      const mdx = readFileSync(post, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f32eccd9cb893ca — Filesystem access.
repo/scripts/mdxWorkflow/index.ts:48 
      writeFileSync(post, matter.stringify(formatedContent, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b330a9506e7d23a5 — Filesystem access.
repo/scripts/migrate-spa-navigation.ts:39 
  const content = await readFile(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e49803f1b33a3ff — Filesystem access.
repo/scripts/migrate-spa-navigation.ts:105 
    await writeFile(fullPath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64abc36098b31baf — Environment-variable access.
repo/scripts/migrateServerDB/docker.cjs:7 
if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee96f6311860aa69 — Environment-variable access.
repo/scripts/migrateServerDB/docker.cjs:11 
const client = new Pool({ connectionString: process.env.DATABASE_URL });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a258144b42f0d90 — Environment-variable access.
repo/scripts/migrateServerDB/index.ts:16 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c36d80031e3bc2a1 — Environment-variable access.
repo/scripts/migrateServerDB/index.ts:27 
  if (process.env.DATABASE_DRIVER === 'node') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94298a6f7302b0c3 — Environment-variable access.
repo/scripts/migrateServerDB/index.ts:38 
const connectionString = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e593ffa32768c598 — Environment-variable access.
repo/scripts/mobileSpaWorkflow/index.ts:17 
  const value = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9412163dfa7c46b7 — Environment-variable access.
repo/scripts/mobileSpaWorkflow/index.ts:27 
  const keyPrefix = (process.env.MOBILE_S3_KEY_PREFIX || `mobile/${timestamp}`).replaceAll(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99a2821e86da54bf — Environment-variable access.
repo/scripts/mobileSpaWorkflow/index.ts:60 
    region: process.env.MOBILE_S3_REGION || 'auto',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1179459027177c88 — Filesystem access.
repo/scripts/mobileSpaWorkflow/template.ts:11 
  const html = readFileSync(sourcePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46bdb3f3840f0fef — Filesystem access.
repo/scripts/mobileSpaWorkflow/template.ts:24 
  writeFileSync(outputPath, output, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcacf2fc94df0618 — Filesystem access.
repo/scripts/mobileSpaWorkflow/upload.ts:49 
      const buffer = readFileSync(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0195f35630930cc0 — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:10 
  const mode = process.env.NEXTAUTH_TO_BETTERAUTH_MODE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5d73a1d4c069f06 — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:20 
  const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23f2502dbe9551e3 — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:30 
  const driver = process.env.NEXTAUTH_TO_BETTERAUTH_DATABASE_DRIVER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05834915e008f65d — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:36 
  return Number(process.env.NEXTAUTH_TO_BETTERAUTH_BATCH_SIZE) || 300;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4012f447d4303dca — Environment-variable access.
repo/scripts/nextauth-to-betterauth/_internal/config.ts:40 
  return process.argv.includes('--dry-run') || process.env.NEXTAUTH_TO_BETTERAUTH_DRY_RUN === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa64c11a61b21d98 — Filesystem access.
repo/scripts/readmeWorkflow/utlis.ts:38 
  return readFileSync(getReadmePath(lang), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18a0c454955ebfde — Filesystem access.
repo/scripts/readmeWorkflow/utlis.ts:42 
  writeFileSync(getReadmePath(lang), content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ee6ecb348d8679d — Environment-variable access.
repo/scripts/registerDesktopEnv.cjs:18 
const isDesktop = process.env.DESKTOP_BUILD === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e0e2bceac3a3d89 — Filesystem access.
repo/scripts/releaseWorkflow/index.ts:28 
    const pkg = JSON.parse(fs.readFileSync(PACKAGE_JSON_PATH, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5c7e0ffc8ca672e — Filesystem access.
repo/scripts/replaceComponentImports.ts:90 
  const content = readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #528f285a35aeea7c — Filesystem access.
repo/scripts/replaceComponentImports.ts:132 
      writeFileSync(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #64b33739f7098468 — Environment-variable access.
repo/scripts/resetOnboarding/index.ts:19 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4a3d87e3dec5e0d6 — Environment-variable access.
repo/scripts/resetOnboarding/index.ts:33 
  if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71ecd75ef47e70cf — Environment-variable access.
repo/scripts/seedUserInfo/index.ts:17 
const env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ac44d389cb86864 — Environment-variable access.
repo/scripts/seedUserInfo/index.ts:39 
  if (!process.env.DATABASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30f3d30dd41ebdca — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:88 
    process.env.ENABLE_PROXY_DNS === '1'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c4dedb7f1c81051 — Filesystem access.
repo/scripts/serverLauncher/startServer.js:111 
  await fs.writeFile(PROXYCHAINS_CONF_PATH, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f839a4630367722d — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:131 
  const KEY_VAULTS_SECRET = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d15f224fbdb541c — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:134 
  const port = process.env.PORT || 3210;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7089a82defc6a637 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:168 
  const QSTASH_URL = process.env.QSTASH_URL || 'https://qstash-eu-central-1.upstash.io';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a961c806bc4b839 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:170 
  const QSTASH_TOKEN = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #809c5f450a3811c7 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:176 
  const APP_URL = process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9eb19124bbce3a57 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:209 
  const PROXY_URL = process.env.PROXY_URL || ''; // Default empty string to avoid undefined errors

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23cffe996b7510e4 — Environment-variable access.
repo/scripts/serverLauncher/startServer.js:226 
  if (process.env.DATABASE_DRIVER) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b82e30da995470e5 — Environment-variable access.
repo/scripts/vercelIgnoredBuildStep.js:4 
const branchName = process.env.VERCEL_GIT_COMMIT_REF || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d4e601fceb7c9d09 — Environment-variable access.
repo/src/app/(backend)/_deprecated/createBizOpenAI/createAzureOpenai.ts:16 
  const OPENAI_PROXY_URL = process.env.OPENAI_PROXY_URL || '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #924f67fa7faf611c — Environment-variable access.
repo/src/app/(backend)/_deprecated/createBizOpenAI/createOpenai.ts:9 
  const OPENAI_PROXY_URL = process.env.OPENAI_PROXY_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28ea08c99d0fe90a — Environment-variable access.
repo/src/app/(backend)/api/dev/agent-tracing/route.ts:9 
  if (process.env.NODE_ENV !== 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1050221aeb87c8ce — Filesystem access.
repo/src/app/(backend)/api/dev/agent-tracing/route.ts:21 
      const content = await fs.readFile(fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #554db41978def06b — Environment-variable access.
repo/src/app/(backend)/api/dev/test-push/route.ts:19 
  if (process.env.NODE_ENV !== 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d461eed90eb25020 — Environment-variable access.
repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:37 
  const token = process.env.QSTASH_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5671e4ede31179ef — Environment-variable access.
repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:41 
  if (process.env.QSTASH_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03f08ad53d1b8fb8 — Environment-variable access.
repo/src/app/(backend)/api/webhooks/memory-user-memory/pipelines/extract/chat-topic/cancel/route.ts:42 
    (config as Record<string, unknown>).url = process.env.QSTASH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cdc9dcc2e629475 — Environment-variable access.
repo/src/app/(backend)/market/oidc/[[...segments]]/route.ts:7 
const MARKET_BASE_URL = process.env.MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1cb5ed070f4d966 — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.test.ts:234 
      delete process.env.MOCK_DEV_USER_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ca325d39ff00367 — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.ts:73 
    const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b873e09dc9b9453 — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.ts:74 
    if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0569b1588e74375 — Environment-variable access.
repo/src/app/(backend)/middleware/auth/index.ts:75 
      const mockUserId = process.env.MOCK_DEV_USER_ID || 'DEV_USER';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #e6a9437955a6e3f2 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:32 
  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a6c7ccdaba8681a3 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:88 
      request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3b751f6612d6163b — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/chat/[provider]/route.test.ts:113 
      request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #e16b45c04516b55b — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/models/[provider]/pricing/route.test.ts:45 
  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #89e6a343ce96a05e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/app/(backend)/webapi/models/[provider]/route.test.ts:33 
  request = new Request(new URL('https://test.com'), {

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #2be94c0fdff193cf — Environment-variable access.
repo/src/app/(backend)/webapi/revalidate/route.ts:6 
  if (!process.env.REVALIDATE_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c683f9813a8bb675 — Environment-variable access.
repo/src/app/(backend)/webapi/revalidate/route.ts:12 
  if (!authToken || authToken !== process.env.REVALIDATE_SECRET) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4913f634bebed586 — Environment-variable access.
repo/src/app/[variants]/metadata.ts:11 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e790c49142892590 — Environment-variable access.
repo/src/app/layout.tsx:6 
const inVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af0650239b5f6834 — Environment-variable access.
repo/src/app/manifest.ts:5 
  if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9b655f451fd37e9 — Environment-variable access.
repo/src/app/spa-auth/[locale]/[[...path]]/route.ts:17 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9a71c21978f51e6 — Environment-variable access.
repo/src/app/spa/[variants]/[[...path]]/route.ts:34 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0660543c71bbf18f — Environment-variable access.
repo/src/components/Analytics/Desktop.tsx:7 
  const projectId = process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48540770f05961fd — Environment-variable access.
repo/src/components/Analytics/Desktop.tsx:8 
  const baseUrl = process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9885e274eb2f7bd7 — Environment-variable access.
repo/src/components/Loading/BrandTextLoading/index.tsx:20 
  const showDebug = process.env.NODE_ENV === 'development' && debugId;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow production #3994538a5e1135f3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/src/features/Auth/SignIn/useSignIn.ts:158 · flow /tmp/closeopen-g59q7b0s/repo/src/features/Auth/SignIn/useSignIn.ts:154 → /tmp/closeopen-g59q7b0s/repo/src/features/Auth/SignIn/useSignIn.ts:158 
      const response = await fetch('/api/auth/check-user', {
        body: JSON.stringify({ email: targetEmail }),
        headers: { 'Content-Type': 'application/json' },
        method: 'POST',
      });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low env_fs production #a729e50dc7454f7e — Environment-variable access.
repo/src/features/DevFeatureFlagPanel/Hydrator.tsx:7 
const isDevEnv = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f7f055daa453ae4 — Environment-variable access.
repo/src/features/DevFeatureFlagPanel/index.tsx:12 
const isDevEnv = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1b6fbdadb5b59ac — Environment-variable access.
repo/src/instrumentation.ts:3 
  if (process.env.NODE_ENV !== 'production' && process.env.NEXT_RUNTIME === 'nodejs') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bbb26940635eb603 — Environment-variable access.
repo/src/instrumentation.ts:11 
  const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0ea7e1730966b77 — Environment-variable access.
repo/src/instrumentation.ts:13 
    process.env.NEXT_RUNTIME === 'nodejs' &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c31c9328f0c8116 — Environment-variable access.
repo/src/instrumentation.ts:14 
    process.env.DATABASE_URL &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41d5fbe8269ee8f6 — Environment-variable access.
repo/src/instrumentation.ts:15 
    !process.env.VERCEL_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c096956ac5345cd — Environment-variable access.
repo/src/instrumentation.ts:16 
    (!isDev || process.env.ENABLE_BOT_IN_DEV === '1')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e938efd38e42592b — Environment-variable access.
repo/src/instrumentation.ts:31 
  if (process.env.NODE_ENV !== 'production' && !process.env.ENABLE_TELEMETRY_IN_DEV) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3527e6ae03806bd — Environment-variable access.
repo/src/instrumentation.ts:35 
  const shouldEnable = process.env.ENABLE_TELEMETRY && process.env.NEXT_RUNTIME === 'nodejs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7de52e5fb0da7a6 — Environment-variable access.
repo/src/layout/AuthProvider/MarketAuth/MarketAuthProvider.tsx:172 
      const baseUrl = process.env.NEXT_PUBLIC_MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a6eea1a7ff7a03e — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:114 
    delete process.env.HTTP_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2e37b194597fdf5 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:115 
    delete process.env.http_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc7e3750406b7846 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:116 
    delete process.env.HTTPS_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3946648e8618acf3 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:117 
    delete process.env.https_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bb41e62b67a371c — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:118 
    delete process.env.NO_PROXY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad3282044f144916 — Environment-variable access.
repo/src/libs/better-auth/define-config.test.ts:119 
    delete process.env.no_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11a61a65da7a67b5 — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:53 
if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2699c05628a9f2ea — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:54 
  const httpProxy = process.env.HTTP_PROXY || process.env.http_proxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #788abbcdce4f3c4d — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:55 
  const httpsProxy = process.env.HTTPS_PROXY || process.env.https_proxy || httpProxy;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbb58cb89e192a5c — Environment-variable access.
repo/src/libs/better-auth/define-config.ts:61 
      noProxy: mergeLocalNoProxy(process.env.NO_PROXY || process.env.no_proxy),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #14cf1bab67116094 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/feishu.ts:80 
        const tokenResponse = await fetch(FEISHU_TOKEN_URL, {
          body: JSON.stringify({
            client_id: clientId,
            client_secret: clientSecret,
            code,
            grant_type: 'authorization_code',
            redirect_uri: redirectURI,
          }),
          cache: 'no-store',
          headers: {
            'content-type': 'application/json; charset=utf-8',
          },
          method: 'POST',
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ec41584bbc3fe79f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/feishu.ts:120 
        const response = await fetch(FEISHU_USERINFO_URL, {
          cache: 'no-store',
          headers: {
            Authorization: `Bearer ${tokens.accessToken}`,
          },
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #7f2c4e3e577307b2 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/wechat.ts:47 
        const tokenUrl = new URL(WECHAT_TOKEN_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b58fe260facaf573 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/libs/better-auth/sso/providers/wechat.ts:90 
        const url = new URL(WECHAT_USERINFO_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a266a83ce7b00e4a — Environment-variable access.
repo/src/libs/better-auth/utils/config.ts:53 
    normalizeOrigin(process.env.VERCEL_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37ef129e7acd75a3 — Environment-variable access.
repo/src/libs/better-auth/utils/config.ts:54 
    normalizeOrigin(process.env.VERCEL_BRANCH_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c76b8874e0b9b84 — Environment-variable access.
repo/src/libs/bootMetrics/finalize.test.ts:104 
    process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL = INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d7ba4acc47ee71f — Environment-variable access.
repo/src/libs/bootMetrics/finalize.test.ts:109 
    delete process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8e5e0ca45d70040 — Environment-variable access.
repo/src/libs/bootMetrics/finalize.test.ts:113 
    delete process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d318c055ce72994a — Environment-variable access.
repo/src/libs/bootMetrics/finalize.ts:124 
    const ingestUrl = process.env.NEXT_PUBLIC_BOOTSTRAP_METRICS_INGEST_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbedb05f80d50039 — Environment-variable access.
repo/src/libs/debug-file-logger.ts:20 
const shouldEnable = process.env.DEBUG_LOG_FILE === '1' && process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3d3083ceafaf21d6 — Filesystem access.
repo/src/libs/document-loaders/loaders/code/__tests__/index.test.ts:26 
    const code = fs.readFileSync(join(__dirname, `./long.txt`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #acecfb8edce42d2c — Filesystem access.
repo/src/libs/document-loaders/loaders/csv/__tests__/index.test.ts:11 
    const content = fs.readFileSync(join(__dirname, `./demo.csv`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7a79f9052331b913 — Filesystem access.
repo/src/libs/document-loaders/loaders/epub/__tests__/index.test.ts:11 
    const content = fs.readFileSync(join(__dirname, `./demo.epub`));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c8a33b244ece71d3 — Filesystem access.
repo/src/libs/document-loaders/loaders/latex/__tests__/index.test.ts:11 
    const content = fs.readFileSync(join(__dirname, `./demo.tex`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5f262706cf648183 — Filesystem access.
repo/src/libs/document-loaders/loaders/markdown/__tests__/index.test.ts:9 
    const content = fs.readFileSync(join(__dirname, `./demo.mdx`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7f2ceabf603f13d3 — Filesystem access.
repo/src/libs/document-loaders/loaders/txt/__tests__/index.test.ts:45 
    const content = fs.readFileSync(join(__dirname, `./pg24022.txt`), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ef126338b9a9e13 — Environment-variable access.
repo/src/libs/mcp/client.ts:27 
  const val = Number(process.env.MCP_TOOL_TIMEOUT);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34dfebd07df3f81e — Environment-variable access.
repo/src/libs/next/config/define-config.ts:20 
  const isProd = process.env.NODE_ENV === 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7a573fdf2fecd0c — Environment-variable access.
repo/src/libs/next/config/define-config.ts:21 
  const buildWithDocker = process.env.DOCKER === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9d1d38346817359 — Environment-variable access.
repo/src/libs/next/config/define-config.ts:23 
  const shouldUseCSP = process.env.ENABLED_CSP === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adc2c6f1b412c45f — Environment-variable access.
repo/src/libs/next/config/define-config.ts:26 
    process.env.NODE_ENV === 'test' || process.env.TEST === '1' || process.env.E2E === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df485716753771a9 — Environment-variable access.
repo/src/libs/next/config/define-config.ts:28 
  const isStandaloneMode = buildWithDocker || process.env.NEXT_BUILD_STANDALONE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #658e65239b24e664 — Environment-variable access.
repo/src/libs/next/config/define-config.ts:59 
  const assetPrefix = process.env.NEXT_PUBLIC_ASSET_PREFIX;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6794cbb9c8beeb0 — Environment-variable access.
repo/src/libs/next/proxy/define-config.ts:44 
    secure: process.env.NODE_ENV === 'production',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e4b4aedc4fafc86 — Environment-variable access.
repo/src/libs/next/proxy/define-config.ts:115 
        port: process.env.PORT || '3210',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ec9b4d18c943dbb — Environment-variable access.
repo/src/libs/next/proxy/define-config.ts:121 
      url.port = process.env.PORT || '3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f1dfd840ba93953 — Environment-variable access.
repo/src/libs/qstash/index.ts:10 
  ...(process.env.VERCEL_AUTOMATION_BYPASS_SECRET && {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c370879c131cc45 — Environment-variable access.
repo/src/libs/qstash/index.ts:11 
    'x-vercel-protection-bypass': process.env.VERCEL_AUTOMATION_BYPASS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #365d0de45b7ef5e3 — Environment-variable access.
repo/src/libs/qstash/index.ts:141 
  token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a100ec4ae37ad3e — Environment-variable access.
repo/src/libs/qstash/index.ts:150 
  token: process.env.QSTASH_TOKEN!,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b11a200df9fc209 — Environment-variable access.
repo/src/libs/qstash/index.ts:158 
  const currentSigningKey = process.env.QSTASH_CURRENT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86da5ca576a7986b — Environment-variable access.
repo/src/libs/qstash/index.ts:159 
  const nextSigningKey = process.env.QSTASH_NEXT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #700c43f629bdb9f8 — Environment-variable access.
repo/src/libs/redis/manager.ts:4 
export const isRedisDisabledByEnv = () => !!process.env.DISABLE_REDIS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e65aff0dead3bd1 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:6 
  const url = process.env.REDIS_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cae3b5009954b9e3 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:10 
  const database = Number.parseInt(process.env.REDIS_DATABASE ?? '', 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6722c6be7da77380 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:15 
    password: process.env.REDIS_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70e2ff0f2311c637 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:16 
    prefix: process.env.REDIS_PREFIX ?? 'lobe-chat-test',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #940ae6e36a37376a — Environment-variable access.
repo/src/libs/redis/redis.test.ts:17 
    tls: process.env.REDIS_TLS === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36174da9d6a128e0 — Environment-variable access.
repo/src/libs/redis/redis.test.ts:19 
    username: process.env.REDIS_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0741b699caa84687 — Environment-variable access.
repo/src/libs/spaHtml/index.test.ts:42 
    delete process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34a57728bd6a8eee — Environment-variable access.
repo/src/libs/spaHtml/index.test.ts:43 
    delete process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc67833ab74e3217 — Environment-variable access.
repo/src/libs/spaHtml/index.test.ts:47 
    process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID = 'pid';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1ef5d1b1ca023b0 — Environment-variable access.
repo/src/libs/spaHtml/index.test.ts:48 
    process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL = 'https://umami.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01b21b17a49da94f — Environment-variable access.
repo/src/libs/spaHtml/index.ts:8 
  `http://localhost:${Number(process.env.VITE_DEV_PORT) || 9876}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ad4ff7cf8a049d7 — Environment-variable access.
repo/src/libs/spaHtml/index.ts:130 
    process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c9fd4d3428f0c90 — Environment-variable access.
repo/src/libs/spaHtml/index.ts:131 
    process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #831ea1c98af83c09 — Environment-variable access.
repo/src/libs/spaHtml/index.ts:134 
      baseUrl: process.env.NEXT_PUBLIC_DESKTOP_UMAMI_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #505b5cd20c920c2e — Environment-variable access.
repo/src/libs/spaHtml/index.ts:135 
      projectId: process.env.NEXT_PUBLIC_DESKTOP_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #cc40be622e8e89d5 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/routes/(main)/agent/features/Conversation/WorkingSidebar/Browser/utils.ts:19 
    const searchUrl = new URL('https://www.bing.com/search');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #9feb60eee8304ad8 — Filesystem access.
repo/src/services/electron/desktopExportService.tsx:32 
    await localFileService.writeFile({
      content,
      path: result.filePath,
    });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4fbdaae6b01f5f3 — Filesystem access.
repo/src/services/electron/localFileService.ts:128 
    return ensureElectronIpc().localSystem.readFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #3dd733baa3184deb — Hardcoded external endpoint. Review what data is sent to this destination.
repo/src/services/global.ts:20 
    const res = await fetch(VERSION_URL);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #56c3079d85337311 — Environment-variable access.
repo/src/services/marketApi.ts:202 
    const marketBaseUrl = process.env.NEXT_PUBLIC_MARKET_BASE_URL || 'https://market.lobehub.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f55bdc246a12386 — Filesystem access.
repo/src/services/projectFile.ts:164 
      : localFileService.writeFile({ content, path });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3831c3357ae02083 — Filesystem access.
repo/src/spa/router/desktopRouter.sync.test.tsx:84 
    readFile(path.join(process.cwd(), 'src/spa/router/desktopRouter.config.tsx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5714a34842a6164f — Filesystem access.
repo/src/spa/router/desktopRouter.sync.test.tsx:85 
    readFile(path.join(process.cwd(), 'src/spa/router/desktopRouter.config.desktop.tsx'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #961015f9e3a77d3c — Filesystem access.
repo/src/spa/router/mobileRouter.test.tsx:8 
    const source = await readFile(
      path.join(process.cwd(), 'src/spa/router/mobileRouter.config.tsx'),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #780da8295caa0eef — Filesystem access.
repo/src/store/chat/slices/agentRun/actions/__tests__/heterogeneousAgentExecutor.test.ts:2372 
      const raw = fs.readFileSync(tracePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1e82b62cca503e55 — Filesystem access.
repo/src/store/chat/slices/agentRun/actions/__tests__/heterogeneousAgentExecutor.test.ts:3114 
        traceData = JSON.parse(fs.readFileSync(tracePath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32384f2786a94b97 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:304 
    const previous = process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f71d102cc68d18b9 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:305 
    process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #beb8f6fc3e4fdee2 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:328 
        delete process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e06c5466ca9052a5 — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.test.ts:330 
        process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC = previous;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bdb547be407c23d — Environment-variable access.
repo/src/store/chat/slices/agentRun/actions/lifecycle/buildRunLifecycle.ts:196 
        __DEV__ && process.env.NEXT_PUBLIC_DEV_DISABLE_AUTO_TOPIC === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa87f597e3cd1fa5 — Environment-variable access.
repo/src/store/chat/slices/message/action.test.ts:80 
  process.env.NEXT_PUBLIC_BASE_PATH = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6ba3a31538a02fd — Environment-variable access.
repo/src/store/serverConfig/slices/featureFlagOverride/action.ts:11 
const isDevEnv = () => process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ced717bcb8b87f73 — Environment-variable access.
repo/src/store/serverConfig/slices/featureFlagOverride/storage.ts:7 
const isDevEnv = () => process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d36333814f6836ba — Environment-variable access.
repo/vite.config.ts:20 
const isMobile = process.env.MOBILE === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46ccd1d176fdb8bb — Environment-variable access.
repo/vite.config.ts:21 
const isAuth = process.env.AUTH === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e77d250f7fa68822 — Environment-variable access.
repo/vite.config.ts:22 
const mode = process.env.NODE_ENV === 'production' ? 'production' : 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8500760831236d89 — Environment-variable access.
repo/vite.config.ts:26 
const isDev = process.env.NODE_ENV !== 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b7f99cbfc0a1a50 — Environment-variable access.
repo/vite.config.ts:28 
const enableViteDevTools = process.env.LOBE_VITE_DEVTOOLS === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6fd1d667143fd592 — Environment-variable access.
repo/vite.config.ts:31 
  const pathValue = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c522338bc98540ae — Environment-variable access.
repo/vite.config.ts:35 
    const pathExt = (process.env.PATHEXT || '.COM;.EXE;.BAT;.CMD')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d58e15c4c6aea89 — Environment-variable access.
repo/vite.config.ts:105 
  base: isDev ? '/' : process.env.VITE_CDN_BASE || (isAuth ? '/_spa-auth/' : '/_spa/'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d1375f49746e3cc — Environment-variable access.
repo/vite.config.ts:304 
      ? Number(process.env.MOBILE_SPA_PORT) || 3012

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03a830596e31b923 — Environment-variable access.
repo/vite.config.ts:306 
        ? Number(process.env.AUTH_SPA_PORT) || 3013

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac3f39295d4f2a0c — Environment-variable access.
repo/vite.config.ts:307 
        : Number(process.env.SPA_PORT) || 9876,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd6b52b283e510df — Environment-variable access.
repo/vite.config.ts:313 
      '/api': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97ddbf318876f750 — Environment-variable access.
repo/vite.config.ts:314 
      '/oidc': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db7ad9486cc8fe71 — Environment-variable access.
repo/vite.config.ts:315 
      '/trpc': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a231d427a07b3a5 — Environment-variable access.
repo/vite.config.ts:316 
      '/webapi': `http://localhost:${process.env.PORT || 3010}`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/web-crawler

npm first-party
high pii_flow production #cdd9735ed5a8e981 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/browserless.ts:42 · flow /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/browserless.ts:10 → /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/browserless.ts:42 
        fetch(
          qs.stringifyUrl({
            query: {
              blockAds: BROWSERLESS_BLOCK_ADS,
              launch: JSON.stringify({ stealth: BROWSERLESS_STEALTH_MODE }),
              token: BROWSERLESS_TOKEN,
            },
            url: urlJoin(BASE_URL, '/content'),
          }),
          {
            body: JSON.stringify(input),
            headers: {
              'Content-Type': 'application/json',
            },
            method: 'POST',
            signal,
          },
        ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #00cce1dbbb08090f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/exa.ts:32 · flow /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/exa.ts:25 → /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/exa.ts:32 
        fetch('https://api.exa.ai/contents', {
          body: JSON.stringify({
            livecrawl: 'fallback', // always, fallback
            text: true,
            urls: [url],
          }),
          headers: {
            'Content-Type': 'application/json',
            'x-api-key': !apiKey ? '' : apiKey,
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #01806c67660065b4 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62 · flow /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 → /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/firecrawl.ts:62 
        fetch(`${baseUrl}/scrape`, {
          body: JSON.stringify({
            formats: ['markdown'], // ["markdown", "html"]
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3e83106a6720e227 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/jina.ts:17 · flow /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/jina.ts:11 → /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/jina.ts:17 
        fetch(`${getJinaReaderBaseUrl()}/${url}`, {
          headers: {
            'Accept': 'application/json',
            'Authorization': token ? `Bearer ${token}` : '',
            'x-send-from': 'LobeChat Community',
          },
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a20a3bef1491b6e9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/search1api.ts:26 · flow /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/search1api.ts:19 → /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/search1api.ts:26 
        fetch('https://api.search1api.com/crawl', {
          body: JSON.stringify({
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #dae7e58eb0c82c65 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/packages/web-crawler/src/crawImpl/tavily.ts:33 · flow /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/tavily.ts:26 → /tmp/closeopen-g59q7b0s/repo/packages/web-crawler/src/crawImpl/tavily.ts:33 
        fetch('https://api.tavily.com/extract', {
          body: JSON.stringify({
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced
            include_images: false,
            urls: url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 79 low-confidence finding(s)
low env_fs test-only #9ab8db0b0800d2c7 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:15 
    delete process.env.BROWSERLESS_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9af873ffc69d4e71 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:16 
    delete process.env.BROWSERLESS_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #154021ee1cd54dfb — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:26 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #83fb680cb3da7846 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:36 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b86cf67364a617ae — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:49 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ca3e0475a150d56a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:62 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #19720bbe88d789dd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:96 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1765d39e451ce16d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/browserless.test.ts:137 
    process.env.BROWSERLESS_TOKEN = 'test-token';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a8af388757139343 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:16 
    delete process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0d5aac699da510aa — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:20 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #87b6d035d0be6251 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:77 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #265f16249730d3a1 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:101 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #60b3f3aecc27f05f — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:122 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #87ef1d672420e1d2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:139 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c6e63d331478955a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:156 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #22e94a2080e81bcf — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:167 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #32a71ec321fea782 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:178 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c03f690231d012b2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:191 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4bbdecd0d9e4b75d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:210 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c089801b0a7f3fb9 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/exa.test.ts:231 
    process.env.EXA_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4cd7cb10770b5fa8 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:16 
    delete process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #51af58799b31f0f6 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:17 
    delete process.env.FIRECRAWL_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2dc542c9c4be4678 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:21 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef16397853ceaa4b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:86 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e9a82627d33b5f0f — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:113 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4debb4c6d4d9e120 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:140 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #795bea023a09cd13 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:157 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #586acf01e7aebece — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:174 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9b95d4d30bcdf3e0 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:185 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d029909fe5050e15 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:198 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c7260b6b5eadc950 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:211 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5625745c6437ccb1 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/firecrawl.test.ts:230 
    process.env.FIRECRAWL_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b64f2e182a9daf59 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:22 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8627675fbd3b7226 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:23 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #92221b053e9feb5a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:24 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #65c72d0a9876860b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:28 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #63cf35f4da72aefa — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:29 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cc13b93a9bf16331 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:30 
    delete process.env.JINA_USE_CN_DOMAINS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ae9646ba13f246cb — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:80 
    process.env.JINA_READER_API_KEY = 'env-reader-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dff5a36b57656609 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:105 
    delete process.env.JINA_READER_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #358b30e14c5d23e2 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:109 
    process.env.JINA_API_KEY = 'env-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b409d397b67d7e57 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:134 
    delete process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #06f9c82058cba00a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/jina.test.ts:163 
    process.env.JINA_USE_CN_DOMAINS = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5329ba35c28ba15d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/search1api.test.ts:19 
    process.env.SEARCH1API_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bb57d4c07bbc30a7 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:16 
    delete process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5a6e908a5c582baa — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:17 
    delete process.env.TAVILY_EXTRACT_DEPTH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #52572c1cfca8d5d0 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:21 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9e99502618e36770 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:55 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #16fa6d36350aff07 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:56 
    process.env.TAVILY_EXTRACT_DEPTH = 'advanced';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fa02368fac801a17 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:98 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c79324b006c71663 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:123 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f6ed64c4a4dcf359 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:145 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #56abae83e21ea927 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:168 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bc72c81234839159 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:185 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2892468a54bc0790 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:202 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9aebd991980f1ac — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:213 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #de21d9b9dbf554bd — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:226 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e8eac3b37d0c970e — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:239 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #016b69b21e817236 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:258 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cabfcd9fbe1b726a — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:280 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0126b015b53bb7c9 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/__tests__/tavily.test.ts:302 
    process.env.TAVILY_API_KEY = 'test-api-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cd667c5e7d01059 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:10 
const BASE_URL = process.env.BROWSERLESS_URL ?? 'https://chrome.browserless.io';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #906508ba1b55283c — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:14 
const BROWSERLESS_TOKEN = process.env.BROWSERLESS_TOKEN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce6954c93ce8421d — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:16 
const BROWSERLESS_BLOCK_ADS = process.env.BROWSERLESS_BLOCK_ADS === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63fc7219728d8d34 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:17 
const BROWSERLESS_STEALTH_MODE = process.env.BROWSERLESS_STEALTH_MODE === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5be7177713180550 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/browserless.ts:27 
  if (!process.env.BROWSERLESS_URL && !process.env.BROWSERLESS_TOKEN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2331fac92a53f5b — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/exa.ts:25 
  const apiKey = process.env.EXA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #42fd7a696981fe2c — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/exa.ts:32 
        fetch('https://api.exa.ai/contents', {
          body: JSON.stringify({
            livecrawl: 'fallback', // always, fallback
            text: true,
            urls: [url],
          }),
          headers: {
            'Content-Type': 'application/json',
            'x-api-key': !apiKey ? '' : apiKey,
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f04cb79bdf53a011 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:54 
  const apiKey = process.env.FIRECRAWL_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfc2d707301618a6 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/firecrawl.ts:55 
  const baseUrl = process.env.FIRECRAWL_URL || 'https://api.firecrawl.dev/v2';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98ea64809fae4995 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/jina.ts:11 
  const token = params.apiKey ?? process.env.JINA_READER_API_KEY ?? process.env.JINA_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c51d171c8c5309d1 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/search1api.ts:19 
  const apiKey = process.env.SEARCH1API_CRAWL_API_KEY || process.env.SEARCH1API_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #52c727995b38ea63 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/search1api.ts:26 
        fetch('https://api.search1api.com/crawl', {
          body: JSON.stringify({
            url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #3c5d1e24e738c956 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/tavily.ts:26 
  const apiKey = process.env.TAVILY_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #b3d88cda19ac4d7a — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/web-crawler/src/crawImpl/tavily.ts:33 
        fetch('https://api.tavily.com/extract', {
          body: JSON.stringify({
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced
            include_images: false,
            urls: url,
          }),
          headers: {
            'Authorization': !apiKey ? '' : `Bearer ${apiKey}`,
            'Content-Type': 'application/json',
          },
          method: 'POST',
          signal,
        }),

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #aeb21370138c9479 — Environment-variable access.
repo/packages/web-crawler/src/crawImpl/tavily.ts:35 
            extract_depth: process.env.TAVILY_EXTRACT_DEPTH || 'basic', // basic or advanced

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b1072d54f1f89261 — Filesystem access.
repo/packages/web-crawler/src/utils/htmlToMarkdown.test.ts:29 
      const html = readFileSync(path.join(__dirname, `./html/${item.file}`), { encoding: 'utf8' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb5203b54f83dd3e — Environment-variable access.
repo/packages/web-crawler/src/utils/withTimeout.ts:3 
export const DEFAULT_TIMEOUT = process.env.CRAWLER_TIMEOUT

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #447b7926a66d6740 — Environment-variable access.
repo/packages/web-crawler/src/utils/withTimeout.ts:4 
  ? Number(process.env.CRAWLER_TIMEOUT)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/heterogeneous-agents

npm first-party
medium telemetry production #561e5fd0828fc23e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/agentStreamPipeline.ts:137 
      const payload = this.codexTracker ? await this.codexTracker.track(raw as any) : raw;

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #8aa58b8a847fe8c7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:28 
    await tracker.track({
      item: {
        changes: [
          { kind: 'update', path: updatePath },
          { kind: 'add', path: addPath },
        ],
        id: 'item_1',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #1c67f7570d5c3ea8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:43 
    const enriched = await tracker.track({
      item: {
        changes: [
          { kind: 'update', path: updatePath },
          { kind: 'add', path: addPath },
        ],
        id: 'item_1',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e9c6a60437d7bfe5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:88 
    await tracker.track({
      item: {
        changes: [],
        id: 'item_missing_snapshot',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2a4610b0a717864b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:99 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'update', path: updatePath }],
        id: 'item_missing_snapshot',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #be9dba726b956add — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:128 
    await tracker.track({
      item: {
        changes: [{ kind: 'rename', path: afterPath }],
        id: 'item_rename',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #c1ef7c66e9d559f5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:139 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'rename', path: afterPath }],
        id: 'item_rename',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #24879a7e4da096b1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:168 
    await tracker.track({
      item: {
        changes: [{ kind: 'update', path: relativePath }],
        id: 'item_relative',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #2304fee949f115bf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:179 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'update', path: relativePath }],
        id: 'item_relative',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #f8b5c860566eda3c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:209 
    await tracker.track({
      item: {
        changes: [{ kind: 'add', path: addPath }],
        id: 'item_plus_prefix',
        type: 'file_change',
      },
      type: 'item.started',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #08797c532d3c71ad — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:220 
    const enriched = await tracker.track({
      item: {
        changes: [{ kind: 'add', path: addPath }],
        id: 'item_plus_prefix',
        type: 'file_change',
      },
      type: 'item.completed',
    });

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 78 low-confidence finding(s)
low env_fs production #5eb601250fbed1cc — Filesystem access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:8 
  const raw = await readFile(new URL(`./__fixtures__/codex/${name}`, import.meta.url), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #954dd6ff4ba2835b — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:181 
    const previousTimezone = process.env.TZ;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1380d7a4aa612fac — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:182 
    process.env.TZ = 'Asia/Shanghai';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f8bbf26daca3ff8 — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:208 
        delete process.env.TZ;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab771caf0c9a02ff — Environment-variable access.
repo/packages/heterogeneous-agents/src/adapters/codex.test.ts:210 
        process.env.TZ = previousTimezone;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ab6f1be6793e44b — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/claudeAgentSdkSession.ts:16 
  const raw = process.env[name];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ff38b0dba638ecc — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/cliSpawn.ts:187 
    const source = await readFile(shimPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b948e2cdcfbb7c2 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:24 
    await writeFile(updatePath, 'hello\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eba8966219f1332c — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:40 
    await writeFile(updatePath, 'hello\nappended line\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8217f68a268468b4 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:41 
    await writeFile(addPath, 'line one\nline two\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82b4c47b7451e471 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:84 
    await writeFile(updatePath, 'line one\nline two\nline three\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3183193ea972777 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:97 
    await writeFile(updatePath, 'line one\nline two updated\nline three\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94d6e79b2bd7d4d1 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:124 
    await writeFile(beforePath, 'content\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1453a328263f1d56 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:164 
    await writeFile(absolutePath, 'before\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f8d1dae93473373 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:177 
    await writeFile(absolutePath, 'before\nafter\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #629e9fe08f1a4d27 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.test.ts:218 
    await writeFile(addPath, '++leading content\n+++header lookalike\n', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d04fe5b181138e84 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexFileChangeTracker.ts:64 
      content: await readFile(filePath, 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53aec9acafa39de8 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:38 
    await writeFile(
      path.join(codexHome, 'config.toml'),
      [
        'model = "gpt-5.4"',
        '',
        '[profiles.fast]',
        'model = "gpt-5.5-mini"',
        '',
        '[profiles."quoted.name"]',
        'model = "gpt-5.5"',
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f09ce0b41e0de85c — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:76 
    await writeFile(path.join(codexHome, 'config.toml'), 'model = "gpt-5.4"\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80d8358044592659 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:94 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-123.jsonl'),
      [
        JSON.stringify({ payload: { model_provider: 'openai' }, type: 'session_meta' }),
        JSON.stringify({ payload: { model_context_window: 258_400 }, type: 'turn_context' }),
        JSON.stringify({ payload: { model: 'gpt-5.5' }, type: 'event_msg' }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2271a796d537efb9 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:117 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-usage.jsonl'),
      [
        JSON.stringify({
          payload: {
            info: {
              total_token_usage: {
                cached_input_tokens: 5,
                input_tokens: 25,
                output_tokens: 9,
                reasoning_output_tokens: 4,
              },
            },
            type: 'token_count',
            usage: { input_tokens: 100, output_tokens: 100 },
          },
          type: 'event_msg',
          usage: { input_tokens: 200, output_tokens: 200 },
        }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50a251827b84c25c — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.test.ts:158 
    await writeFile(
      path.join(sessionDir, 'rollout-2026-06-11T01-31-27-thread-legacy-usage.jsonl'),
      [
        JSON.stringify({
          payload: { usage: { input_tokens: 10, output_tokens: 2 } },
          type: 'event_msg',
        }),
        JSON.stringify({
          type: 'turn.completed',
          usage: { cached_input_tokens: 5, input_tokens: 25, output_tokens: 9 },
        }),
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfa7cf96e3a5b947 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.ts:189 
    const config = await readFile(path.join(getCodexHome(env, homeDir), 'config.toml'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47a62290e422339c — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/codexModel.ts:275 
  const content = await readFile(sourceFile, 'utf8').catch(() => undefined);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0b6215523148fa9 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:67 
      await writeFile(filePath, PNG_BYTES);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05869d881dbcc305 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:197 
      const written = await readFile(imagePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfcdfcb2188f551f — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/buildAgentInput.test.ts:203 
      await writeFile(filePath, PNG_BYTES);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f74786030721b00a — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:137 
      const meta = JSON.parse(await readFile(metaPath, 'utf8')) as { mediaType?: string };

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ceb0899cc8f83a3 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:138 
      const buffer = await readFile(dataPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89b96103da026151 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:158 
    await writeFile(path.join(cacheDir, key), buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6575b58d2f4c6dc9 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:159 
    await writeFile(
      path.join(cacheDir, `${key}.meta`),
      JSON.stringify({ id: source.id, mediaType }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a476243489d44700 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:169 
  const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #939c88bed31b7038 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/input/normalizeImage.ts:238 
    await writeFile(filePath, image.buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1abb6d49df1cd7b — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:79 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #469a91cfed1d297a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:80 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9702e2a9d3bc273a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:82 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86d7a6690bf76582 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:83 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dee608bc741b2099 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:102 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7bd43e33ab8fd462 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:103 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcb199e271cf5b23 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:104 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cc86221caaa69d78 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:109 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c9aae90c2699e9d — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:110 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7cafacba9c5d0aef — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:111 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b70976811c1ee3fc — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:112 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cf56661673d2f27 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:129 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b00c26365d352e1 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:130 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f93e5cc5aa883c3 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:131 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a958d19054db32c1 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:136 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ffbeb0593e1dcb36 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:137 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac1498b5a200d0ee — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:138 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #007823e7df6a50f0 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:139 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a72d1efc6b949b5f — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:152 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74e47fa30af88559 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:153 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8db0a2f9c9a70c95 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:154 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5501f1ac340b3583 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:159 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12f494b6f4d85df9 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:160 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db01870fec278993 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:161 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19dd4959555f1496 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:162 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e2160528878b28a — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:179 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b78cd7a09bcb1c94 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:180 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a78950c0cd44534 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:250 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c1ab8dfa189bdf6 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:251 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20e1f31330f6504c — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:252 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70b94a84a5c9dba5 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:253 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #749d8ed5c073cd3e — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:267 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2dffc1a88bf3ca37 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:268 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #741fc7b19e1f936f — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:273 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d20309c78a244cf — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:274 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cdd028bd37757b8 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:277 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #560fc2b136f344b1 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:278 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fc5ee06078d0c02 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:293 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f66ebddceeb4db3 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:294 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #756dcbe355780ab8 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.test.ts:295 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ac56c07e95425b7 — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:79 
  const shell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0293c7689b4e596d — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:153 
    const lookupPath = mergePathValues(shellPath, process.env.PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #df56b897924ac0ab — Environment-variable access.
repo/packages/heterogeneous-agents/src/spawn/resolveCliCommand.ts:155 
    if (lookupPath && lookupPath !== process.env.PATH) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff5ed55fb76c3ccc — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/spawnAgent.test.ts:248 
    const realCodexFixture = await readFile(
      new URL('../adapters/__fixtures__/codex/collab_tool_call.spawn_wait.jsonl', import.meta.url),
      'utf8',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d2e746dd5bd5b85 — Filesystem access.
repo/packages/heterogeneous-agents/src/spawn/spawnAgent.test.ts:256 
    await writeFile(
      path.join(sessionDir, `rollout-2026-06-11T01-31-27-${threadId}.jsonl`),
      JSON.stringify({
        type: 'turn.completed',
        usage: { cached_input_tokens: 42_000, input_tokens: 51_000, output_tokens: 300 },
      }),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): apps/desktop/src/main

npm first-party
expand_more 170 low-confidence finding(s)
low egress production #e9c7ac9063f78b15 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/desktop/src/main/controllers/BrowserSidebarCtr.ts:54 
    const searchUrl = new URL('https://www.bing.com/search');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #15575debb8bd6af7 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:373 
        readLocalFile: (p) => local.readFile(p),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a588aa9ecf748412 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:463 
        return runtime.readFile({
          endLine: p.loc?.[1],
          path: p.path,
          startLine: p.loc?.[0],
        });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c37cf4d3a66a9fe4 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:493 
        return runtime.writeFile(args as WriteLocalFileParams);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5e6c19d050d3664 — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:737 
      const content = fs.readFileSync(soulPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8f9b46517be889b — Filesystem access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:807 
      const content = fs.readFileSync(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e05bec617329b80b — Environment-variable access.
repo/apps/desktop/src/main/controllers/GatewayConnectionCtr.ts:853 
      const openclawAgent = process.env['OPENCLAW_AGENT_ID'] ?? 'main';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e8b00e2572b20bb — Environment-variable access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:591 
      String(process.env.LOBE_CLAUDE_CODE_SDK ?? '').toLowerCase(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ddb4f9a262c58eb2 — Environment-variable access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:609 
    if (process.env.NODE_ENV === 'test') return false;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #742c306242dd9347 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:710 
      await writeFile(path.join(rootDir, '.last-live-trace'), `${dir}\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0bc3512e59c45937 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:711 
      await writeFile(path.join(dir, 'stdout.jsonl'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d7899bf7fc78c44 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:712 
      await writeFile(path.join(dir, 'stderr.log'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e14c28e4b2148f26 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:714 
        await writeFile(path.join(dir, 'stdin.txt'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6938a18d8e5cf397 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:716 
      await writeFile(
        path.join(dir, 'meta.json'),
        `${JSON.stringify(
          {
            agentSessionId: session.agentSessionId,
            agentType: session.agentType,
            args: cliArgs,
            attachments: imageList.map((image) => this.getAttachmentTraceSummary(image)),
            command: session.command,
            createdAt: createdAt.toISOString(),
            cwd,
            envKeys: session.env ? Object.keys(session.env).sort() : [],
            model: session.model,
            modelSource: session.modelSource,
            resumeSessionId: session.resumeSessionId,
            sessionId: session.sessionId,
            stdinBytes: stdinPayload === undefined ? 0 : Buffer.byteLength(stdinPayload),
            stdinFile: stdinPayload === undefined ? undefined : 'stdin.txt',
            stderrFile: 'stderr.log',
            stdoutFile: 'stdout.jsonl',
            verifiedModel: session.verifiedModel,
            verifiedModelContextWindow: session.verifiedModelContextWindow,
            verifiedModelProvider: session.verifiedModelProvider,
            verifiedModelSessionId: session.verifiedModelSessionId,
            verifiedModelSourceFile: session.verifiedModelSourceFile,
          },
          null,
          2,
        )}\n`,
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e304e737795c9263 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:787 
    return this.queueCliTraceWrite(trace, () => writeFile(filePath, data));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #119248f443b2a032 — Filesystem access.
repo/apps/desktop/src/main/controllers/HeterogeneousAgentCtr.ts:875 
    await writeFile(tmpConfigPath, JSON.stringify(config), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #000967db2704eaaa — Filesystem access.
repo/apps/desktop/src/main/controllers/LocalFileCtr.ts:353 
    const data = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e1ace2e2d4a62104 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:191 
    originalClaudeSdkLabEnv = process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0229f631e594506b — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:197 
    delete process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b105abfce88d80de — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:201 
    if (originalClaudeSdkLabEnv === undefined) delete process.env.LOBE_CLAUDE_CODE_SDK;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5b9c9281e3dc7620 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:202 
    else process.env.LOBE_CLAUDE_CODE_SDK = originalClaudeSdkLabEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7f78396dceff75d9 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:264 
      await writeFile(outOfRootDataPath, 'SECRET');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0a8106b883f665b1 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:265 
      await writeFile(
        outOfRootMetaPath,
        JSON.stringify({ id: traversalId, mimeType: 'text/plain' }),
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #054cfbdb29c1920e — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:284 
      await expect(readFile(outOfRootDataPath, 'utf8')).resolves.toBe('SECRET');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #22b4712b44a09331 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:454 
      process.env.LOBE_CLAUDE_CODE_SDK = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #85eb2e630e23ff55 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:558 
        ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #21a79551e8d37d1a — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:559 
        ANTHROPIC_AUTH_TOKEN: process.env.ANTHROPIC_AUTH_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5b225219e849e2c8 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:560 
        ANTHROPIC_BASE_URL: process.env.ANTHROPIC_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #034f2923c73585bd — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:562 
      process.env.ANTHROPIC_API_KEY = 'sk-host-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5b0310f875e4de8c — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:563 
      process.env.ANTHROPIC_AUTH_TOKEN = 'host-token-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7863caef45a54c69 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:564 
      process.env.ANTHROPIC_BASE_URL = 'https://host.example/should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #894022300af579e8 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:573 
        expect(options.env.PATH).toBe(process.env.PATH);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #972a41e67de6da5f — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:576 
          if (value === undefined) delete process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9ff1bc50fa29dbc1 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:577 
          else process.env[key] = value;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #46915eabdcb59ae3 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:583 
      const originalKey = process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #023e9b19dd711372 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:584 
      process.env.ANTHROPIC_API_KEY = 'sk-host-should-not-leak';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a5842981f46bfb38 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:594 
        if (originalKey === undefined) delete process.env.ANTHROPIC_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c08e94f1cacf2e73 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:595 
        else process.env.ANTHROPIC_API_KEY = originalKey;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #29a9dff37fb06bad — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:855 
        Promise.all(imagePaths.map((filePath) => readFile(filePath, 'utf8'))),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5b8d4b1a4880eda8 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:870 
      await expect(readFile(imagePaths[0], 'utf8')).resolves.toBe('PNG_TEST');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2982ae60df2bf1f3 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:890 
      await expect(readFile(imagePaths[0])).resolves.toEqual(pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e3d20ff1875f4e31 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:962 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1ab11e137d2b1582 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:963 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fe4eb76fe7e21fe4 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:982 
        await expect(readFile(path.join(traceRoot, '.last-live-trace'), 'utf8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8b44a9da7b35d6ed — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:985 
        await expect(readFile(path.join(traceDir, 'stdin.txt'), 'utf8')).resolves.toBe(prompt);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fdd4a4996ab024a7 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:986 
        await expect(readFile(path.join(traceDir, 'stdout.jsonl'), 'utf8')).resolves.toBe(rawLine);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e2070fdeb428c1e7 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:987 
        await expect(readFile(path.join(traceDir, 'stderr.log'), 'utf8')).resolves.toBe('');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2030831e82a5382c — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:988 
        await expect(readFile(path.join(traceDir, 'exit.json'), 'utf8')).resolves.toContain(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5f9e8075b50d89f2 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:992 
        const meta = JSON.parse(await readFile(path.join(traceDir, 'meta.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2da67056dba17a4 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1005 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #07718a37bfa1ddcb — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1010 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1e8951c0aa2d48f2 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1012 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6edefcb33133ba2e — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1031 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0b0b0f47d9364df2 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1036 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #88aacb150bd6cb54 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1039 
      process.env.NODE_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #59ba2494ee6594c6 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1059 
        await expect(readFile(path.join(traceDir, 'stdout.jsonl'), 'utf8')).resolves.toBe(rawLine);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #20bb4f8991f4e76e — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1064 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #399a499158a98d00 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1070 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #42039e683c42b7ef — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1071 
      process.env.NODE_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #793f4ab81808f33e — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1083 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #44dac66670ac52e6 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1089 
      const originalNodeEnv = process.env.NODE_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #68c0acf7eac158e2 — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1090 
      process.env.NODE_ENV = 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3b1790a8bd9bcb7a — Environment-variable access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1099 
        process.env.NODE_ENV = originalNodeEnv;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1332708da7aa9d0b — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/HeterogeneousAgentCtr.test.ts:1470 
      await writeFile(tmpConfigPath, '{"mcpServers":{}}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e6e682f331193940 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:66 
      await writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a2079b2277dc5867 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:68 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5118d20b8e537b62 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:86 
      await writeFile(filePath, 'line1\nline2\nline3\nline4\nline5');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #311bdd23e60b87c8 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:88 
      const result = await localFileCtr.readFile({ loc: [1, 3], path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #82587a175a503164 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:107 
      await writeFile(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bab433872dee6fc8 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:109 
      const result = await localFileCtr.readFile({ fullContent: true, path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7c0b1ee07454c593 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:126 
      const result = await localFileCtr.readFile({
        path: path.join(tmpDir, 'does-not-exist.txt'),
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9e137d0225bcd23 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:154 
      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #74f9de727cc17e38 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:156 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4e1e741ebc091fc3 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:173 
      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ce31948d616cd0c — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:175 
      const result = await localFileCtr.readFile({ cwd: tmpDir, path: 'assets/nested.jpg' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7215a0c157fea31e — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:187 
      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #100eebe9e5da86d5 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:189 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #38590e51d7a0f5e7 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:200 
      await writeFile(filePath, pngBytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bfe25ea99516d28f — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:202 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a15586d8285a218c — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:210 
      const result = await localFileCtr.readFile({ path: path.join(tmpDir, 'missing.png') });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6f9f42659574d551 — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:220 
      await writeFile(filePath, Buffer.alloc(10 * 1024 * 1024 + 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b8d77230531d13eb — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:222 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6bb5e3e928c336dd — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:233 
      await writeFile(filePath, svg);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fc19f0d0f7f4fdec — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:235 
      const result = await localFileCtr.readFile({ path: filePath });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #236979a851dd338c — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:246 
      await writeFile(file1, 'content a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #74b52fe3c87c8fef — Filesystem access.
repo/apps/desktop/src/main/controllers/__tests__/LocalFileCtr.readFile.test.ts:247 
      await writeFile(file2, 'content b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c70985a133e2af1a — Environment-variable access.
repo/apps/desktop/src/main/core/App.ts:102 
    process.env.PATH = `${process.env.PATH}${pathSep}${getCliWrapperDir()}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e24c805b9693e92 — Environment-variable access.
repo/apps/desktop/src/main/core/App.ts:475 
    const ipcId = process.env.LOBE_IPC_ID || name;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b87709327305eb4e — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:450 
    const current = process.env.PATH ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #efc6360fc402ce6a — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:453 
    process.env.PATH = current ? `${current}${sep}${dir}` : dir;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87cb4ecb694d1dfb — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:552 
    await writeFile(tmpMarker, resolvedVersion, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e03cd20c1c50d04b — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:554 
    await writeFile(markerPath, resolvedVersion, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56e8eb0a875dfd28 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/BinaryManager.ts:630 
      const raw = await readFile(this.installedMarkerPath(name), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a154ed1eb9c6ee6c — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/LocalFileProtocolManager.ts:138 
          const buffer = await readFile(realResolvedPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f03272069f5f98bd — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/LocalFileProtocolManager.ts:289 
    const buffer = await readFile(realFilePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cb84b037d4bf63e — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/RendererProtocolManager.ts:195 
    const buffer = await readFile(targetPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a42aec100eddbc3d — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/RendererUrlManager.ts:98 
    const electronRendererUrl = process.env['ELECTRON_RENDERER_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #07bff2d66baf1f30 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:52 
  await writeFile(path.join(dir, fileName), fileContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fc5550aa70708743 — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:53 
  await writeFile(path.join(cacheRoot, name, '.installed'), version, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d291ff5df3f9648c — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:65 
  originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ca8c0ba116243bb6 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:69 
  process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fcfda139718b5c3f — Filesystem access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:176 
      await writeFile(path.join(cacheRoot, 'foo', '.installed'), '1.0.0', 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5e9462748b9b9160 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:201 
      const before = process.env.PATH ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7be2c58329ac692d — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:206 
      expect((process.env.PATH ?? '').split(sep)).toContain(installDir);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8aae0707a399bb37 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:210 
      const segments = (process.env.PATH ?? '').split(sep);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c311f861337a7596 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/BinaryManager.test.ts:212 
      expect(process.env.PATH).toContain(before);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #73a7957a3bb37830 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:54 
    delete process.env['ELECTRON_RENDERER_URL'];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ea9e6ea8dcbce33c — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:95 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #76cacbf560982cf9 — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:121 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #75dedb664333dcfc — Environment-variable access.
repo/apps/desktop/src/main/core/infrastructure/__tests__/RendererUrlManager.test.ts:142 
      process.env['ELECTRON_RENDERER_URL'] = 'http://localhost:5173';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b3d97968d960ba3d — Environment-variable access.
repo/apps/desktop/src/main/env.ts:56 
  DESKTOP_BACKEND_PROXY_RETHROW_ERRORS: process.env.DESKTOP_BACKEND_PROXY_RETHROW_ERRORS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #622f03120996fcbf — Environment-variable access.
repo/apps/desktop/src/main/env.ts:57 
  DESKTOP_EXTERNAL_NAVIGATION_HOSTS: process.env.DESKTOP_EXTERNAL_NAVIGATION_HOSTS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c427e364990227d2 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:58 
  UPDATE_CHANNEL: process.env.UPDATE_CHANNEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba4f38efb3e1ab61 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:59 
  UPDATE_SERVER_URL: process.env.UPDATE_SERVER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45455a801eaebe1b — Environment-variable access.
repo/apps/desktop/src/main/env.ts:108 
      UPDATE_CHANNEL: z.string().optional().default(process.env.UPDATE_CHANNEL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75a1605fa381bf92 — Environment-variable access.
repo/apps/desktop/src/main/env.ts:112 
      UPDATE_SERVER_URL: z.string().optional().default(process.env.UPDATE_SERVER_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a3ef22b5897f6c15 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:189 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #328f12070bf40b23 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:190 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5adc65e91e625a55 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:191 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #504e6ba8b9ef3149 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:192 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6f543a388f4f680b — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:211 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dbccb378b05c314e — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:212 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0029bf7419358857 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:213 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c13fc7c0638655f2 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:218 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f0cf54f02fdae552 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:219 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0b2b00008710d3b7 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:220 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bcc77a281116e37b — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:221 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a539d7c1de5d7886 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:236 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #37b6e4fde400439a — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:237 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e852841cd9bd0c3d — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:238 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dc9f9aa9c1477e4a — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:243 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #712c7fa61154004c — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:244 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ec38671ecc7c41d5 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:247 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #beea45645db0e16a — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:248 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f523f6efb9395b52 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:267 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5a23b649ba61ae0f — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:268 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #89bcf69de2f02607 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:269 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #47105499a456375f — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:274 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #185dad121e5d573e — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:275 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e9d04464f29d18cb — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:276 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7485a427129be560 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:277 
      delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #83d5c66ebad95459 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:295 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #beaada72e4f3a701 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:296 
        if (originalShell === undefined) delete process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #89cc66fd692563f9 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:297 
        else process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #92ac281368c77da0 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:313 
      const originalPath = process.env.PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a887bcb108e859cd — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:314 
      const originalShell = process.env.SHELL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b8e671ada62cf9ce — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:315 
      process.env.PATH = '/usr/bin:/bin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c269b8510387a7b3 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:316 
      process.env.SHELL = '/bin/zsh';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #519a31bdb818dd11 — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:354 
        process.env.PATH = originalPath;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #baed1db97c1807ee — Environment-variable access.
repo/apps/desktop/src/main/modules/binaries/__tests__/cliAgentBinaries.test.ts:355 
        process.env.SHELL = originalShell;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #90945872c51308e7 — Environment-variable access.
repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:44 
          process.env.PROGRAMFILES || 'C:\\Program Files',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5ae13861be2299c — Environment-variable access.
repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:47 
        userData: path.join(process.env.LOCALAPPDATA || '', 'Google/Chrome/User Data'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb470333501f8c17 — Filesystem access.
repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:78 
      const [port, browserPath] = (await readFile(portFile, 'utf8')).trim().split('\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93e3fac8b291cb4d — Filesystem access.
repo/apps/desktop/src/main/modules/browser/importChromeLoginData.ts:135 
  const localState = JSON.parse(await readFile(localStatePath, 'utf8')) as ChromeLocalState;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d52b13c5155aa19 — Environment-variable access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:16 
  if (process.platform === 'linux' && process.env.APPIMAGE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19d1c7bcd52f8503 — Environment-variable access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:17 
    return process.env.APPIMAGE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bee35bb5e001ddda — Filesystem access.
repo/apps/desktop/src/main/modules/cliEmbedding/generateCliWrapper.ts:95 
  await writeFile(tmpPath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #826289bc002ed20a — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:55 
): string | undefined => (options.env && key in options.env ? options.env[key] : process.env[key]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6c9024d800205b9a — Filesystem access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:133 
    return parseCredentialsJson(await readFile(path.join(configDir, '.credentials.json'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75b002bf39d9fd05 — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:150 
  asNonEmpty(process.env.CLAUDE_CONFIG_DIR);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #7d1133b8e64ae83f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/desktop/src/main/modules/heterogeneousAgent/claudeCodeQuota.ts:310 
    const response = await fetch(OAUTH_USAGE_URL, {
      headers: {
        'Authorization': `Bearer ${lookup.credentials.accessToken}`,
        'Content-Type': 'application/json',
        'User-Agent': OAUTH_USER_AGENT,
        'anthropic-beta': OAUTH_BETA_HEADER,
      },
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #85188377d2048ff9 — Environment-variable access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:98 
  codexHomePath ?? env?.CODEX_HOME ?? process.env.CODEX_HOME ?? path.join(homedir(), '.codex');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #268a35dc126bc31e — Filesystem access.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:195 
    auth = JSON.parse(await readFile(authPath, 'utf8')) as CodexAuthFile;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #58532801aa9bed44 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/apps/desktop/src/main/modules/heterogeneousAgent/codexQuota.ts:230 
    const response = await fetch(CODEX_RATE_LIMIT_RESET_CREDITS_URL, {
      ...auth,
      signal: controller.signal,
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #bfe05d7969861564 — Filesystem access.
repo/apps/desktop/src/main/modules/openInApp/iconExtractor.ts:145 
    const buf = await readFile(outPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7266dec29fd0f4cc — Environment-variable access.
repo/apps/desktop/src/main/modules/terminal/index.ts:42 
  if (process.platform === 'win32') return process.env.ComSpec || 'powershell.exe';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71454491633ed346 — Environment-variable access.
repo/apps/desktop/src/main/modules/terminal/index.ts:43 
  return process.env.SHELL || (process.platform === 'darwin' ? '/bin/zsh' : '/bin/bash');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4cdcfd97a1f0b2ee — Environment-variable access.
repo/apps/desktop/src/main/pre-app-init.ts:20 
  const userDataOverride = process.env.LOBE_DESKTOP_USER_DATA_DIR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f04c364504262898 — Filesystem access.
repo/apps/desktop/src/main/services/fileSrv.ts:100 
      await writeFile(savedPath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3479f29f4f44aa6e — Filesystem access.
repo/apps/desktop/src/main/services/fileSrv.ts:112 
      await writeFile(metaFilePath, JSON.stringify(metadata, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): e2e

npm first-party
expand_more 28 low-confidence finding(s)
low env_fs production #212ac5a22b87bfc5 — Environment-variable access.
repo/e2e/cucumber.config.js:4 
const reportsEnabled = !['0', 'false'].includes(String(process.env.E2E_REPORTS).toLowerCase());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e30cd536d221f387 — Environment-variable access.
repo/e2e/cucumber.config.js:5 
const parsedParallel = Number(process.env.E2E_PARALLEL || process.env.CUCUMBER_PARALLEL || 1);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #202bb5a6bd7efa39 — Environment-variable access.
repo/e2e/cucumber.config.js:7 
const canRunInParallel = Boolean(process.env.BASE_URL);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #679729e55049265d — Environment-variable access.
repo/e2e/src/steps/auth/oidc-device-flow.steps.ts:48 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6294549bb7f80f63 — Environment-variable access.
repo/e2e/src/steps/common/auth.steps.ts:36 
  const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a115218a104c96a3 — Environment-variable access.
repo/e2e/src/steps/common/auth.steps.ts:37 
  const baseURL = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow production #8e3a93c8e697a74f — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/e2e/src/steps/common/auth.steps.ts:41 · flow /tmp/closeopen-g59q7b0s/repo/e2e/src/steps/common/auth.steps.ts:36 → /tmp/closeopen-g59q7b0s/repo/e2e/src/steps/common/auth.steps.ts:41 
    const response = await api.post('/api/auth/sign-in/email', {
      data: {
        email: TEST_USER.email,
        password: TEST_USER.password,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low env_fs production #5f592cec527a3c54 — Environment-variable access.
repo/e2e/src/steps/home/sidebarAgent.steps.ts:62 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35077b67eec10208 — Environment-variable access.
repo/e2e/src/steps/home/sidebarGroup.steps.ts:22 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #489b15a342f329a4 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:9 
process.env['E2E'] = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a75a5d385149682 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:20 
  const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77628cfd7f6b2cc0 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:21 
  baseUrl = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbab23b64ba2f188 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:29 
  if (!process.env.BASE_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48c0b983c57590cb — Environment-variable access.
repo/e2e/src/steps/hooks.ts:33 
      reuseExistingServer: !process.env.CI,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow production #bcbd4b0718a65dac — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/e2e/src/steps/hooks.ts:42 · flow /tmp/closeopen-g59q7b0s/repo/e2e/src/steps/hooks.ts:20 → /tmp/closeopen-g59q7b0s/repo/e2e/src/steps/hooks.ts:42 
    const response = await api.post('/api/auth/sign-in/email', {
      data: {
        email: TEST_USER.email,
        password: TEST_USER.password,
      },
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low env_fs production #d67db0c8430e6881 — Environment-variable access.
repo/e2e/src/steps/hooks.ts:140 
  if (!process.env.BASE_URL && process.env.CI) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2bdc522fe23c49b — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:5 
const runId = process.env.E2E_RUN_ID || process.env.GITHUB_RUN_ID || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1e0795e5b0d07c6 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:6 
const workerId = process.env.CUCUMBER_WORKER_ID || process.env.E2E_WORKER_ID || 'local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7120f010ba96c72 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:33 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef6d99858e1279d5 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:106 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3129724ea48fe355 — Environment-variable access.
repo/e2e/src/support/seedTestUser.ts:142 
  const databaseUrl = process.env.DATABASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a37f296f6a60163a — Environment-variable access.
repo/e2e/src/support/webServer.ts:39 
  const envHost = process.env.HOST?.trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18c07f6a726ccbb6 — Filesystem access.
repo/e2e/src/support/webServer.ts:110 
    writeFileSync(LOCK_FILE, String(process.pid));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1c1c1297afadb2d — Environment-variable access.
repo/e2e/src/support/webServer.ts:147 
      JWKS_KEY: process.env.JWKS_KEY || createTestOidcJwks(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b67a12a92181ee1 — Environment-variable access.
repo/e2e/src/support/world.ts:27 
      headless: process.env.HEADLESS !== 'false',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae7286988550f741 — Environment-variable access.
repo/e2e/src/support/world.ts:66 
    const PORT = process.env.PORT ? Number(process.env.PORT) : 3006;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad27d5a11987e1d9 — Environment-variable access.
repo/e2e/src/support/world.ts:67 
    const BASE_URL = process.env.BASE_URL || `http://localhost:${PORT}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27dc86389cb638d2 — Filesystem access.
repo/e2e/src/support/world.ts:110 
    fs.writeFileSync(filepath, screenshot);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/agent-runtime

npm first-party
expand_more 3 low-confidence finding(s)
low env_fs test-only #751863127b798f2b — Environment-variable access.
repo/packages/agent-runtime/examples/tools-calling.ts:10 
    apiKey: process.env.OPENAI_API_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #880e001f3558027e — Environment-variable access.
repo/packages/agent-runtime/examples/tools-calling.ts:237 
  if (!process.env.OPENAI_API_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bb4f7a2c9bdd2556 — Filesystem access.
repo/packages/agent-runtime/src/agents/__tests__/GraphAgent.test.ts:104 
    readFileSync(path.join(TEST_DIR, 'fixtures/goal-loop.graph.json'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/agent-tracing

npm first-party
expand_more 17 low-confidence finding(s)
low env_fs production #7e130c1f8bfcf075 — Filesystem access.
repo/packages/agent-tracing/src/cli/ctx-lint.ts:67 
      const snap = JSON.parse(await readFile(path.join(dir, f), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfa4b8b5019eef6f — Filesystem access.
repo/packages/agent-tracing/src/cli/ctx-lint.ts:109 
            : [JSON.parse(await readFile(target, 'utf8'))];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b93d19b374eb95e6 — Filesystem access.
repo/packages/agent-tracing/src/cli/tool-quality.ts:57 
      out.push(JSON.parse(await readFile(path.join(dir, f), 'utf8')));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ef786b7a90421f8 — Filesystem access.
repo/packages/agent-tracing/src/cli/tool-quality.ts:195 
            snapshot = JSON.parse(await readFile(file, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3dcb45dbae70ab55 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:27 
    await fs.writeFile(filePath, JSON.stringify(snapshot, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #367e8d362f4f0ce8 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:46 
      const content = await fs.readFile(path.join(this.dir, match), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2bc7d1ff5989d241 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:66 
        const content = await fs.readFile(path.join(this.dir, file), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0383f6fe25891c18 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:81 
      const content = await fs.readFile(realPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae18e744f747f441 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:88 
      const content = await fs.readFile(path.join(this.dir, files[0]), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f922fe74f1f6292c — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:122 
      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee4feccff0426a30 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:129 
      const content = await fs.readFile(path.join(this.partialDir(), match), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #763be5069d973390 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:136 
      const content = await fs.readFile(this.partialPath(operationId), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0b1b3d50a6e05b8 — Filesystem access.
repo/packages/agent-tracing/src/store/file-store.ts:145 
    await fs.writeFile(this.partialPath(operationId), JSON.stringify(partial), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcbe37a3afbb2974 — Environment-variable access.
repo/packages/agent-tracing/src/store/remote-store.ts:57 
  if (process.env.TRACING_BASE_URL) return process.env.TRACING_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88d1d1633bf51564 — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:63 
    const content = await fs.readFile(envPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4690203f1aeeb809 — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:92 
      const content = await fs.readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db47c467bce014cd — Filesystem access.
repo/packages/agent-tracing/src/store/remote-store.ts:148 
    await fs.writeFile(filePath, JSON.stringify(snapshot, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/app-config

npm first-party
expand_more 11 low-confidence finding(s)
low env_fs production #6a75bc715bacc6ae — Environment-variable access.
repo/packages/app-config/src/composio.ts:8 
      COMPOSIO_API_KEY: process.env.COMPOSIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #451b9521dc92bd15 — Environment-variable access.
repo/packages/app-config/src/composio.ts:9 
      COMPOSIO_AUTH_CONFIG_IDS: process.env.COMPOSIO_AUTH_CONFIG_IDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff754c67781f7817 — Environment-variable access.
repo/packages/app-config/src/db.ts:7 
      DATABASE_DRIVER: process.env.DATABASE_DRIVER || 'neon',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd433dd663b3b684 — Environment-variable access.
repo/packages/app-config/src/db.ts:8 
      DATABASE_STATEMENT_TIMEOUT: process.env.DATABASE_STATEMENT_TIMEOUT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb9b190deb92b7ba — Environment-variable access.
repo/packages/app-config/src/db.ts:9 
      DATABASE_TEST_URL: process.env.DATABASE_TEST_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94a952d9f6723a52 — Environment-variable access.
repo/packages/app-config/src/db.ts:10 
      DATABASE_URL: process.env.DATABASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c90cf35cf3f15a6 — Environment-variable access.
repo/packages/app-config/src/db.ts:12 
      KEY_VAULTS_SECRET: process.env.KEY_VAULTS_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f38c84b6854796f — Environment-variable access.
repo/packages/app-config/src/db.ts:14 
      REMOVE_GLOBAL_FILE: process.env.DISABLE_REMOVE_GLOBAL_FILE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a0776d12b630e44 — Environment-variable access.
repo/packages/app-config/src/featureFlags/index.ts:11 
    FEATURE_FLAGS: process.env.FEATURE_FLAGS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b86ab7cbcc4fb42 — Environment-variable access.
repo/packages/app-config/src/featureFlags/schema.ts:5 
const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76a73275662d2686 — Environment-variable access.
repo/packages/app-config/src/messenger.ts:36 
      LOBE_LINK_TOKEN_TTL_SECONDS: process.env.LOBE_LINK_TOKEN_TTL_SECONDS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-cloud-sandbox

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #0cbc8f4a517d3d6a — Filesystem access.
repo/packages/builtin-tool-cloud-sandbox/src/executor/index.ts:101 
    const result = await runtime.readFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed82a4c2a8edcac3 — Filesystem access.
repo/packages/builtin-tool-cloud-sandbox/src/executor/index.ts:110 
    const result = await runtime.writeFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-creds

npm first-party
expand_more 1 low-confidence finding(s)
low env_fs production #1bcb8bf29cc0d87c — Environment-variable access.
repo/packages/builtin-tool-creds/src/ExecutionRuntime/index.ts:171 
      const appUrl = (process.env.APP_URL || OFFICIAL_URL).replace(/\/+$/, '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-local-system

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #df5eddf6462ad9c0 — Filesystem access.
repo/packages/builtin-tool-local-system/src/client/executor/index.ts:105 
      const result = await this.runtime.readFile({
        endLine: params.loc?.[1],
        path: params.path,
        startLine: params.loc?.[0],
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4fd9aa75f4e7636 — Filesystem access.
repo/packages/builtin-tool-local-system/src/client/executor/index.ts:154 
      const result = await this.runtime.writeFile(params);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/builtin-tool-skills

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #83d7adbe628ff660 — Filesystem access.
repo/packages/builtin-tool-skills/src/ExecutionRuntime/index.ts:320 
        const content = await this.deviceFileAccess.readFile(fullPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b5ee0e3a95523ff — Filesystem access.
repo/packages/builtin-tool-skills/src/ExecutionRuntime/index.ts:408 
        let content = await this.deviceFileAccess.readFile(projectSkill.location);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/chat-adapter-qq

npm first-party
expand_more 1 low-confidence finding(s)
low egress production #470f2ed285b36aa3 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/packages/chat-adapter-qq/src/api.ts:29 
    const response = await fetch(AUTH_URL, {
      body: JSON.stringify({
        appId: this.appId,
        clientSecret: this.clientSecret,
      }),
      headers: { 'Content-Type': 'application/json' },
      method: 'POST',
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (npm): packages/database

npm first-party
expand_more 25 low-confidence finding(s)
low env_fs production #e36976c98154e102 — Environment-variable access.
repo/packages/database/src/core/getTestDB.ts:19 
const isServerDBMode = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7a0b5ace0b0f4c0 — Environment-variable access.
repo/packages/database/src/core/web-server.ts:14 
  if (process.env.NODE_ENV === 'test') return {} as LobeChatDatabase;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73449cce405b71b1 — Environment-variable access.
repo/packages/database/src/core/web-server.ts:57 
  if (process.env.MIGRATION_DB === '1') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ec1f699993b0fffd — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:21 
  originalKeyVaultsSecret = process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e485bbf09a61739d — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:22 
  process.env.KEY_VAULTS_SECRET = validKeyVaultsSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1433e0e81840bbc2 — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:31 
  process.env.KEY_VAULTS_SECRET = originalKeyVaultsSecret;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c2ecb198399b11d1 — Environment-variable access.
repo/packages/database/src/models/__tests__/apiKey.test.ts:177 
      process.env.KEY_VAULTS_SECRET = 'Q10pwdq00KXUu9R+c8A8p4PSlIRWi7KwgUophBtkHVk=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #96db9b7e517d80f0 — Filesystem access.
repo/packages/database/src/models/__tests__/jsonbNullTest.test.ts:42 
      readFileSync(file, 'utf8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7d7acd6b307a57e0 — Environment-variable access.
repo/packages/database/src/models/__tests__/messages/message.query.test.ts:1487 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1062c0b97fbab4b4 — Environment-variable access.
repo/packages/database/src/models/__tests__/session.test.ts:287 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c84841ff43d284aa — Environment-variable access.
repo/packages/database/src/models/__tests__/topics/topic.query.test.ts:1553 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b0fe542356af71f3 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/activity.test.ts:240 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cf0465f77fbe2c7d — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/experience.test.ts:437 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f2f65e0efd416bcf — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/identity.test.ts:455 
    const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1a0422e33bfc5e96 — Environment-variable access.
repo/packages/database/src/models/userMemory/__tests__/model.test.ts:523 
      const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d5538a69b4fe594a — Environment-variable access.
repo/packages/database/src/repositories/home/__tests__/index.test.ts:457 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1de77c6c9f507e63 — Environment-variable access.
repo/packages/database/src/repositories/home/index.test.ts:788 
  const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e613cf34b36d57b2 — Environment-variable access.
repo/packages/database/src/repositories/search/index.test.ts:36 
const isServerDB = process.env.TEST_SERVER_DB === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0094a7d757554010 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:66 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f7105a1180969945 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:120 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #44db8c0f243486bd — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:175 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #975c3594af2458c3 — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:209 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b92cde88a97a00ce — Filesystem access.
repo/packages/database/src/repositories/topicImporter/__tests__/importTopic.test.ts:234 
      const fileContent = readFileSync(jsonPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #733fe8ae467b595c — Environment-variable access.
repo/packages/database/src/server/models/__tests__/user.test.ts:25 
  process.env.KEY_VAULTS_SECRET = 'ofQiJCXLF8mYemwfMWLOHoHimlPu91YmLfU7YZ4lreQ=';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0266241e78875255 — Environment-variable access.
repo/packages/database/src/server/models/__tests__/user.test.ts:31 
  process.env.KEY_VAULTS_SECRET = undefined;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/device-control

npm first-party
expand_more 31 low-confidence finding(s)
low env_fs test-only #abdc4172536f9d8d — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:19 
  await writeFile(
    path.join(root, '.agents', 'skills', 'spa-routes', 'SKILL.md'),
    '---\nname: spa-routes\ndescription: SPA routing\n---\nbody',
  );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #907e084cdd4e4388 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:23 
  await writeFile(path.join(root, 'AGENTS.md'), '# Agents');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #22696c917476a054 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:79 
    await writeFile(
      path.join(deviceSkillRoot, 'device-writer', 'SKILL.md'),
      '---\nname: device-writer\ndescription: Device writer\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7684fefa7bd790fd — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:84 
    await writeFile(
      path.join(deviceSkillRoot, 'spa-routes', 'SKILL.md'),
      '---\nname: spa-routes\ndescription: Device duplicate\n---\nbody',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e0298a28e7cae993 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:112 
    await writeFile(
      path.join(root, '.agents', 'skills', 'agent-testing', 'SKILL.md'),
      [
        '---',
        'name: agent-testing',
        'description: >',
        '  Agentic end-to-end testing for LobeHub: backend verification via the CLI,',
        '  frontend verification via agent-browser (Electron).',
        '---',
        'body',
      ].join('\n'),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b16d30afa1c32e27 — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:165 
    await writeFile(oldPath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #130fd3db87c954bb — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:180 
    await writeFile(filePath, 'hello');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #74ea45056fcb665e — Filesystem access.
repo/packages/device-control/src/__tests__/dispatch.test.ts:202 
    expect(await readFile(filePath, 'utf8')).toBe('remote edit');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b732dcc1ba8fcc7d — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:15 
  await writeFile(path.join(root, 'note.txt'), 'hello preview\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ee40110f25922450 — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:16 
  await writeFile(path.join(root, 'pic.png'), Buffer.from([0x89, 0x50, 0x4e, 0x47, 1, 2, 3]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3ce3eddf6093d2b4 — Filesystem access.
repo/packages/device-control/src/__tests__/filePreview.test.ts:17 
  await writeFile(path.join(outside, 'secret.txt'), 'do not read\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dc70e356f25db79e — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:25 
    await writeFile(path.join(dir, 'src', 'index.ts'), 'export const a = 1;\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7d22cff8b92be47e — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:26 
    await writeFile(path.join(dir, 'README.md'), '# hi\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9deb5d8e18e56ffb — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:30 
    await writeFile(path.join(dir, 'scratch.txt'), 'tmp\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f5578263915bad23 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:49 
    await writeFile(path.join(dir, 'one.txt'), '1\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #51e753da1851fb6d — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:50 
    await writeFile(path.join(dir, 'nested', 'deep', 'two.txt'), '2\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9f785808c3d13f15 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:51 
    await writeFile(path.join(dir, '.agents', 'config.md'), '# cfg\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c9d951aff82cdd40 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:80 
    await writeFile(
      path.join(dir, 'src', 'components', 'Button.tsx'),
      'export const Button = 1;\n',
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b2081d8c863502c3 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:84 
    await writeFile(path.join(dir, 'src', 'components', 'Input.tsx'), 'export const Input = 1;\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1dc67129ec1ee153 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:102 
    await writeFile(path.join(dir, 'nested', 'deep', 'target-file.ts'), 'target\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4630c996886de4f1 — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:103 
    await writeFile(path.join(dir, 'nested', 'deep', 'other.ts'), 'other\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #77e92561f62cb24f — Filesystem access.
repo/packages/device-control/src/__tests__/projectFileIndex.test.ts:119 
    await writeFile(path.join(dir, '.agents', 'skills', 'target-skill.md'), 'skill\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e760c5fe5a25bc04 — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:45 
    await expect(readFile(path.join(result.extractedDir, 'SKILL.md'), 'utf8')).resolves.toBe(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6417f5ba89f20435 — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:49 
      readFile(path.join(result.extractedDir, 'scripts', 'run.sh'), 'utf8'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #be475b8a852240a7 — Filesystem access.
repo/packages/device-control/src/__tests__/skillDirectory.test.ts:51 
    const marker = JSON.parse(await readFile(path.join(result.extractedDir, '.prepared'), 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f977503eb6983a9 — Filesystem access.
repo/packages/device-control/src/filePreview.ts:121 
    const buffer = await readFile(realFile);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d62c27a6403791c8 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:99 
      await writeFile(zipPath, buffer);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #397d5fb082de80d0 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:111 
        await writeFile(targetPath, Buffer.from(fileContent as Uint8Array));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f2149498910a462 — Filesystem access.
repo/packages/device-control/src/skillDirectory.ts:114 
      await writeFile(
        path.join(stagingDir, '.prepared'),
        JSON.stringify({ preparedAt: Date.now(), url, zipHash }),
        'utf8',
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92db963b2c11bee2 — Filesystem access.
repo/packages/device-control/src/workspace.ts:142 
          const raw = await readFile(skillFile, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a20ac6c693e22142 — Filesystem access.
repo/packages/device-control/src/workspace.ts:204 
      const raw = await readFile(path.join(root, source), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/device-gateway-client

npm first-party
expand_more 3 low-confidence finding(s)
low pii_flow production #36efd27874451e01 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/packages/device-gateway-client/src/http.ts:127 · flow /tmp/closeopen-g59q7b0s/repo/packages/device-gateway-client/src/http.ts:134 → /tmp/closeopen-g59q7b0s/repo/packages/device-gateway-client/src/http.ts:127 
    const res = await this.post(
      '/api/device/tool-call',
      {
        deviceId: params.deviceId,
        operationId: params.operationId,
        timeout: params.timeout,
        toolCall,
        userId: params.userId,
        workspaceId: params.workspaceId,
      },
      { timeout: timeout + HTTP_CALL_TIMEOUT_PADDING_MS },
    );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low pii_flow production #0bd0ae6e1ff305d0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/packages/device-gateway-client/src/http.ts:175 · flow /tmp/closeopen-g59q7b0s/repo/packages/device-gateway-client/src/http.ts:179 → /tmp/closeopen-g59q7b0s/repo/packages/device-gateway-client/src/http.ts:175 
    const res = await this.post('/api/device/message-api', {
      api,
      deviceId: params.deviceId,
      timeout: params.timeout,
      userId: params.userId,
      workspaceId: params.workspaceId,
    });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low pii_flow production #b53f1dc0bb88fa06 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Same-origin destination — not external exfiltration.
repo/packages/device-gateway-client/src/http.ts:250 · flow /tmp/closeopen-g59q7b0s/repo/packages/device-gateway-client/src/http.ts:257 → /tmp/closeopen-g59q7b0s/repo/packages/device-gateway-client/src/http.ts:250 
    const res = await this.post(
      '/api/device/rpc',
      {
        deviceId: params.deviceId,
        method: rpc.method,
        params: rpc.params,
        timeout: params.timeout,
        userId: params.userId,
        workspaceId: params.workspaceId,
      },
      { timeout: timeout + HTTP_CALL_TIMEOUT_PADDING_MS },
    );

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

first-party (npm): packages/electron-server-ipc

npm first-party
expand_more 2 low-confidence finding(s)
low env_fs production #4c07e3d6c318bae9 — Filesystem access.
repo/packages/electron-server-ipc/src/ipcClient.ts:50 
        const socketInfo = JSON.parse(fs.readFileSync(socketInfoPath, 'utf8'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc4c8b8a74c4eaad — Filesystem access.
repo/packages/electron-server-ipc/src/ipcServer.ts:56 
        fs.writeFileSync(socketInfoPath, JSON.stringify({ socketPath: this.socketPath }), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/env

npm first-party
expand_more 430 low-confidence finding(s)
low env_fs test-only #f01f098a84038095 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:19 
    process.env.PLAUSIBLE_DOMAIN = 'example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #09a776049f082d70 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:20 
    process.env.POSTHOG_KEY = 'posthog_key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b2e8d2176348c2cf — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:21 
    process.env.UMAMI_WEBSITE_ID = 'umami_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fed25ddd2d4d8685 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:22 
    process.env.CLARITY_PROJECT_ID = 'clarity_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #29b8210e91a564db — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:23 
    process.env.ENABLE_VERCEL_ANALYTICS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #808a60f95c61915d — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:24 
    process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID = 'ga_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #26591fe536c183ee — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:25 
    process.env.X_ADS_PIXEL_ID = 'tw-pixel_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #421147e4391daacd — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:26 
    process.env.X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID = 'tw-pixel_id-login_or_signup_clicked';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dfe946052b301386 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:27 
    process.env.X_ADS_MAIN_PAGE_VIEW_EVENT_ID = 'tw-pixel_id-main_page_view';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a133823aa9c25261 — Environment-variable access.
repo/packages/env/src/__tests__/analytics.test.ts:28 
    process.env.X_ADS_PURCHASE_EVENT_ID = 'tw-pixel_id-purchase_event_id';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ecceba30d00c2416 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:23 
      process.env.AGENTS_INDEX_URL = 'https://custom-agents-url.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #999de95a9a71ce06 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:24 
      process.env.PLUGINS_INDEX_URL = 'https://custom-plugins-url.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9babb4550cff0feb — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:32 
      process.env.AGENTS_INDEX_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c8c702cb044ea350 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:33 
      process.env.PLUGINS_INDEX_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a5e7ca2bbf4f8bc8 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:48 
      process.env.APP_URL = 'https://example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8dc88d8b61d69818 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:49 
      delete process.env.INTERNAL_APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0486de74a3b10a69 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:57 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7e7f3369250ed146 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:58 
      process.env.INTERNAL_APP_URL = 'http://localhost:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9c0c446865f88fab — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:66 
      process.env.APP_URL = 'https://public.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #96d760dff5053706 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:67 
      process.env.INTERNAL_APP_URL = 'http://internal-service:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6733244fc8d84c9e — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:76 
      process.env.APP_URL = 'https://cloudflare-proxied.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #30282116bd00901e — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:77 
      process.env.INTERNAL_APP_URL = 'http://127.0.0.1:3210';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #79a14fe8ffc1e115 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:90 
    delete process.env.APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #be01bc8e14491544 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:91 
    delete process.env.VERCEL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fe88873673c45ebf — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:92 
    delete process.env.VERCEL_ENV;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cb6d99627b2fbfcc — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:93 
    delete process.env.VERCEL_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ce57c23874b7ee84 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:94 
    delete process.env.VERCEL_BRANCH_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9cee4f4d8f9da1f9 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:95 
    delete process.env.VERCEL_PROJECT_PRODUCTION_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ede6d1e017dace8a — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:99 
    process.env.APP_URL = 'https://custom-app.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a9f90ea525a2024b — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:100 
    process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #08491167fc45538c — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:109 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3b16118bf145ea2c — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:110 
      process.env.VERCEL_ENV = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #29e248262714bc7a — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:111 
      process.env.VERCEL_PROJECT_PRODUCTION_URL = 'lobechat.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2a68db1ccb1caa89 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:112 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-main-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5d6ef951dfd8ef4b — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:113 
      process.env.VERCEL_URL = 'lobechat-abc123.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4621048a501f6c96 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:121 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ad4184e735dbbba1 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:122 
      process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9298c98671f3222d — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:123 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-feature-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bad460ba5e27f3de — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:124 
      process.env.VERCEL_URL = 'lobechat-abc123.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c127125167367484 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:132 
      process.env.VERCEL = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4a7ed23e8bc98686 — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:133 
      process.env.VERCEL_ENV = 'preview';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1b0a4b90d2b1b43a — Environment-variable access.
repo/packages/env/src/__tests__/app.test.ts:134 
      process.env.VERCEL_BRANCH_URL = 'lobechat-git-feature-org.vercel.app';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e6b5a0bf9c88fea1 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:13 
    process.env.NEXT_PUBLIC_ANALYTICS_PLAUSIBLE = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1ca56c92cc9c46f8 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:14 
    process.env.NEXT_PUBLIC_ANALYTICS_POSTHOG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #45a9b4fed32e757d — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:15 
    process.env.NEXT_PUBLIC_POSTHOG_DEBUG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #65056c2f7642a891 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:16 
    process.env.NEXT_PUBLIC_I18N_DEBUG = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e0e95435ca416fc3 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:17 
    process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e4eafa92fd3b22ad — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:18 
    process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #36ed9b1814456feb — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:27 
    process.env.NEXT_PUBLIC_ANALYTICS_PLAUSIBLE = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c8f4e409b4ad4d62 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:28 
    process.env.NEXT_PUBLIC_ANALYTICS_POSTHOG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6b757f594134b5b7 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:29 
    process.env.NEXT_PUBLIC_POSTHOG_DEBUG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e8d174ffa6e181f2 — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:30 
    process.env.NEXT_PUBLIC_I18N_DEBUG = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #381ef2d2409a2d8b — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:31 
    process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ab40d05e4f4a592c — Environment-variable access.
repo/packages/env/src/__tests__/client.test.ts:32 
    process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER = '0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #64847575a807d247 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:7 
    delete process.env.SANDBOX_PROVIDER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #790a6b1400f8e8d6 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:8 
    delete process.env.ONLYBOXES_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a0f3b99a67e79f01 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:9 
    delete process.env.ONLYBOXES_JIT_ISSUER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #49a2ec39e1e8147d — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:10 
    delete process.env.ONLYBOXES_JIT_SIGNING_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6f86346af2bb446e — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:11 
    delete process.env.ONLYBOXES_JIT_TTL_SEC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b0dc00b9dc36839d — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:12 
    delete process.env.ONLYBOXES_LEASE_TTL_SEC;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0f7d7a5fa4850b56 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:16 
    process.env.SANDBOX_PROVIDER = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a02173dab0e2e008 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:17 
    process.env.ONLYBOXES_BASE_URL = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #240eca728637b5a7 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:18 
    process.env.ONLYBOXES_JIT_ISSUER = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f9f80f6ef8fb9773 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:19 
    process.env.ONLYBOXES_JIT_SIGNING_KEY = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #365b9d07cf92d283 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:20 
    process.env.ONLYBOXES_JIT_TTL_SEC = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #701f7fe787486a0b — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:21 
    process.env.ONLYBOXES_LEASE_TTL_SEC = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #27fbdd15783aae83 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:35 
    process.env.SANDBOX_PROVIDER = 'onlyboxes';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c79a76ce1843d227 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:36 
    process.env.ONLYBOXES_BASE_URL = 'https://onlyboxes.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2efaf6521d6105b8 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:37 
    process.env.ONLYBOXES_JIT_ISSUER = 'lobehub-test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a4374a6a2b175ea6 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:38 
    process.env.ONLYBOXES_JIT_SIGNING_KEY = 'jit-signing-key';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #76060977eed5b8a8 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:39 
    process.env.ONLYBOXES_JIT_TTL_SEC = '900';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7ac5ed90afc53500 — Environment-variable access.
repo/packages/env/src/__tests__/sandbox.test.ts:40 
    process.env.ONLYBOXES_LEASE_TTL_SEC = '3600';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2bba72b6241dd3a — Environment-variable access.
repo/packages/env/src/analytics.ts:39 
      ENABLED_PLAUSIBLE_ANALYTICS: !!process.env.PLAUSIBLE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91494c13212c67f1 — Environment-variable access.
repo/packages/env/src/analytics.ts:40 
      PLAUSIBLE_DOMAIN: process.env.PLAUSIBLE_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af230333941e91a5 — Environment-variable access.
repo/packages/env/src/analytics.ts:41 
      PLAUSIBLE_SCRIPT_BASE_URL: process.env.PLAUSIBLE_SCRIPT_BASE_URL || 'https://plausible.io',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2bf4bbe66a22309 — Environment-variable access.
repo/packages/env/src/analytics.ts:44 
      ENABLED_POSTHOG_ANALYTICS: !!process.env.POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b557b2cbdaf1b28e — Environment-variable access.
repo/packages/env/src/analytics.ts:45 
      POSTHOG_KEY: process.env.POSTHOG_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af5f41031836ecb6 — Environment-variable access.
repo/packages/env/src/analytics.ts:46 
      POSTHOG_HOST: process.env.POSTHOG_HOST || 'https://app.posthog.com',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #852db7cb7ee1a665 — Environment-variable access.
repo/packages/env/src/analytics.ts:47 
      DEBUG_POSTHOG_ANALYTICS: process.env.DEBUG_POSTHOG_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16132ae94958cb2d — Environment-variable access.
repo/packages/env/src/analytics.ts:50 
      ENABLED_UMAMI_ANALYTICS: !!process.env.UMAMI_WEBSITE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38504be3b8431e59 — Environment-variable access.
repo/packages/env/src/analytics.ts:51 
      UMAMI_SCRIPT_URL: process.env.UMAMI_SCRIPT_URL || 'https://analytics.umami.is/script.js',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47cce2d31bb8f376 — Environment-variable access.
repo/packages/env/src/analytics.ts:52 
      UMAMI_WEBSITE_ID: process.env.UMAMI_WEBSITE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7ac0581f9856fd6 — Environment-variable access.
repo/packages/env/src/analytics.ts:55 
      ENABLED_CLARITY_ANALYTICS: !!process.env.CLARITY_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29d171b1890584e6 — Environment-variable access.
repo/packages/env/src/analytics.ts:56 
      CLARITY_PROJECT_ID: process.env.CLARITY_PROJECT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d2f3e98e897c128 — Environment-variable access.
repo/packages/env/src/analytics.ts:59 
      ENABLE_VERCEL_ANALYTICS: process.env.ENABLE_VERCEL_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da6cb895ed10026d — Environment-variable access.
repo/packages/env/src/analytics.ts:60 
      DEBUG_VERCEL_ANALYTICS: process.env.DEBUG_VERCEL_ANALYTICS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fdb17f88058e34ac — Environment-variable access.
repo/packages/env/src/analytics.ts:63 
      ENABLE_GOOGLE_ANALYTICS: !!process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b81765018383c6d — Environment-variable access.
repo/packages/env/src/analytics.ts:64 
      GOOGLE_ANALYTICS_MEASUREMENT_ID: process.env.GOOGLE_ANALYTICS_MEASUREMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b663b4b4e28230fe — Environment-variable access.
repo/packages/env/src/analytics.ts:67 
      ENABLED_X_ADS: !!process.env.X_ADS_PIXEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #557e1306d812fa99 — Environment-variable access.
repo/packages/env/src/analytics.ts:68 
      X_ADS_PIXEL_ID: process.env.X_ADS_PIXEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #418eb7cd6b3844f2 — Environment-variable access.
repo/packages/env/src/analytics.ts:69 
      X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID: process.env.X_ADS_LOGIN_OR_SIGNUP_CLICKED_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b5a72765fdb23c4 — Environment-variable access.
repo/packages/env/src/analytics.ts:70 
      X_ADS_MAIN_PAGE_VIEW_EVENT_ID: process.env.X_ADS_MAIN_PAGE_VIEW_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #21cb40c4c687365e — Environment-variable access.
repo/packages/env/src/analytics.ts:71 
      X_ADS_PURCHASE_EVENT_ID: process.env.X_ADS_PURCHASE_EVENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b263d875188e8b4 — Environment-variable access.
repo/packages/env/src/analytics.ts:75 
      REACT_SCAN_MONITOR_API_KEY: process.env.REACT_SCAN_MONITOR_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb10479e4825f257 — Environment-variable access.
repo/packages/env/src/app.ts:4 
const isInVercel = process.env.VERCEL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf75ea8afc5ae0bc — Environment-variable access.
repo/packages/env/src/app.ts:11 
  if (process.env.VERCEL_ENV === 'production' && process.env.VERCEL_PROJECT_PRODUCTION_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e65f06f81487f81b — Environment-variable access.
repo/packages/env/src/app.ts:12 
    return `https://${process.env.VERCEL_PROJECT_PRODUCTION_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58e97c444a77e93d — Environment-variable access.
repo/packages/env/src/app.ts:14 
  if (process.env.VERCEL_URL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5100278cd6f3831b — Environment-variable access.
repo/packages/env/src/app.ts:15 
    return `https://${process.env.VERCEL_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3252de89f592c7a1 — Environment-variable access.
repo/packages/env/src/app.ts:17 
  return `https://${process.env.VERCEL_BRANCH_URL}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #012f895d8b89d12e — Environment-variable access.
repo/packages/env/src/app.ts:20 
const APP_URL = process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c5c235ecc7fad96 — Environment-variable access.
repo/packages/env/src/app.ts:21 
  ? process.env.APP_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98c58ad59ac5d7ac — Environment-variable access.
repo/packages/env/src/app.ts:24 
    : process.env.NODE_ENV === 'development'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98fa1c1fb65257f6 — Environment-variable access.
repo/packages/env/src/app.ts:25 
      ? `http://localhost:${process.env.PORT || 3010}`

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #03eab20861d970c8 — Environment-variable access.
repo/packages/env/src/app.ts:26 
      : `http://localhost:${process.env.PORT || 3210}`;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d739eb7e1fbb9002 — Environment-variable access.
repo/packages/env/src/app.ts:30 
const INTERNAL_APP_URL = process.env.INTERNAL_APP_URL || APP_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #668d1d06f2c481b9 — Environment-variable access.
repo/packages/env/src/app.ts:92 
      NEXT_PUBLIC_ENABLE_SENTRY: !!process.env.NEXT_PUBLIC_SENTRY_DSN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aeb618fc667d3729 — Environment-variable access.
repo/packages/env/src/app.ts:94 
      AGENTS_INDEX_URL: !!process.env.AGENTS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #820cbce235acbd4c — Environment-variable access.
repo/packages/env/src/app.ts:95 
        ? process.env.AGENTS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea6c0a745489d0f3 — Environment-variable access.
repo/packages/env/src/app.ts:98 
      DEFAULT_AGENT_CONFIG: process.env.DEFAULT_AGENT_CONFIG || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc04266a0d18f9e1 — Environment-variable access.
repo/packages/env/src/app.ts:99 
      SYSTEM_AGENT: process.env.SYSTEM_AGENT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c1d7b01c6098a5b — Environment-variable access.
repo/packages/env/src/app.ts:101 
      PLUGINS_INDEX_URL: !!process.env.PLUGINS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #92d38559b7518500 — Environment-variable access.
repo/packages/env/src/app.ts:102 
        ? process.env.PLUGINS_INDEX_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87bb4b5ee3980486 — Environment-variable access.
repo/packages/env/src/app.ts:105 
      PLUGIN_SETTINGS: process.env.PLUGIN_SETTINGS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #160e6ae06c0dc36e — Environment-variable access.
repo/packages/env/src/app.ts:107 
      VERCEL_EDGE_CONFIG: process.env.VERCEL_EDGE_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2cb4b5290b49ae6 — Environment-variable access.
repo/packages/env/src/app.ts:111 
      MIDDLEWARE_REWRITE_THROUGH_LOCAL: process.env.MIDDLEWARE_REWRITE_THROUGH_LOCAL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f80d3dfbc482d848 — Environment-variable access.
repo/packages/env/src/app.ts:113 
      CUSTOM_FONT_FAMILY: process.env.CUSTOM_FONT_FAMILY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab0ff6b79bbf7e33 — Environment-variable access.
repo/packages/env/src/app.ts:114 
      CUSTOM_FONT_URL: process.env.CUSTOM_FONT_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f38d343a0025a60 — Environment-variable access.
repo/packages/env/src/app.ts:115 
      CDN_USE_GLOBAL: process.env.CDN_USE_GLOBAL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3568779c6e614e8d — Environment-variable access.
repo/packages/env/src/app.ts:117 
      SSRF_ALLOW_PRIVATE_IP_ADDRESS: process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26a26194f67fe545 — Environment-variable access.
repo/packages/env/src/app.ts:118 
      SSRF_ALLOW_IP_ADDRESS_LIST: process.env.SSRF_ALLOW_IP_ADDRESS_LIST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b923eac078b860b7 — Environment-variable access.
repo/packages/env/src/app.ts:119 
      MARKET_BASE_URL: process.env.MARKET_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18d13014da68aea1 — Environment-variable access.
repo/packages/env/src/app.ts:121 
      MARKET_TRUSTED_CLIENT_SECRET: process.env.MARKET_TRUSTED_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91d6d7106e5b40e8 — Environment-variable access.
repo/packages/env/src/app.ts:122 
      MARKET_TRUSTED_CLIENT_ID: process.env.MARKET_TRUSTED_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #152a031749f8636a — Environment-variable access.
repo/packages/env/src/app.ts:124 
      AGENT_GATEWAY_SERVICE_TOKEN: process.env.AGENT_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55296c790d937182 — Environment-variable access.
repo/packages/env/src/app.ts:125 
      ENABLE_AGENT_GATEWAY: process.env.ENABLE_AGENT_GATEWAY === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #718b84ac6e98627b — Environment-variable access.
repo/packages/env/src/app.ts:126 
      AGENT_GATEWAY_URL: process.env.AGENT_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b6060d23bea8f3dc — Environment-variable access.
repo/packages/env/src/app.ts:127 
      enableQueueAgentRuntime: process.env.AGENT_RUNTIME_MODE === 'queue',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d3aa87a29a12c47 — Environment-variable access.
repo/packages/env/src/app.ts:128 
      TELEMETRY_DISABLED: process.env.TELEMETRY_DISABLED === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d00ffddd5dace05a — Environment-variable access.
repo/packages/env/src/auth.ts:202 
      AUTH_EMAIL_VERIFICATION: process.env.AUTH_EMAIL_VERIFICATION === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db270f1e6960b3d1 — Environment-variable access.
repo/packages/env/src/auth.ts:203 
      AUTH_ENABLE_MAGIC_LINK: process.env.AUTH_ENABLE_MAGIC_LINK === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0efa4ad6edb74f27 — Environment-variable access.
repo/packages/env/src/auth.ts:204 
      AUTH_SECRET: process.env.AUTH_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f7df696de6222cb — Environment-variable access.
repo/packages/env/src/auth.ts:205 
      AUTH_SSO_PROVIDERS: process.env.AUTH_SSO_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b70086e404bc4ef — Environment-variable access.
repo/packages/env/src/auth.ts:206 
      AUTH_TRUSTED_ORIGINS: process.env.AUTH_TRUSTED_ORIGINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #083bc835ea774e56 — Environment-variable access.
repo/packages/env/src/auth.ts:207 
      AUTH_ALLOWED_EMAILS: process.env.AUTH_ALLOWED_EMAILS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b7c7b0740fd0f3d — Environment-variable access.
repo/packages/env/src/auth.ts:208 
      AUTH_DISABLE_EMAIL_PASSWORD: process.env.AUTH_DISABLE_EMAIL_PASSWORD === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a459c0a19c00c7d — Environment-variable access.
repo/packages/env/src/auth.ts:211 
      AUTH_COGNITO_DOMAIN: process.env.AUTH_COGNITO_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c8a97f9461e0b36 — Environment-variable access.
repo/packages/env/src/auth.ts:212 
      AUTH_COGNITO_REGION: process.env.AUTH_COGNITO_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #65bd4690677c1df0 — Environment-variable access.
repo/packages/env/src/auth.ts:213 
      AUTH_COGNITO_USERPOOL_ID: process.env.AUTH_COGNITO_USERPOOL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bacf133cd81c1f06 — Environment-variable access.
repo/packages/env/src/auth.ts:216 
      AUTH_GOOGLE_ID: process.env.AUTH_GOOGLE_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #578d28cb3e44753b — Environment-variable access.
repo/packages/env/src/auth.ts:217 
      AUTH_GOOGLE_SECRET: process.env.AUTH_GOOGLE_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1be31bc4621061ca — Environment-variable access.
repo/packages/env/src/auth.ts:219 
      AUTH_APPLE_CLIENT_ID: process.env.AUTH_APPLE_CLIENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2c19b0cb4c4855f — Environment-variable access.
repo/packages/env/src/auth.ts:220 
      AUTH_APPLE_CLIENT_SECRET: process.env.AUTH_APPLE_CLIENT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0fdfab58caa3e90 — Environment-variable access.
repo/packages/env/src/auth.ts:221 
      AUTH_APPLE_APP_BUNDLE_IDENTIFIER: process.env.AUTH_APPLE_APP_BUNDLE_IDENTIFIER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b00db104fcd905d — Environment-variable access.
repo/packages/env/src/auth.ts:223 
      AUTH_GITHUB_ID: process.env.AUTH_GITHUB_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f1a945e30f367dd — Environment-variable access.
repo/packages/env/src/auth.ts:224 
      AUTH_GITHUB_SECRET: process.env.AUTH_GITHUB_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62768ed0e7c22e1b — Environment-variable access.
repo/packages/env/src/auth.ts:226 
      AUTH_MICROSOFT_AUTHORITY_URL: process.env.AUTH_MICROSOFT_AUTHORITY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #277097dc38312303 — Environment-variable access.
repo/packages/env/src/auth.ts:227 
      AUTH_MICROSOFT_ID: process.env.AUTH_MICROSOFT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e96ec8e6bc7a8bb5 — Environment-variable access.
repo/packages/env/src/auth.ts:228 
      AUTH_MICROSOFT_SECRET: process.env.AUTH_MICROSOFT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26810ebd7e6aeb12 — Environment-variable access.
repo/packages/env/src/auth.ts:229 
      AUTH_MICROSOFT_TENANT_ID: process.env.AUTH_MICROSOFT_TENANT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f68973b57136975 — Environment-variable access.
repo/packages/env/src/auth.ts:231 
      AUTH_COGNITO_ID: process.env.AUTH_COGNITO_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5e5aae2ecb008e2 — Environment-variable access.
repo/packages/env/src/auth.ts:232 
      AUTH_COGNITO_SECRET: process.env.AUTH_COGNITO_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f936ee633ffc7955 — Environment-variable access.
repo/packages/env/src/auth.ts:233 
      AUTH_COGNITO_ISSUER: process.env.AUTH_COGNITO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3895bd3bc5a4207f — Environment-variable access.
repo/packages/env/src/auth.ts:235 
      AUTH_AUTH0_ID: process.env.AUTH_AUTH0_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e0e73e04c895e45 — Environment-variable access.
repo/packages/env/src/auth.ts:236 
      AUTH_AUTH0_SECRET: process.env.AUTH_AUTH0_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #804d141528721e64 — Environment-variable access.
repo/packages/env/src/auth.ts:237 
      AUTH_AUTH0_ISSUER: process.env.AUTH_AUTH0_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44cb81a8a92a9e99 — Environment-variable access.
repo/packages/env/src/auth.ts:239 
      AUTH_AUTHELIA_ID: process.env.AUTH_AUTHELIA_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6842576fa89f9ec1 — Environment-variable access.
repo/packages/env/src/auth.ts:240 
      AUTH_AUTHELIA_SECRET: process.env.AUTH_AUTHELIA_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b679f7d6508ee6ba — Environment-variable access.
repo/packages/env/src/auth.ts:241 
      AUTH_AUTHELIA_ISSUER: process.env.AUTH_AUTHELIA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e62937cadf7a2ef — Environment-variable access.
repo/packages/env/src/auth.ts:243 
      AUTH_AUTHENTIK_ID: process.env.AUTH_AUTHENTIK_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c4d47d1273d633c — Environment-variable access.
repo/packages/env/src/auth.ts:244 
      AUTH_AUTHENTIK_SECRET: process.env.AUTH_AUTHENTIK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #778e30a794bdcc88 — Environment-variable access.
repo/packages/env/src/auth.ts:245 
      AUTH_AUTHENTIK_ISSUER: process.env.AUTH_AUTHENTIK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dee4ed8e13f5a0ba — Environment-variable access.
repo/packages/env/src/auth.ts:247 
      AUTH_CASDOOR_ID: process.env.AUTH_CASDOOR_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #690bd7776f168c08 — Environment-variable access.
repo/packages/env/src/auth.ts:248 
      AUTH_CASDOOR_SECRET: process.env.AUTH_CASDOOR_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #46889aa5902a0132 — Environment-variable access.
repo/packages/env/src/auth.ts:249 
      AUTH_CASDOOR_ISSUER: process.env.AUTH_CASDOOR_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2518c6e3693c0d67 — Environment-variable access.
repo/packages/env/src/auth.ts:251 
      AUTH_CLOUDFLARE_ZERO_TRUST_ID: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3be4f827e4e44cc0 — Environment-variable access.
repo/packages/env/src/auth.ts:252 
      AUTH_CLOUDFLARE_ZERO_TRUST_SECRET: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #550f39f4f6f6356c — Environment-variable access.
repo/packages/env/src/auth.ts:253 
      AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER: process.env.AUTH_CLOUDFLARE_ZERO_TRUST_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b5eaefcd5a510ac — Environment-variable access.
repo/packages/env/src/auth.ts:255 
      AUTH_FEISHU_APP_ID: process.env.AUTH_FEISHU_APP_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4325069ee3214255 — Environment-variable access.
repo/packages/env/src/auth.ts:256 
      AUTH_FEISHU_APP_SECRET: process.env.AUTH_FEISHU_APP_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3839f7fc9b85759e — Environment-variable access.
repo/packages/env/src/auth.ts:258 
      AUTH_GENERIC_OIDC_ID: process.env.AUTH_GENERIC_OIDC_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #952af6f427e833b2 — Environment-variable access.
repo/packages/env/src/auth.ts:259 
      AUTH_GENERIC_OIDC_SECRET: process.env.AUTH_GENERIC_OIDC_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b47d0355668d3871 — Environment-variable access.
repo/packages/env/src/auth.ts:260 
      AUTH_GENERIC_OIDC_ISSUER: process.env.AUTH_GENERIC_OIDC_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #68c6ba87038462cb — Environment-variable access.
repo/packages/env/src/auth.ts:262 
      AUTH_KEYCLOAK_ID: process.env.AUTH_KEYCLOAK_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d98eebac4889837 — Environment-variable access.
repo/packages/env/src/auth.ts:263 
      AUTH_KEYCLOAK_SECRET: process.env.AUTH_KEYCLOAK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7bf68fffb0bef819 — Environment-variable access.
repo/packages/env/src/auth.ts:264 
      AUTH_KEYCLOAK_ISSUER: process.env.AUTH_KEYCLOAK_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6facda1fd353e34 — Environment-variable access.
repo/packages/env/src/auth.ts:266 
      AUTH_LOGTO_ID: process.env.AUTH_LOGTO_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3dddc1ffaf46204a — Environment-variable access.
repo/packages/env/src/auth.ts:267 
      AUTH_LOGTO_SECRET: process.env.AUTH_LOGTO_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a6df041ebca7678 — Environment-variable access.
repo/packages/env/src/auth.ts:268 
      AUTH_LOGTO_ISSUER: process.env.AUTH_LOGTO_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4241121a53435237 — Environment-variable access.
repo/packages/env/src/auth.ts:270 
      AUTH_OKTA_ID: process.env.AUTH_OKTA_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba0fb607d601b149 — Environment-variable access.
repo/packages/env/src/auth.ts:271 
      AUTH_OKTA_SECRET: process.env.AUTH_OKTA_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #532c2b06dd16d90d — Environment-variable access.
repo/packages/env/src/auth.ts:272 
      AUTH_OKTA_ISSUER: process.env.AUTH_OKTA_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83bfcf05febf703f — Environment-variable access.
repo/packages/env/src/auth.ts:274 
      AUTH_WECHAT_ID: process.env.AUTH_WECHAT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87f4fa34ce836556 — Environment-variable access.
repo/packages/env/src/auth.ts:275 
      AUTH_WECHAT_SECRET: process.env.AUTH_WECHAT_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3af701ea3b9db4de — Environment-variable access.
repo/packages/env/src/auth.ts:277 
      AUTH_ZITADEL_ID: process.env.AUTH_ZITADEL_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b12466031e80953 — Environment-variable access.
repo/packages/env/src/auth.ts:278 
      AUTH_ZITADEL_SECRET: process.env.AUTH_ZITADEL_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cbdced87e07053a — Environment-variable access.
repo/packages/env/src/auth.ts:279 
      AUTH_ZITADEL_ISSUER: process.env.AUTH_ZITADEL_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24167f37b884a499 — Environment-variable access.
repo/packages/env/src/auth.ts:282 
      LOGTO_WEBHOOK_SIGNING_KEY: process.env.LOGTO_WEBHOOK_SIGNING_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #610fec6e8b81743f — Environment-variable access.
repo/packages/env/src/auth.ts:285 
      CASDOOR_WEBHOOK_SECRET: process.env.CASDOOR_WEBHOOK_SECRET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7cf9213ad649765 — Environment-variable access.
repo/packages/env/src/auth.ts:287 
      JWKS_KEY: process.env.JWKS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #513316d5e376e614 — Environment-variable access.
repo/packages/env/src/auth.ts:288 
      ENABLE_OIDC: !!process.env.JWKS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a986d78cf3055c9f — Environment-variable access.
repo/packages/env/src/auth.ts:291 
      INTERNAL_JWT_EXPIRATION: process.env.INTERNAL_JWT_EXPIRATION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6554f257e723a8d — Environment-variable access.
repo/packages/env/src/debug.ts:16 
  DEBUG_MODE: process.env.NEXT_PUBLIC_DEVELOPER_DEBUG === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0fe316e0768e6046 — Environment-variable access.
repo/packages/env/src/debug.ts:19 
  I18N_DEBUG: process.env.NEXT_PUBLIC_I18N_DEBUG === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d64f14dbe85509d — Environment-variable access.
repo/packages/env/src/debug.ts:20 
  I18N_DEBUG_BROWSER: process.env.NEXT_PUBLIC_I18N_DEBUG_BROWSER === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e01efbda2a3e26d — Environment-variable access.
repo/packages/env/src/debug.ts:21 
  I18N_DEBUG_SERVER: process.env.NEXT_PUBLIC_I18N_DEBUG_SERVER === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5b23b1e613e6e175 — Environment-variable access.
repo/packages/env/src/email.ts:35 
      SMTP_FROM: process.env.SMTP_FROM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28bd0f1c12e79e56 — Environment-variable access.
repo/packages/env/src/email.ts:36 
      SMTP_HOST: process.env.SMTP_HOST,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a52d5be3d5bdda5 — Environment-variable access.
repo/packages/env/src/email.ts:37 
      SMTP_PORT: process.env.SMTP_PORT ? Number(process.env.SMTP_PORT) : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dae69145d9cf3f5f — Environment-variable access.
repo/packages/env/src/email.ts:38 
      SMTP_SECURE: process.env.SMTP_SECURE === 'true',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #092b9852d4236e4d — Environment-variable access.
repo/packages/env/src/email.ts:39 
      SMTP_USER: process.env.SMTP_USER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0f676758649228b — Environment-variable access.
repo/packages/env/src/email.ts:40 
      SMTP_PASS: process.env.SMTP_PASS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38fb461a35cb80e2 — Environment-variable access.
repo/packages/env/src/email.ts:41 
      EMAIL_SERVICE_PROVIDER: process.env.EMAIL_SERVICE_PROVIDER

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9473e29c87b00dec — Environment-variable access.
repo/packages/env/src/email.ts:42 
        ? process.env.EMAIL_SERVICE_PROVIDER.toLowerCase()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04b2442f5fe8966b — Environment-variable access.
repo/packages/env/src/email.ts:44 
      RESEND_API_KEY: process.env.RESEND_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34ba8a273f533581 — Environment-variable access.
repo/packages/env/src/email.ts:45 
      RESEND_FROM: process.env.RESEND_FROM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca33d3a877bc14c0 — Environment-variable access.
repo/packages/env/src/file.ts:7 
  if (!!process.env.NEXT_PUBLIC_S3_DOMAIN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a2df06a59c89f84 — Environment-variable access.
repo/packages/env/src/file.ts:13 
  const S3_PUBLIC_DOMAIN = process.env.S3_PUBLIC_DOMAIN || process.env.NEXT_PUBLIC_S3_DOMAIN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc073e057b5e7af3 — Environment-variable access.
repo/packages/env/src/file.ts:25 
      CHUNKS_AUTO_EMBEDDING: process.env.CHUNKS_AUTO_EMBEDDING !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0d4b11ff9805f0d — Environment-variable access.
repo/packages/env/src/file.ts:26 
      CHUNKS_AUTO_GEN_METADATA: process.env.CHUNKS_AUTO_GEN_METADATA !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d43a46df96935fc0 — Environment-variable access.
repo/packages/env/src/file.ts:27 
      EMBEDDING_BATCH_SIZE: process.env.EMBEDDING_BATCH_SIZE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0dbe8c7f402ede3a — Environment-variable access.
repo/packages/env/src/file.ts:28 
      EMBEDDING_CONCURRENCY: process.env.EMBEDDING_CONCURRENCY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d1e2e22f4694e71 — Environment-variable access.
repo/packages/env/src/file.ts:30 
      NEXT_PUBLIC_S3_DOMAIN: process.env.NEXT_PUBLIC_S3_DOMAIN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #53181b9deeca799d — Environment-variable access.
repo/packages/env/src/file.ts:31 
      NEXT_PUBLIC_S3_FILE_PATH: process.env.NEXT_PUBLIC_S3_FILE_PATH || DEFAULT_S3_FILE_PATH,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba43b486449a9b03 — Environment-variable access.
repo/packages/env/src/file.ts:33 
      S3_ACCESS_KEY_ID: process.env.S3_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #079a086c46451b85 — Environment-variable access.
repo/packages/env/src/file.ts:34 
      S3_BUCKET: process.env.S3_BUCKET,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #690013aae3dc6f19 — Environment-variable access.
repo/packages/env/src/file.ts:35 
      S3_ENABLE_PATH_STYLE: process.env.S3_ENABLE_PATH_STYLE === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78788a8b763c8323 — Environment-variable access.
repo/packages/env/src/file.ts:36 
      S3_ENDPOINT: process.env.S3_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a240c43027100861 — Environment-variable access.
repo/packages/env/src/file.ts:37 
      S3_PREVIEW_URL_EXPIRE_IN: parseInt(process.env.S3_PREVIEW_URL_EXPIRE_IN || '7200'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84429422c65f5bf4 — Environment-variable access.
repo/packages/env/src/file.ts:39 
      S3_REGION: process.env.S3_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39b7a1d7a8a0c0dd — Environment-variable access.
repo/packages/env/src/file.ts:40 
      S3_SECRET_ACCESS_KEY: process.env.S3_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ac31a6daba75375 — Environment-variable access.
repo/packages/env/src/file.ts:41 
      S3_SET_ACL: process.env.S3_SET_ACL === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6386b8fa0d5ba28 — Environment-variable access.
repo/packages/env/src/gateway.ts:7 
      DEVICE_GATEWAY_SERVICE_TOKEN: process.env.DEVICE_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f120cabc0603f4e — Environment-variable access.
repo/packages/env/src/gateway.ts:8 
      DEVICE_GATEWAY_URL: process.env.DEVICE_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a4c978fe708b1bae — Environment-variable access.
repo/packages/env/src/gateway.ts:9 
      MESSAGE_GATEWAY_ENABLED: process.env.MESSAGE_GATEWAY_ENABLED,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ead11d8dfcce2b7e — Environment-variable access.
repo/packages/env/src/gateway.ts:10 
      MESSAGE_GATEWAY_SERVICE_TOKEN: process.env.MESSAGE_GATEWAY_SERVICE_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0fb340e9af2af97 — Environment-variable access.
repo/packages/env/src/gateway.ts:11 
      MESSAGE_GATEWAY_URL: process.env.MESSAGE_GATEWAY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6519e2521232f7da — Environment-variable access.
repo/packages/env/src/image.ts:9 
      AI_IMAGE_DEFAULT_IMAGE_NUM: process.env.AI_IMAGE_DEFAULT_IMAGE_NUM,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #334c5ce37b842832 — Environment-variable access.
repo/packages/env/src/knowledge.ts:6 
    DEFAULT_FILES_CONFIG: process.env.DEFAULT_FILES_CONFIG,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e09c1a1d6a5da061 — Environment-variable access.
repo/packages/env/src/knowledge.ts:7 
    FILE_TYPE_CHUNKING_RULES: process.env.FILE_TYPE_CHUNKING_RULES,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d71a689b1cb7b4dc — Environment-variable access.
repo/packages/env/src/knowledge.ts:8 
    UNSTRUCTURED_API_KEY: process.env.UNSTRUCTURED_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8b54c5148cfc631 — Environment-variable access.
repo/packages/env/src/knowledge.ts:9 
    UNSTRUCTURED_SERVER_URL: process.env.UNSTRUCTURED_SERVER_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bf97ab94ddebd0a — Environment-variable access.
repo/packages/env/src/langfuse.ts:7 
      ENABLE_LANGFUSE: process.env.ENABLE_LANGFUSE === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #979df7116a7d707a — Environment-variable access.
repo/packages/env/src/langfuse.ts:8 
      LANGFUSE_SECRET_KEY: process.env.LANGFUSE_SECRET_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c88bab04288fc8dd — Environment-variable access.
repo/packages/env/src/langfuse.ts:9 
      LANGFUSE_PUBLIC_KEY: process.env.LANGFUSE_PUBLIC_KEY || '',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7bd477b15efc3078 — Environment-variable access.
repo/packages/env/src/langfuse.ts:10 
      LANGFUSE_HOST: process.env.LANGFUSE_HOST || 'https://cloud.langfuse.com',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6980cbf63b5c9e9c — Environment-variable access.
repo/packages/env/src/llm.ts:260 
      API_KEY_SELECT_MODE: process.env.API_KEY_SELECT_MODE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adc2568cd0d412ae — Environment-variable access.
repo/packages/env/src/llm.ts:262 
      ENABLED_OPENAI: process.env.ENABLED_OPENAI !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f67af52982030e50 — Environment-variable access.
repo/packages/env/src/llm.ts:263 
      OPENAI_API_KEY: process.env.OPENAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4876147285cb8080 — Environment-variable access.
repo/packages/env/src/llm.ts:265 
      ENABLED_AZURE_OPENAI: !!process.env.AZURE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1da56290598fa3c8 — Environment-variable access.
repo/packages/env/src/llm.ts:266 
      AZURE_API_KEY: process.env.AZURE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b4ad6397f9be5f3 — Environment-variable access.
repo/packages/env/src/llm.ts:267 
      AZURE_API_VERSION: process.env.AZURE_API_VERSION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3738618f04441253 — Environment-variable access.
repo/packages/env/src/llm.ts:268 
      AZURE_ENDPOINT: process.env.AZURE_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27f8d7ddfab18ad4 — Environment-variable access.
repo/packages/env/src/llm.ts:270 
      ENABLED_AZUREAI: !!process.env.AZUREAI_ENDPOINT_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c5066f22b2fff07 — Environment-variable access.
repo/packages/env/src/llm.ts:271 
      AZUREAI_ENDPOINT_KEY: process.env.AZUREAI_ENDPOINT_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab936f7651873669 — Environment-variable access.
repo/packages/env/src/llm.ts:272 
      AZUREAI_ENDPOINT: process.env.AZUREAI_ENDPOINT,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #339f548bce4d1c14 — Environment-variable access.
repo/packages/env/src/llm.ts:274 
      ENABLED_ZHIPU: !!process.env.ZHIPU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fe2a806033833cf — Environment-variable access.
repo/packages/env/src/llm.ts:275 
      ZHIPU_API_KEY: process.env.ZHIPU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ddcd4a3eeaa66ca — Environment-variable access.
repo/packages/env/src/llm.ts:277 
      ENABLED_DEEPSEEK: !!process.env.DEEPSEEK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #331261643825f747 — Environment-variable access.
repo/packages/env/src/llm.ts:278 
      DEEPSEEK_API_KEY: process.env.DEEPSEEK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b3c17634cd12fbe — Environment-variable access.
repo/packages/env/src/llm.ts:280 
      ENABLED_GOOGLE: process.env.ENABLED_GOOGLE !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f4d93eb0ec00d029 — Environment-variable access.
repo/packages/env/src/llm.ts:281 
      GOOGLE_API_KEY: process.env.GOOGLE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e0ff1801b25eeaf8 — Environment-variable access.
repo/packages/env/src/llm.ts:283 
      ENABLED_VERTEXAI: !!process.env.VERTEXAI_CREDENTIALS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec926d696cb6c283 — Environment-variable access.
repo/packages/env/src/llm.ts:285 
      ENABLED_VOLCENGINE: !!process.env.VOLCENGINE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ac591c3aee93528 — Environment-variable access.
repo/packages/env/src/llm.ts:286 
      VOLCENGINE_API_KEY: process.env.VOLCENGINE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a73972e915f28eab — Environment-variable access.
repo/packages/env/src/llm.ts:288 
      ENABLED_PERPLEXITY: !!process.env.PERPLEXITY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b0826ada0021f2e2 — Environment-variable access.
repo/packages/env/src/llm.ts:289 
      PERPLEXITY_API_KEY: process.env.PERPLEXITY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fecf0f980f3f2d64 — Environment-variable access.
repo/packages/env/src/llm.ts:291 
      ENABLED_ANTHROPIC: process.env.ENABLED_ANTHROPIC !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae23cd19696bcdce — Environment-variable access.
repo/packages/env/src/llm.ts:292 
      ANTHROPIC_API_KEY: process.env.ANTHROPIC_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9940d85eb100d9a2 — Environment-variable access.
repo/packages/env/src/llm.ts:294 
      ENABLED_MINIMAX: !!process.env.MINIMAX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9cc4d09950d51854 — Environment-variable access.
repo/packages/env/src/llm.ts:295 
      MINIMAX_API_KEY: process.env.MINIMAX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7f30301b1968798 — Environment-variable access.
repo/packages/env/src/llm.ts:297 
      ENABLED_MISTRAL: !!process.env.MISTRAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fa28b610709fd1c — Environment-variable access.
repo/packages/env/src/llm.ts:298 
      MISTRAL_API_KEY: process.env.MISTRAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #995c4e9c01c6a820 — Environment-variable access.
repo/packages/env/src/llm.ts:300 
      ENABLED_OPENROUTER: !!process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac1d166f4d74d2ad — Environment-variable access.
repo/packages/env/src/llm.ts:301 
      OPENROUTER_API_KEY: process.env.OPENROUTER_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #47e7d636d1d80349 — Environment-variable access.
repo/packages/env/src/llm.ts:303 
      ENABLED_TOGETHERAI: !!process.env.TOGETHERAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd21be031a3f5553 — Environment-variable access.
repo/packages/env/src/llm.ts:304 
      TOGETHERAI_API_KEY: process.env.TOGETHERAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fabf3d1b55afaa11 — Environment-variable access.
repo/packages/env/src/llm.ts:306 
      ENABLED_FIREWORKSAI: !!process.env.FIREWORKSAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5fece00cde003079 — Environment-variable access.
repo/packages/env/src/llm.ts:307 
      FIREWORKSAI_API_KEY: process.env.FIREWORKSAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d43c17cffe3fd980 — Environment-variable access.
repo/packages/env/src/llm.ts:309 
      ENABLED_MOONSHOT: !!process.env.MOONSHOT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d717bb160300baba — Environment-variable access.
repo/packages/env/src/llm.ts:310 
      MOONSHOT_API_KEY: process.env.MOONSHOT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95575ced27ae72bc — Environment-variable access.
repo/packages/env/src/llm.ts:312 
      ENABLED_KIMICODINGPLAN: !!process.env.KIMICODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb3556a639fd34bb — Environment-variable access.
repo/packages/env/src/llm.ts:313 
      KIMICODINGPLAN_API_KEY: process.env.KIMICODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8859d3bfbd5f5423 — Environment-variable access.
repo/packages/env/src/llm.ts:315 
      ENABLED_BAILIANCODINGPLAN: !!process.env.BAILIANCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fe28a5723b6d42a — Environment-variable access.
repo/packages/env/src/llm.ts:316 
      BAILIANCODINGPLAN_API_KEY: process.env.BAILIANCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #72651ef06dbb4ea2 — Environment-variable access.
repo/packages/env/src/llm.ts:318 
      ENABLED_GLMCODINGPLAN: !!process.env.GLMCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #76bd3e38ad2fa04c — Environment-variable access.
repo/packages/env/src/llm.ts:319 
      GLMCODINGPLAN_API_KEY: process.env.GLMCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16c33f5ae513cbcb — Environment-variable access.
repo/packages/env/src/llm.ts:321 
      ENABLED_MINIMAXCODINGPLAN: !!process.env.MINIMAXCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9910edce2cd09101 — Environment-variable access.
repo/packages/env/src/llm.ts:322 
      MINIMAXCODINGPLAN_API_KEY: process.env.MINIMAXCODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58b8ffaef525e5fc — Environment-variable access.
repo/packages/env/src/llm.ts:324 
      ENABLED_VOLCENGINECODINGPLAN: !!process.env.VOLCENGINECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5eae4cbada223e71 — Environment-variable access.
repo/packages/env/src/llm.ts:325 
      VOLCENGINECODINGPLAN_API_KEY: process.env.VOLCENGINECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c078b1c2bd1237f8 — Environment-variable access.
repo/packages/env/src/llm.ts:327 
      ENABLED_GROQ: !!process.env.GROQ_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfedaab210c931ce — Environment-variable access.
repo/packages/env/src/llm.ts:328 
      GROQ_API_KEY: process.env.GROQ_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a6475f0da6851b8 — Environment-variable access.
repo/packages/env/src/llm.ts:330 
      ENABLED_GITHUB: !!process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bae02765709c96fe — Environment-variable access.
repo/packages/env/src/llm.ts:331 
      GITHUB_TOKEN: process.env.GITHUB_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8060b1b3a652982 — Environment-variable access.
repo/packages/env/src/llm.ts:333 
      ENABLED_ZEROONE: !!process.env.ZEROONE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71599ec3a5a3958c — Environment-variable access.
repo/packages/env/src/llm.ts:334 
      ZEROONE_API_KEY: process.env.ZEROONE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #246dfd8f007bf50e — Environment-variable access.
repo/packages/env/src/llm.ts:336 
      ENABLED_AWS_BEDROCK: process.env.ENABLED_AWS_BEDROCK === '1',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d293e55ce5f9e2bf — Environment-variable access.
repo/packages/env/src/llm.ts:337 
      AWS_REGION: process.env.AWS_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d00f30ebb410ead4 — Environment-variable access.
repo/packages/env/src/llm.ts:338 
      AWS_ACCESS_KEY_ID: process.env.AWS_ACCESS_KEY_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e61698dac85726cf — Environment-variable access.
repo/packages/env/src/llm.ts:339 
      AWS_SECRET_ACCESS_KEY: process.env.AWS_SECRET_ACCESS_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b4e959bcd1c8f8e — Environment-variable access.
repo/packages/env/src/llm.ts:340 
      AWS_SESSION_TOKEN: process.env.AWS_SESSION_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6f158d1045d54863 — Environment-variable access.
repo/packages/env/src/llm.ts:342 
      ENABLED_WENXIN: !!process.env.WENXIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #999357b1814c4af8 — Environment-variable access.
repo/packages/env/src/llm.ts:343 
      WENXIN_API_KEY: process.env.WENXIN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbe6f971ce3cbe7d — Environment-variable access.
repo/packages/env/src/llm.ts:345 
      ENABLED_OLLAMA: process.env.ENABLED_OLLAMA !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ca822c9a31d1ab8 — Environment-variable access.
repo/packages/env/src/llm.ts:346 
      ENABLED_OLLAMA_CLOUD: !!process.env.OLLAMA_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4858139751de5d6a — Environment-variable access.
repo/packages/env/src/llm.ts:347 
      OLLAMA_CLOUD_API_KEY: process.env.OLLAMA_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a5df4d14427ad90 — Environment-variable access.
repo/packages/env/src/llm.ts:349 
      ENABLED_VLLM: !!process.env.VLLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef2dc96951a5400c — Environment-variable access.
repo/packages/env/src/llm.ts:350 
      VLLM_API_KEY: process.env.VLLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0f4dcd08628a3cc — Environment-variable access.
repo/packages/env/src/llm.ts:352 
      ENABLED_XINFERENCE: !!process.env.XINFERENCE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de7447bfd6f11ca5 — Environment-variable access.
repo/packages/env/src/llm.ts:353 
      XINFERENCE_API_KEY: process.env.XINFERENCE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06491498e258be44 — Environment-variable access.
repo/packages/env/src/llm.ts:355 
      ENABLED_LMSTUDIO: !!process.env.LMSTUDIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5ebe99397fc0d95f — Environment-variable access.
repo/packages/env/src/llm.ts:356 
      LMSTUDIO_API_KEY: process.env.LMSTUDIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #441b7a4f37304d7c — Environment-variable access.
repo/packages/env/src/llm.ts:358 
      ENABLED_QINIU: !!process.env.QINIU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1170170a234cdcc — Environment-variable access.
repo/packages/env/src/llm.ts:359 
      QINIU_API_KEY: process.env.QINIU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86efc2738ae4cc64 — Environment-variable access.
repo/packages/env/src/llm.ts:361 
      ENABLED_QWEN: !!process.env.QWEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94e6d9baec65b301 — Environment-variable access.
repo/packages/env/src/llm.ts:362 
      QWEN_API_KEY: process.env.QWEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d98e6f271d90734 — Environment-variable access.
repo/packages/env/src/llm.ts:364 
      ENABLED_STEPFUN: !!process.env.STEPFUN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81ca4bcd3a843954 — Environment-variable access.
repo/packages/env/src/llm.ts:365 
      STEPFUN_API_KEY: process.env.STEPFUN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a532372c124c888 — Environment-variable access.
repo/packages/env/src/llm.ts:367 
      ENABLED_NOVITA: !!process.env.NOVITA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #404244380b467e21 — Environment-variable access.
repo/packages/env/src/llm.ts:368 
      NOVITA_API_KEY: process.env.NOVITA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0b74398b6c1b023 — Environment-variable access.
repo/packages/env/src/llm.ts:370 
      ENABLED_NVIDIA: !!process.env.NVIDIA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9509fa734a9d9ee — Environment-variable access.
repo/packages/env/src/llm.ts:371 
      NVIDIA_API_KEY: process.env.NVIDIA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30b5ea8a5312ba8d — Environment-variable access.
repo/packages/env/src/llm.ts:373 
      ENABLED_BAICHUAN: !!process.env.BAICHUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #18a04c4dc8759de8 — Environment-variable access.
repo/packages/env/src/llm.ts:374 
      BAICHUAN_API_KEY: process.env.BAICHUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #10fe4d89022f2939 — Environment-variable access.
repo/packages/env/src/llm.ts:376 
      ENABLED_TAICHU: !!process.env.TAICHU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f3956c7360ea9b6 — Environment-variable access.
repo/packages/env/src/llm.ts:377 
      TAICHU_API_KEY: process.env.TAICHU_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5e6480008331fed0 — Environment-variable access.
repo/packages/env/src/llm.ts:380 
        !!process.env.CLOUDFLARE_API_KEY && !!process.env.CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c80a6a286ffec3cc — Environment-variable access.
repo/packages/env/src/llm.ts:381 
      CLOUDFLARE_API_KEY: process.env.CLOUDFLARE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16641c1bef2247f4 — Environment-variable access.
repo/packages/env/src/llm.ts:382 
      CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID: process.env.CLOUDFLARE_BASE_URL_OR_ACCOUNT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #859b684e905ce2ce — Environment-variable access.
repo/packages/env/src/llm.ts:384 
      ENABLED_AI360: !!process.env.AI360_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db6e24b1da544e0c — Environment-variable access.
repo/packages/env/src/llm.ts:385 
      AI360_API_KEY: process.env.AI360_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fde228a9a59c0aa4 — Environment-variable access.
repo/packages/env/src/llm.ts:387 
      ENABLED_SILICONCLOUD: !!process.env.SILICONCLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88f844b1184c8635 — Environment-variable access.
repo/packages/env/src/llm.ts:388 
      SILICONCLOUD_API_KEY: process.env.SILICONCLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f56c2ab55f272d8 — Environment-variable access.
repo/packages/env/src/llm.ts:390 
      ENABLED_GITEE_AI: !!process.env.GITEE_AI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #686bb155e1d2003e — Environment-variable access.
repo/packages/env/src/llm.ts:391 
      GITEE_AI_API_KEY: process.env.GITEE_AI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a97e29d0828f4d6e — Environment-variable access.
repo/packages/env/src/llm.ts:393 
      ENABLED_UPSTAGE: !!process.env.UPSTAGE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ba605a153dd846a — Environment-variable access.
repo/packages/env/src/llm.ts:394 
      UPSTAGE_API_KEY: process.env.UPSTAGE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c6bfb73edaf723f — Environment-variable access.
repo/packages/env/src/llm.ts:396 
      ENABLED_SPARK: !!process.env.SPARK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b64e5c4330adde1e — Environment-variable access.
repo/packages/env/src/llm.ts:397 
      SPARK_API_KEY: process.env.SPARK_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e4ca70db78c74ba — Environment-variable access.
repo/packages/env/src/llm.ts:399 
      ENABLED_AI21: !!process.env.AI21_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e02b7bf5a825335d — Environment-variable access.
repo/packages/env/src/llm.ts:400 
      AI21_API_KEY: process.env.AI21_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42bf9ac83bc03c6f — Environment-variable access.
repo/packages/env/src/llm.ts:402 
      ENABLED_HUNYUAN: !!process.env.HUNYUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dccd992ee6deedd3 — Environment-variable access.
repo/packages/env/src/llm.ts:403 
      HUNYUAN_API_KEY: process.env.HUNYUAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cec5688d24374287 — Environment-variable access.
repo/packages/env/src/llm.ts:405 
      ENABLED_HUGGINGFACE: !!process.env.HUGGINGFACE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb80429929cd7eb8 — Environment-variable access.
repo/packages/env/src/llm.ts:406 
      HUGGINGFACE_API_KEY: process.env.HUGGINGFACE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08b609b8ae82fedb — Environment-variable access.
repo/packages/env/src/llm.ts:408 
      ENABLED_SENSENOVA: !!process.env.SENSENOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #484c8b75614f97ad — Environment-variable access.
repo/packages/env/src/llm.ts:409 
      SENSENOVA_API_KEY: process.env.SENSENOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b000d143efd7304 — Environment-variable access.
repo/packages/env/src/llm.ts:411 
      ENABLED_XAI: !!process.env.XAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2baa2bd1b952d24d — Environment-variable access.
repo/packages/env/src/llm.ts:412 
      XAI_API_KEY: process.env.XAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e109e9c646c1db37 — Environment-variable access.
repo/packages/env/src/llm.ts:414 
      ENABLED_INTERNLM: !!process.env.INTERNLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26564d82960b5478 — Environment-variable access.
repo/packages/env/src/llm.ts:415 
      INTERNLM_API_KEY: process.env.INTERNLM_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27df564defd47658 — Environment-variable access.
repo/packages/env/src/llm.ts:417 
      ENABLED_HIGRESS: !!process.env.HIGRESS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #941cb3472a07cd76 — Environment-variable access.
repo/packages/env/src/llm.ts:418 
      HIGRESS_API_KEY: process.env.HIGRESS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #300408fc047e72a1 — Environment-variable access.
repo/packages/env/src/llm.ts:420 
      ENABLED_TENCENT_CLOUD: !!process.env.TENCENT_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b46b8235959e8e8 — Environment-variable access.
repo/packages/env/src/llm.ts:421 
      TENCENT_CLOUD_API_KEY: process.env.TENCENT_CLOUD_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb558a314c233f92 — Environment-variable access.
repo/packages/env/src/llm.ts:423 
      ENABLED_JINA: !!process.env.JINA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa0752847d371445 — Environment-variable access.
repo/packages/env/src/llm.ts:424 
      JINA_API_KEY: process.env.JINA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff57198357836a93 — Environment-variable access.
repo/packages/env/src/llm.ts:426 
      ENABLED_SAMBANOVA: !!process.env.SAMBANOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea053f015fa10fd4 — Environment-variable access.
repo/packages/env/src/llm.ts:427 
      SAMBANOVA_API_KEY: process.env.SAMBANOVA_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1ec3e2cd0e60ab6 — Environment-variable access.
repo/packages/env/src/llm.ts:429 
      ENABLED_PPIO: !!process.env.PPIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2179d0873bb1e85a — Environment-variable access.
repo/packages/env/src/llm.ts:430 
      PPIO_API_KEY: process.env.PPIO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #418b1e289786cea0 — Environment-variable access.
repo/packages/env/src/llm.ts:432 
      ENABLED_SEARCH1API: !!process.env.SEARCH1API_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b86177983030350 — Environment-variable access.
repo/packages/env/src/llm.ts:433 
      SEARCH1API_API_KEY: process.env.SEARCH1API_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8000ce3fac9ebc7d — Environment-variable access.
repo/packages/env/src/llm.ts:435 
      ENABLED_COHERE: !!process.env.COHERE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c5a62662c792930 — Environment-variable access.
repo/packages/env/src/llm.ts:436 
      COHERE_API_KEY: process.env.COHERE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9becd9b235f8b928 — Environment-variable access.
repo/packages/env/src/llm.ts:438 
      ENABLED_INFINIAI: !!process.env.INFINIAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #697ce3cfbe3c04c9 — Environment-variable access.
repo/packages/env/src/llm.ts:439 
      INFINIAI_API_KEY: process.env.INFINIAI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc407649829591db — Environment-variable access.
repo/packages/env/src/llm.ts:441 
      ENABLED_FAL: process.env.ENABLED_FAL !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa11cc49964017f1 — Environment-variable access.
repo/packages/env/src/llm.ts:442 
      FAL_API_KEY: process.env.FAL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #451ec0e00e040887 — Environment-variable access.
repo/packages/env/src/llm.ts:444 
      ENABLED_BFL: !!process.env.BFL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4cb5dd6b8e0584e — Environment-variable access.
repo/packages/env/src/llm.ts:445 
      BFL_API_KEY: process.env.BFL_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4324d96fa8692cd1 — Environment-variable access.
repo/packages/env/src/llm.ts:447 
      ENABLED_COMFYUI: process.env.ENABLED_COMFYUI !== '0',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41b43dd46bb80347 — Environment-variable access.
repo/packages/env/src/llm.ts:448 
      COMFYUI_BASE_URL: process.env.COMFYUI_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0965f98c49a6c570 — Environment-variable access.
repo/packages/env/src/llm.ts:449 
      COMFYUI_AUTH_TYPE: process.env.COMFYUI_AUTH_TYPE,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cddfe58388e31c1f — Environment-variable access.
repo/packages/env/src/llm.ts:450 
      COMFYUI_API_KEY: process.env.COMFYUI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98efa2c63bb587c8 — Environment-variable access.
repo/packages/env/src/llm.ts:451 
      COMFYUI_USERNAME: process.env.COMFYUI_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82b8204011d7183f — Environment-variable access.
repo/packages/env/src/llm.ts:452 
      COMFYUI_PASSWORD: process.env.COMFYUI_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e802e6028721aac — Environment-variable access.
repo/packages/env/src/llm.ts:453 
      COMFYUI_CUSTOM_HEADERS: process.env.COMFYUI_CUSTOM_HEADERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86740df18035769d — Environment-variable access.
repo/packages/env/src/llm.ts:455 
      ENABLED_MODELSCOPE: !!process.env.MODELSCOPE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0e168347a5fe6d7 — Environment-variable access.
repo/packages/env/src/llm.ts:456 
      MODELSCOPE_API_KEY: process.env.MODELSCOPE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #22ade592a5a2d80a — Environment-variable access.
repo/packages/env/src/llm.ts:458 
      ENABLED_V0: !!process.env.V0_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc6931de5705971c — Environment-variable access.
repo/packages/env/src/llm.ts:459 
      V0_API_KEY: process.env.V0_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0696b242952cdede — Environment-variable access.
repo/packages/env/src/llm.ts:461 
      ENABLED_VERCELAIGATEWAY: !!process.env.VERCELAIGATEWAY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a11aaacfad6e56f — Environment-variable access.
repo/packages/env/src/llm.ts:462 
      VERCELAIGATEWAY_API_KEY: process.env.VERCELAIGATEWAY_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36f17c12729c9ca7 — Environment-variable access.
repo/packages/env/src/llm.ts:464 
      ENABLED_AI302: !!process.env.AI302_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #644478bd34ee20f8 — Environment-variable access.
repo/packages/env/src/llm.ts:465 
      AI302_API_KEY: process.env.AI302_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c94038abe0fc3a45 — Environment-variable access.
repo/packages/env/src/llm.ts:467 
      ENABLED_AKASHCHAT: !!process.env.AKASHCHAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #faf006900266e097 — Environment-variable access.
repo/packages/env/src/llm.ts:468 
      AKASHCHAT_API_KEY: process.env.AKASHCHAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5176acc7806b56f0 — Environment-variable access.
repo/packages/env/src/llm.ts:470 
      ENABLED_COMETAPI: !!process.env.COMETAPI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19fc47f52f838ecd — Environment-variable access.
repo/packages/env/src/llm.ts:471 
      COMETAPI_KEY: process.env.COMETAPI_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #804c561266a31550 — Environment-variable access.
repo/packages/env/src/llm.ts:473 
      ENABLED_AIHUBMIX: !!process.env.AIHUBMIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e7c89b65db63347 — Environment-variable access.
repo/packages/env/src/llm.ts:474 
      AIHUBMIX_API_KEY: process.env.AIHUBMIX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #490676c395885029 — Environment-variable access.
repo/packages/env/src/llm.ts:475 
      AIHUBMIX_PROXY_URL: process.env.AIHUBMIX_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b39c12563e833b2f — Environment-variable access.
repo/packages/env/src/llm.ts:477 
      ENABLED_NEWAPI: !!process.env.NEWAPI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #052ee167dfdfd872 — Environment-variable access.
repo/packages/env/src/llm.ts:478 
      NEWAPI_API_KEY: process.env.NEWAPI_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24ed173029f832ab — Environment-variable access.
repo/packages/env/src/llm.ts:479 
      NEWAPI_PROXY_URL: process.env.NEWAPI_PROXY_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd7bb26f00013236 — Environment-variable access.
repo/packages/env/src/llm.ts:481 
      ENABLED_NEBIUS: !!process.env.NEBIUS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c9f1d1e621358f6 — Environment-variable access.
repo/packages/env/src/llm.ts:482 
      NEBIUS_API_KEY: process.env.NEBIUS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #307a2a8c9bad7f7e — Environment-variable access.
repo/packages/env/src/llm.ts:484 
      ENABLED_CEREBRAS: !!process.env.CEREBRAS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9033e12b7bd2c6d1 — Environment-variable access.
repo/packages/env/src/llm.ts:485 
      CEREBRAS_API_KEY: process.env.CEREBRAS_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6a3a6852ec050b4 — Environment-variable access.
repo/packages/env/src/llm.ts:487 
      ENABLED_ZENMUX: !!process.env.ZENMUX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcfbf3bac6185776 — Environment-variable access.
repo/packages/env/src/llm.ts:488 
      ZENMUX_API_KEY: process.env.ZENMUX_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7dfa579e87ab0b31 — Environment-variable access.
repo/packages/env/src/llm.ts:490 
      ENABLED_STRAICO: !!process.env.STRAICO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a9a3aa6fd2515f6b — Environment-variable access.
repo/packages/env/src/llm.ts:491 
      STRAICO_API_KEY: process.env.STRAICO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f4560da57526c2e — Environment-variable access.
repo/packages/env/src/llm.ts:493 
      ENABLED_LOBEHUB: !!process.env.ENABLED_LOBEHUB,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #115ff4a21ac1985a — Environment-variable access.
repo/packages/env/src/llm.ts:495 
      ENABLED_OPENCODEZEN: !!process.env.OPENCODEZEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c1d73b89bf850e3 — Environment-variable access.
repo/packages/env/src/llm.ts:496 
      OPENCODEZEN_API_KEY: process.env.OPENCODEZEN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4fff2146b38eb58 — Environment-variable access.
repo/packages/env/src/llm.ts:498 
      ENABLED_OPENCODECODINGPLAN: !!process.env.OPENCODECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #428092500dacd6ef — Environment-variable access.
repo/packages/env/src/llm.ts:499 
      OPENCODECODINGPLAN_API_KEY: process.env.OPENCODECODINGPLAN_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06f93fe57eeae3b0 — Environment-variable access.
repo/packages/env/src/llm.ts:501 
      ENABLED_XIAOMIMIMO: !!process.env.XIAOMIMIMO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6378012900abaa13 — Environment-variable access.
repo/packages/env/src/llm.ts:502 
      XIAOMIMIMO_API_KEY: process.env.XIAOMIMIMO_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31a688ac021327a9 — Environment-variable access.
repo/packages/env/src/llm.ts:504 
      ENABLED_LONGCAT: !!process.env.LONGCAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34837db4a3e2abae — Environment-variable access.
repo/packages/env/src/llm.ts:505 
      LONGCAT_API_KEY: process.env.LONGCAT_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a530195a49d24c4e — Environment-variable access.
repo/packages/env/src/llm.ts:507 
      ENABLED_STREAMLAKE: !!process.env.STREAMLAKE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f62490e8c63c782 — Environment-variable access.
repo/packages/env/src/llm.ts:508 
      STREAMLAKE_API_KEY: process.env.STREAMLAKE_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81c0c6b1ee08305f — Environment-variable access.
repo/packages/env/src/llm.ts:510 
      ENABLED_ANTGROUP: !!process.env.ANTGROUP_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f48d6406ba1c1a0 — Environment-variable access.
repo/packages/env/src/llm.ts:511 
      ANTGROUP_API_KEY: process.env.ANTGROUP_API_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c10142edc7602942 — Environment-variable access.
repo/packages/env/src/python.ts:12 
      NEXT_PUBLIC_PYODIDE_INDEX_URL: process.env.NEXT_PUBLIC_PYODIDE_INDEX_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8cd02d49a0eae4b — Environment-variable access.
repo/packages/env/src/python.ts:13 
      NEXT_PUBLIC_PYODIDE_PIP_INDEX_URL: process.env.NEXT_PUBLIC_PYODIDE_PIP_INDEX_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87f184bb84a19d7c — Environment-variable access.
repo/packages/env/src/redis.ts:23 
      REDIS_DATABASE: parseNumber(process.env.REDIS_DATABASE),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1f3713a1ee3103a — Environment-variable access.
repo/packages/env/src/redis.ts:24 
      REDIS_PASSWORD: process.env.REDIS_PASSWORD,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28d1704da79c0e2a — Environment-variable access.
repo/packages/env/src/redis.ts:25 
      REDIS_PREFIX: process.env.REDIS_PREFIX || 'lobechat',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87774e6368178b71 — Environment-variable access.
repo/packages/env/src/redis.ts:26 
      REDIS_TLS: parseRedisTls(process.env.REDIS_TLS),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98cefb63c892c7f5 — Environment-variable access.
repo/packages/env/src/redis.ts:27 
      REDIS_URL: process.env.REDIS_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f80f3990474fe6fc — Environment-variable access.
repo/packages/env/src/redis.ts:28 
      REDIS_USERNAME: process.env.REDIS_USERNAME,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a17bde8494f326b — Environment-variable access.
repo/packages/env/src/sandbox.ts:9 
      ONLYBOXES_BASE_URL: process.env.ONLYBOXES_BASE_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dac928a072138559 — Environment-variable access.
repo/packages/env/src/sandbox.ts:10 
      ONLYBOXES_JIT_ISSUER: process.env.ONLYBOXES_JIT_ISSUER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6388f1cbc1a2fc68 — Environment-variable access.
repo/packages/env/src/sandbox.ts:11 
      ONLYBOXES_JIT_SIGNING_KEY: process.env.ONLYBOXES_JIT_SIGNING_KEY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8bf50342510f5e1 — Environment-variable access.
repo/packages/env/src/sandbox.ts:12 
      ONLYBOXES_JIT_TTL_SEC: process.env.ONLYBOXES_JIT_TTL_SEC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6af1917ea307df9f — Environment-variable access.
repo/packages/env/src/sandbox.ts:13 
      ONLYBOXES_LEASE_TTL_SEC: process.env.ONLYBOXES_LEASE_TTL_SEC,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f69f30427fe895ec — Environment-variable access.
repo/packages/env/src/sandbox.ts:14 
      SANDBOX_PROVIDER: process.env.SANDBOX_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e291976d33ce06a — Environment-variable access.
repo/packages/env/src/tools.ts:13 
      CRAWL_CONCURRENCY: process.env.CRAWL_CONCURRENCY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5691bfc5a95be2a1 — Environment-variable access.
repo/packages/env/src/tools.ts:14 
      CRAWLER_RETRY: process.env.CRAWLER_RETRY,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55a0c2f78405398b — Environment-variable access.
repo/packages/env/src/tools.ts:15 
      CRAWLER_IMPLS: process.env.CRAWLER_IMPLS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #086d1a55a662c9ea — Environment-variable access.
repo/packages/env/src/tools.ts:16 
      JINA_USE_CN_DOMAINS: process.env.JINA_USE_CN_DOMAINS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc5fada209d6e432 — Environment-variable access.
repo/packages/env/src/tools.ts:17 
      SEARCH_PROVIDERS: process.env.SEARCH_PROVIDERS,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf253b0f6813d8bc — Environment-variable access.
repo/packages/env/src/tools.ts:18 
      SEARXNG_URL: process.env.SEARXNG_URL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d2a52fcaa230f52d — Environment-variable access.
repo/packages/env/src/tools.ts:19 
      VISUAL_UNDERSTANDING_MODEL: process.env.VISUAL_UNDERSTANDING_MODEL,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88dbed7cedda37f8 — Environment-variable access.
repo/packages/env/src/tools.ts:20 
      VISUAL_UNDERSTANDING_PROVIDER: process.env.VISUAL_UNDERSTANDING_PROVIDER,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/eval-dataset-parser

npm first-party
expand_more 6 low-confidence finding(s)
low env_fs test-only #482a9c31b61ee0ff — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:11 
  const csv = readFileSync(resolve(fixtures, 'sample.csv'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ff911f9370f5bd38 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:29 
  const jsonl = readFileSync(resolve(fixtures, 'sample.jsonl'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a598daaf6d4a0006 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:50 
  const json = readFileSync(resolve(fixtures, 'sample.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cf3cd412c88fb52a — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:68 
    const csv = readFileSync(resolve(fixtures, 'sample.csv'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e8742ff3e2fcb344 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:75 
    const jsonl = readFileSync(resolve(fixtures, 'sample.jsonl'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4a419df26b2d9cf7 — Filesystem access.
repo/packages/eval-dataset-parser/__tests__/parseDataset.test.ts:81 
    const json = readFileSync(resolve(fixtures, 'sample.json'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/file-loaders

npm first-party
expand_more 7 low-confidence finding(s)
low env_fs production #02506f91aa5f440c — Filesystem access.
repo/packages/file-loaders/src/loadFile.test.ts:49 
      await writeFile(file, Buffer.from([80, 75, 3, 4, 0, 0]));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83caf5bc55ebd2c9 — Filesystem access.
repo/packages/file-loaders/src/loaders/docx/index.ts:19 
      const buffer = await fs.readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #000c35c3a0ece002 — Filesystem access.
repo/packages/file-loaders/src/loaders/excel/index.ts:63 
      const dataBuffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbe2f547a5a22692 — Filesystem access.
repo/packages/file-loaders/src/loaders/pdf/index.ts:27 
    const dataBuffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db849860c0cb408c — Filesystem access.
repo/packages/file-loaders/src/loaders/text/index.ts:16 
  const buffer = await readFile(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9974329babb8488 — Filesystem access.
repo/packages/file-loaders/src/utils/isBinaryContent.test.ts:87 
    await writeFile(filePath, 'a'.repeat(20_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae40ee02bae96969 — Filesystem access.
repo/packages/file-loaders/src/utils/isBinaryContent.test.ts:95 
    await writeFile(
      filePath,
      Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a, 0x00, 0x00, 0x00, 0x0d]),
    );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/llm-generation-tracing

npm first-party
expand_more 8 low-confidence finding(s)
low env_fs production #1aa9175ec78cdabd — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.test.ts:44 
    const raw = await fs.readFile(path.join(dir, jsonFiles[0]), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29b53dae296e1ad1 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.test.ts:65 
    const content = await fs.readFile(target, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50bbf58b104107b9 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:36 
    await fs.writeFile(filePath, JSON.stringify(record, null, 2), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84d45579322c30c5 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:47 
      const content = await fs.readFile(target, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e079883ed28f3579 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:63 
        const content = await fs.readFile(file.fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3564403d700d093f — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:91 
        const content = await fs.readFile(file.fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2622ad70307fd6eb — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:106 
      const content = await fs.readFile(real, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f25f60641a05a7d6 — Filesystem access.
repo/packages/llm-generation-tracing/src/store/file-store.ts:115 
      const content = await fs.readFile(files[0].fullPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/local-file-shell

npm first-party
expand_more 78 low-confidence finding(s)
low env_fs production #40030ded1ff075a9 — Filesystem access.
repo/packages/local-file-shell/src/contentSearch/base.ts:185 
        const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9182be117339466a — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:37 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #24408c3e9c148d07 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:51 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fe117c6f204b266e — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:62 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #182285cc8ce24ba9 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:81 
      await writeFile(filePath, 'const x = 1;');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #be5e9cb224415336 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:89 
      await writeFile(filePath, 'all: build');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2182bdd4774c64da — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:97 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d01c492632563e86 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:106 
      await writeFile(filePath, 'A'.repeat(20_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #65fb24706c901116 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:119 
        await writeFile(filePath, 'data');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c315260d33b64bb1 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:129 
      await writeFile(filePath, buf);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b36fbfc1c70c6793 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:138 
      await writeFile(filePath, 'A'.repeat(27_000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2ffd4d0229fa7843 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:152 
      await writeFile(filePath, lines.join('\n'));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9382c6bdf72cc8e2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:163 
      await writeFile(filePath, 'a'.repeat(10 * 1024 * 1024 + 1));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bc31404ac99380e2 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:173 
      await writeFile(filePath, "module.exports = { hello: 'world' };\n");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #81ab5819fc17f71b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:189 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ef9255cca42704ac — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:197 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('nested');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #534b9c071a23bba0 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:221 
      await writeFile(filePath, 'hello world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #67998c1c658d3267 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:231 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hi world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b0bed2883eaefd0b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:239 
      await writeFile(filePath, 'hello world\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #eb39cf9af91931c9 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:250 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('hi world\nhi again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #db67793361dc63ad — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:255 
      await writeFile(filePath, 'hello world');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d099bdd0bf599cf7 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:269 
      await writeFile(filePath, 'price is $10.00 and $20.00');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #db958587f2b202bc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:279 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('price is $XX.XX and $20.00');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #100c2c9e75d78b90 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:295 
      await writeFile(filePath, 'line1\nline2\nline3');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f33ceff190ca80fa — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:310 
      await writeFile(filePath, 'line1\r\nline2\r\nline3\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cd4b88c15f48475a — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:322 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('lineA\r\nlineB\r\nline3\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #007c594b31233c7b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:327 
      await writeFile(filePath, 'a\r\nb\r\na\r\nb\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9ff9d2860ec300e8 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:338 
      expect(fs.readFileSync(filePath, 'utf8')).toBe('x\r\ny\r\nx\r\ny\r\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #10e2f9eac7d4c20c — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:346 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e9e91207d681243c — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:347 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #bfe91b6f4ca7e26b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:361 
      await writeFile(path.join(tmpDir, 'c.txt'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #af31ac9dc4c44196 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:362 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #705afa44907700b1 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:363 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #08b4b55000c28499 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:376 
      await writeFile(path.join(tmpDir, 'small.txt'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #368bbfcd587d0ad3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:377 
      await writeFile(path.join(tmpDir, 'large.txt'), 'x'.repeat(1000));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4ce7ede7b22e2458 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:389 
      await writeFile(path.join(tmpDir, 'a.txt'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1c35f31d04a5687a — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:390 
      await writeFile(path.join(tmpDir, 'b.txt'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #028af874eb74c1d4 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:391 
      await writeFile(path.join(tmpDir, 'c.txt'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #79f164426b4f5185 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:431 
      await writeFile(src, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e765390a0a6ec1fc — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:445 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1d51ce30c55237a5 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:471 
      await writeFile(src, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1afee853a3d876c3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:487 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d0dacbf3ef6502f4 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:512 
      await writeFile(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #366bb825ea4531d8 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:531 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3ce79bf72c34543c — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:532 
      await writeFile(path.join(tmpDir, 'b.ts'), 'b');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f80eb5fe72c0eacf — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:533 
      await writeFile(path.join(tmpDir, 'c.js'), 'c');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8ddccc8e8602c5ee — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:544 
      await writeFile(path.join(tmpDir, 'node_modules', 'pkg', 'index.ts'), 'x');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #982321cd9abaed5b — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:545 
      await writeFile(path.join(tmpDir, 'src.ts'), 'y');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c29048cd6fa9e5a1 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:554 
      await writeFile(path.join(tmpDir, '.github', 'workflows', 'ci.yml'), 'name: ci');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4a4b37961971df7a — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:555 
      await writeFile(path.join(tmpDir, '.github', 'workflows', 'release.yaml'), 'name: release');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #49c82dc4d0361882 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:569 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c2d634bdfd5650c8 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:577 
      await writeFile(path.join(tmpDir, 'a.ts'), 'a');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0ceb063f1d97e463 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:589 
      await writeFile(path.join(tmpDir, 'search.txt'), 'hello world\nfoo bar\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c7421312af9483f9 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:599 
      await writeFile(path.join(tmpDir, 'search.txt'), 'hello world\nfoo bar\nhello again');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d14846531f14b18d — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:607 
      await writeFile(path.join(tmpDir, 'empty.txt'), 'nothing here');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1b12c5b14579b2cb — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:641 
      await writeFile(path.join(tmpDir, 'config.json'), '{}');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #9445d7770d3c03fe — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:642 
      await writeFile(path.join(tmpDir, 'config.yaml'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #81f647c56cce5eca — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:643 
      await writeFile(path.join(tmpDir, 'readme.md'), '');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4ac6fab28fc62d77 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:653 
        await writeFile(path.join(tmpDir, `file${i}.log`), `content ${i}`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fd4675dcf96d0ab0 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:675 
      await writeFile(path.join(tmpDir, '.env'), 'A=1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #77e38a1f724f44b3 — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:676 
      await writeFile(path.join(tmpDir, '.envrc'), 'export A=1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b8c6d15fb786133a — Filesystem access.
repo/packages/local-file-shell/src/file/__tests__/file.test.ts:677 
      await writeFile(path.join(tmpDir, 'env.txt'), 'unrelated');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88b392c2c4bb622e — Filesystem access.
repo/packages/local-file-shell/src/file/edit.ts:17 
    const content = await readFile(filePath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8dcbe8dcfb92eb70 — Filesystem access.
repo/packages/local-file-shell/src/file/edit.ts:61 
    await writeFile(filePath, newContent, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #61c73ebb2a8d874d — Filesystem access.
repo/packages/local-file-shell/src/file/search.ts:42 
          const content = await readFile(file.path, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #878450db7b87f16e — Filesystem access.
repo/packages/local-file-shell/src/file/write.ts:20 
    await writeFile(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #af67ca07556425d9 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:33 
  await writeFile(path.join(dir, 'a.txt'), 'hello\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3dd18f2af5c05ddb — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:104 
    await writeFile(path.join(linked, 'new.txt'), 'new\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7022bcf339e6a2ba — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:242 
    await writeFile(path.join(repo, 'a.txt'), 'hello\nworld\n'); // modify tracked

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #2bf35f2c3bda118f — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:243 
    await writeFile(path.join(repo, 'new.txt'), 'fresh\n'); // untracked add

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fb73f3bebb469d09 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:271 
    await writeFile(path.join(repo, 'a.txt'), 'tampered\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1d92c8517e771bbb — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:273 
    expect(await readFile(path.join(repo, 'a.txt'), 'utf8')).toBe('hello\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5c27a8c9724eddc5 — Filesystem access.
repo/packages/local-file-shell/src/git/__tests__/branches.test.ts:277 
    await writeFile(path.join(repo, 'junk.txt'), 'x\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c991e80bc223406 — Filesystem access.
repo/packages/local-file-shell/src/git/info.ts:138 
    const head = (await readFile(`${gitDir}/HEAD`, 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #185686db4bf82c6f — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:12 
    const content = await readFile(gitPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ea7dc3e45606188 — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:40 
    const commondir = (await readFile(path.join(gitDir, 'commondir'), 'utf8')).trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #000b4b4cb8effe24 — Filesystem access.
repo/packages/local-file-shell/src/git/repoType.ts:62 
    const config = await readFile(path.join(commonDir, 'config'), 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #829de5a023946e9b — Filesystem access.
repo/packages/local-file-shell/src/git/workingTree.ts:238 
    buf = await readFile(absolute);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/memory-user-memory

npm first-party
expand_more 5 low-confidence finding(s)
low env_fs test-only #69285816699cb9aa — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:7 
const baseUrl = process.env.MEMORY_USER_MEMORY_LOBEHUB_BASE_URL;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #92f3028d5d7f5c1e — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:8 
const benchmarkLoCoMoFile = process.env.MEMORY_USER_MEMORY_BENCHMARKS_LOCOMO_DATASETS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c1dc20c7c2ad2e07 — Environment-variable access.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:9 
const webhookExtraHeaders = process.env.MEMORY_USER_MEMORY_WEBHOOK_HEADERS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #fee1624c6b46808c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.
repo/packages/memory-user-memory/benchmarks/locomo/run.ts:23 · flow /tmp/closeopen-g59q7b0s/repo/packages/memory-user-memory/benchmarks/locomo/run.ts:7 → /tmp/closeopen-g59q7b0s/repo/packages/memory-user-memory/benchmarks/locomo/run.ts:23 
  const res = await fetch(new URL(path, baseUrl).toString(), {
    body: JSON.stringify(body),
    headers: {
      'Content-Type': 'application/json',
      ...webhookHeaders,
    },
    method: 'POST',
  });

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
low env_fs production #86625d528502b08d — Filesystem access.
repo/packages/memory-user-memory/src/converters/locomo.ts:176 
  const raw = readFileSync(absPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/model-bank

npm first-party
expand_more 1 low-confidence finding(s)
low env_fs production #cadd9890a3265cf1 — Filesystem access.
repo/packages/model-bank/src/exports.test.ts:12 
  const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8')) as {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/observability-otel

npm first-party
expand_more 11 low-confidence finding(s)
low env_fs production #e1e424d6513717d5 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:20 
    'env': process.env.VERCEL_ENV || process.env.NEXT_PUBLIC_VERCEL_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9ca3726ad8b30829 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:23 
      process.env.VERCEL_BRANCH_URL || process.env.NEXT_PUBLIC_VERCEL_BRANCH_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d4a08a7111a510a — Environment-variable access.
repo/packages/observability-otel/src/node.ts:24 
    'vercel.deployment_id': process.env.VERCEL_DEPLOYMENT_ID || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b568e578b1a2c99 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:25 
    'vercel.host': process.env.VERCEL_URL || process.env.NEXT_PUBLIC_VERCEL_URL || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6b089d400a6d110 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:26 
    'vercel.project_id': process.env.VERCEL_PROJECT_ID || undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb2ad7601184bb33 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:27 
    'vercel.region': process.env.VERCEL_REGION,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f7d7825eaaca717 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:28 
    'vercel.runtime': process.env.NEXT_RUNTIME || 'nodejs',

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f3faaa4580ce7a9 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:30 
      process.env.VERCEL_GIT_COMMIT_SHA || process.env.NEXT_PUBLIC_VERCEL_GIT_COMMIT_SHA,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c83db1bb820bc998 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:32 
    'service.version': process.env.VERCEL_DEPLOYMENT_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9fbe2382aaf875d5 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:39 
    'node.ci': process.env.CI ? true : undefined,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f03ab1e59645bbe8 — Environment-variable access.
repo/packages/observability-otel/src/node.ts:40 
    'node.env': process.env.NODE_ENV,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/openapi

npm first-party
expand_more 5 low-confidence finding(s)
low env_fs production #cc26fb2683b14773 — Filesystem access.
repo/packages/openapi/src/helpers/file.ts:118 
          const bin = fs.readFileSync((f as any).filepath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6bead60ca3e7a4f0 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:54 
  const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf4d0e2e135a4996 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:55 
  if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96a18ca256531655 — Environment-variable access.
repo/packages/openapi/src/middleware/auth.ts:57 
    c.set('userId', process.env.MOCK_DEV_USER_ID || 'DEV_USER');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef8eeacfc31eba34 — Environment-variable access.
repo/packages/openapi/src/middleware/permission-check.ts:46 
    if (options.skipInDev && process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/python-interpreter

npm first-party
expand_more 4 low-confidence finding(s)
low env_fs production #a861a550f9572049 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:77 
        this.pyodide.FS.writeFile(file.name, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6845b6766f8f1b92 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:79 
        this.pyodide.FS.writeFile(`/mnt/data/${file.name}`, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc39a4db99b00ea6 — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:95 
      const content = (this.pyodide.FS as any).readFile(filePath, { encoding: 'binary' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1cb5d472e080931b — Filesystem access.
repo/packages/python-interpreter/src/worker.ts:175 
      this.pyodide.FS.writeFile(`/usr/share/fonts/truetype/${filename}`, new Uint8Array(buffer));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/ssrf-safe-fetch

npm first-party
expand_more 10 low-confidence finding(s)
low env_fs production #3e0b326dec46e790 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:35 
    delete process.env.SSRF_ALLOW_IP_ADDRESS_LIST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba2aa00d39fcb7ce — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:36 
    delete process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #772b90dcf9535367 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:106 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab05f1b7c7803d19 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:118 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '127.0.0.1,192.168.1.100';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #886de53fac75fe3d — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:167 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98402fd778d244a0 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:177 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = 'invalid-value';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bfcc3dab0b35ae4 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:461 
      process.env.SSRF_ALLOW_IP_ADDRESS_LIST = '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bf8a9ef382014ee — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.test.ts:462 
      process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS = '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c5370d317686cf61 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.ts:72 
    const envAllowPrivate = process.env.SSRF_ALLOW_PRIVATE_IP_ADDRESS === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b25ddd4b53861c1 — Environment-variable access.
repo/packages/ssrf-safe-fetch/index.ts:78 
        process.env.SSRF_ALLOW_IP_ADDRESS_LIST?.split(',').filter(Boolean) ??

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/tool-runtime

npm first-party
expand_more 3 low-confidence finding(s)
low env_fs test-only #973a17c09c6ef2a4 — Filesystem access.
repo/packages/tool-runtime/src/__tests__/LocalSystemExecutionRuntime.test.ts:112 
    const output = await runtime.readFile({ path: '/tmp/cat.png' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5e0ab0965fe21ecd — Filesystem access.
repo/packages/tool-runtime/src/__tests__/LocalSystemExecutionRuntime.test.ts:134 
    const output = await runtime.readFile({ path: '/tmp/cat.png' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #592cbe3b35ee8cb2 — Filesystem access.
repo/packages/tool-runtime/src/__tests__/LocalSystemExecutionRuntime.test.ts:153 
    const output = await runtime.readFile({ path: '/tmp/a.txt' });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/trpc

npm first-party
expand_more 4 low-confidence finding(s)
low env_fs production #1425dcd2e7b99652 — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:122 
  const isMockUser = process.env.ENABLE_MOCK_DEV_USER === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aed3cb1dc5df659c — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:124 
  if (process.env.NODE_ENV === 'development' && (isDebugApi || isMockUser)) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34f9beb801aa6d4b — Environment-variable access.
repo/packages/trpc/src/lambda/context.ts:126 
      userId: process.env.MOCK_DEV_USER_ID,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd18748e726a8841 — Environment-variable access.
repo/packages/trpc/src/middleware/openTelemetry.test.ts:70 
    process.env.ENABLE_TELEMETRY = 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): packages/utils

npm first-party
expand_more 3 low-confidence finding(s)
low env_fs production #023a54306783d743 — Environment-variable access.
repo/packages/utils/src/env.ts:1 
export const isDev = process.env.NODE_ENV === 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dedd86bf55f7ac90 — Environment-variable access.
repo/packages/utils/src/jina.ts:7 
  process.env.JINA_USE_CN_DOMAINS?.trim().toLowerCase() === 'true';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d693ffe91f294337 — Environment-variable access.
repo/packages/utils/src/server/apiKeyHash.ts:3 
const getApiKeyHashSecret = () => process.env.KEY_VAULTS_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

@codesandbox/sandpack-react

npm dependency
medium telemetry tooling Excluded from app score unknown #233d32dbaf786bdf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:2 
import amplitude from "amplitude-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry tooling Excluded from app score unknown #538a3661be6ae559 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:10 
  amplitude.getInstance().init(API_KEY);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry tooling Excluded from app score unknown #fbf7bceb0fd38baf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:17 
    amplitude.getInstance().logEvent("pageview", {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #fac7d117cfe59615 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:2 
import amplitude from "amplitude-js";

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a98b4b4a05a5236d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:9 
  amplitude.getInstance().init(API_KEY);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry dependency Excluded from app score #a8ec9f62352d337a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:17 
    amplitude.getInstance().logEvent("pageview", {

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 20 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #092a58e682712e3a — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/examples/custom-npm-registry/index.js:17 
      token: process.env.GH_PKG_TOKEN,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1df8e1b2daa18cd — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/gulpfile.js:37 
const paths = process.env.CI

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c642efcf979c514 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/rollup.config.js:55 
          "process.env.CODESANDBOX_ENV": `"${process.env.CODESANDBOX_ENV}"`,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96c12e423366e69a — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/node/index.ts:302 
              const content = await this.emulator.fs.readFile(
                event.path,
                "utf8"
              );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bb01e83eea0a2f1 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/node/index.ts:334 
              const newContent = await this.emulator.fs.readFile(
                event.newPath,
                "utf8"
              );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4206447979c5ca52 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/node/index.ts:400 
          this.emulator.fs.writeFile(key, value, { recursive: true });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b34366b2284fac47 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:35 
  process.env.CODESANDBOX_ENV === "development"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bc744e4f77d019f — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:37 
    : `https://${process.env.PACKAGE_VERSION?.replace(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #732549024fb13d0e — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:114 
                return this.options.fileResolver!.readFile(data.params[0]);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #1bd724853c02e0fd — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/sandpack-client/src/clients/runtime/index.ts:439 
    return fetch("https://codesandbox.io/api/v1/sandboxes/define?json=1", {
      method: "POST",
      body: JSON.stringify({ files: paramFiles }),
      headers: {
        Accept: "application/json",
        "Content-Type": "application/json",
      },
    })

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs tooling Excluded from app score unknown #81b94e7252669eac — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-react/scripts/rollup-generate-unstyled-types.js:2 
const fs = require("fs");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #5c98c74bc727b053 — Filesystem access.
pkgs/npm/@[email protected]__reposrc/sandpack-react/scripts/rollup-generate-unstyled-types.js:8 
      fs.writeFileSync(
        "dist/unstyled.d.ts",
        `export * from './unstyled/index';`
      );

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f65f5c87282bea1 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-react/src/components/CodeEditor/CodeMirror.tsx:478 
              {...(process.env.TEST_ENV ? { "data-testId": "read-only" } : {})}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #681d6991fce68c31 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/sandpack-react/src/components/common/OpenInCodeSandboxButton/UnstyledOpenInCodeSandboxButton.tsx:71 
    const response = await fetch("https://api.codesandbox.io/sandbox", {
      method: "POST",
      body: JSON.stringify({
        template: state.environment,
        files: normalizedFiles,
        privacy: state.exportOptions.privacy === "public" ? 0 : 2,
      }),
      headers: {
        Authorization: `Bearer ${state.exportOptions.apiToken}`,
        "Content-Type": "application/json",
        "X-CSB-API-Version": "2023-07-01",
      },
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #172708084b564cab — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-react/src/styles/index.ts:18 
export const { createTheme, css, getCssText, keyframes } = process.env.SANDPACK_UNSTYLED_COMPONENTS === 'true'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #903cc5cd02d4abb0 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/sandpack-react/src/utils/useAsyncSandpackId.ts:22 
const sandpackClientVersion = process.env.SANDPACK_CLIENT_VERSION;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf95776d32adaf58 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/website/codesandbox-theme-docs/src/contexts/config.tsx:60 
  if (process.env.NODE_ENV === "development") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #282e33e4f07a748e — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/website/docs/src/pages/_app.tsx:7 
const API_KEY = process.env.NEXT_PUBLIC_AMPLITUDE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6213d35355ce13fa — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/website/landing/pages/_app.tsx:6 
const API_KEY = process.env.NEXT_PUBLIC_AMPLITUDE_API_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d24d2036991627b4 — Environment-variable access.
pkgs/npm/@[email protected]__reposrc/website/theme/next.config.js:1 
const BASE_PATH = process.env.BASE_PATH;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@ant-design/icons

npm dependency
expand_more 1700 low-confidence finding(s)
low env_fs dependency Excluded from app score #3f5f2236f19b7721 — Environment-variable access.
pkgs/npm/@[email protected]/es/components/AntdIcon.js:65 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6380d8f10853c28 — Environment-variable access.
pkgs/npm/@[email protected]/es/components/AntdIconLight.js:51 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #232272039928a78a — Environment-variable access.
pkgs/npm/@[email protected]/es/components/Icon.js:79 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81a8045689ce98be — Environment-variable access.
pkgs/npm/@[email protected]/es/cssUtils.js:150 
  if (process.env.NODE_ENV !== 'production' && typeof console !== 'undefined') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fedc1a80a39168b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AccountBookFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f8998c6901937e6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AccountBookOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a3b9683d068fe7a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AccountBookTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b81961280a2111d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AimOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f087a72a7752f0c8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlertFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e72d86784912a52 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlertOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0e1fff0f2607cbf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlertTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52f1e28780af97a2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlibabaOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b658fb35a11397a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlignCenterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #835be8c81681c072 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlignLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76a036aa142184b1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlignRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0820e703033ef8c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipayCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f650e597309ee36b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipayCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff6c71e273ef82ac — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipayOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a4ef341a12c5212 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AlipaySquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a619711fac78c16 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AliwangwangFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bbe256449d4c28a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AliwangwangOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cb2de90e42db196 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AliyunOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10cc5b89543f4fbd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AmazonCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32eb6cefea8908ee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AmazonOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c3df1acb82c0e50 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AmazonSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31a8711b0032bdde — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AndroidFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53f24361ee31e580 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AndroidOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c318fca6c6c35a2c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AntCloudOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6060cb0e1595c20b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AntDesignOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcf16667b905176e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AnthropicFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7cf452cf8a8cc5b5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApartmentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90bcd06c891fb5bc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApiFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49105a25caf30031 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApiOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #335a528fe6a92fe6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ApiTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47c78fa747445f0b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #782b2d9345fe2fb3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3fa1860df975936 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23e344898eb8b1da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4fa63476e59dc946 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86413308eb84ca27 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AppstoreTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88e5dbff22ff7213 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AreaChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3395b5cc79f06c8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowDownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0726a5ffd41c1220 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2708d5b00294c713 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfdb15eb29a833c0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowUpOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a196169510280a0d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ArrowsAltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5c29f02d902a3c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c0f042b38f86fd4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioMutedOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4f4fc2a1c5efea3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d9db82ee7905d04 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AudioTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08170405e92d6cc9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/AuditOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb33562db5417d2d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BackwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29eb3056934939a3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BackwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e244403027fef65 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BaiduOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25ba1ccbf60754b5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BankFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd4f091a1cf640ea — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BankOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2d3858a9c640602 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BankTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e60e2aa89846fb09 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BarChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd0a91ae15538957 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BarcodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #086205a04308f611 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BarsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d9fe0a793b347bd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dbeed26dc830f2b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9568af8f83daf1a7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e3cd4191ba517d8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BehanceSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23f8aefbec523e32 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BellFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82daf0e6af11c448 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BellOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c718c9a447bdc72b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BellTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8c9a1b88d20cd3c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BgColorsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a779611193cf13f5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BilibiliFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5aa0467a916db31d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BilibiliOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3116dc548572209 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BlockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7682c267d2d0204 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65a4d358f2bd807d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BookFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #490cdc0ffe10831c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BookOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7166214695a6454 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BookTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7378c1928ca6552 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderBottomOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a17362c8d18f3cbf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderHorizontalOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5f9e2bd73ec1b5e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderInnerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f59a697d35eb4af — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2fbba1b523cb024 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderOuterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86bd3f93667a8720 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0ccc59590ea1252 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ddbca655793f1c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderTopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #555aadf56f8b01d6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderVerticleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52b577fc6d647c06 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BorderlessTableOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #067061832809904e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoxPlotFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30a4e1948249dda2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoxPlotOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0e4739fe39e8b34 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BoxPlotTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fcf02754c7f1945 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BranchesOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #268dda4dcfb6fca5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BugFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09c624e53317673d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BugOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1b8638248d0b5561 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BugTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #331e0df5170de601 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BuildFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #956000e342f46528 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BuildOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39b8786efe166f05 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BuildTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da4cd4b3ecc82b35 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BulbFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb45a0fc398e4289 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BulbOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0e81e6ad05e6e11 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/BulbTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9962fb08475165ee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalculatorFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79d4769d5dd382a1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalculatorOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #631b7941c0837292 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalculatorTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a282235e23e43d84 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalendarFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41c45cb166fa34a7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalendarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2788104b5eb29213 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CalendarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #680814ba3111bf17 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CameraFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f4c40e7df5678625 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CameraOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f5a902bed3f400b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CameraTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #931ad82904574c4a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72decc5e09ee4417 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b229d3becfc01c33 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f082998ed034690a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretDownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e663135679d94b64 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretDownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c216f63d15035fdc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretLeftFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f87c06c0e4ae4d6b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18c38ad9b82f1eac — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretRightFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1ef531b78106d50 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b2e8210ca2263d8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretUpFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b8513b01f87cb34 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CaretUpOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e6add965ffc72e1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarryOutFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #199e88e4487e7a3a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarryOutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b1ccc1df21cdffd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CarryOutTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be23536ad5edf18b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ad405d8bfc9f590 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07174a1fdb6afd08 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5673b0bf341c469a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77159fb8209c30d7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e468ef1986c9f35c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44e3fb1bd2f4797c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CheckSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20df9d199080814d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ChromeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0b60b89edf69144 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ChromeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #349b2bf8265fddf3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39820a44c8f813ac — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4411e4d4b3e3cbeb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0866c9d4caec9b9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a763fb33c9cd87b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CiTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4e30c9c9d3b581b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClaudeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40c77157dba258c5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClearOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23c436bdeb765560 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClockCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b12a0f03fc03c54 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClockCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97478f9383d3ac44 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClockCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ecfa8130d75a0a6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #daae6b31caf2fbb2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a184c9996dd9c68e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b050e055610d41e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a6e6884e8e06cd3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #312f790abded8912 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b202bbe66a4c7fd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloseSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #704b01395357f3c0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudDownloadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c4d583049b4b244 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b1bfb7d236d297d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f0136412234e5eff — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudServerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afe9630626e0a1e0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudSyncOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20eb47f209244ae2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43bc136c24f815f3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CloudUploadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b16f993f9fadc6fe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ClusterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #733a1b1ab3fef646 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f74b765d475d1339 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa2a66eefee18c85 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeSandboxCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b024cecb7c4af88 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeSandboxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b87ede7724aff1d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeSandboxSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e6098dd08355961 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de1c39f7ad14e887 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c754447022affcf9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42bdc24798ea5644 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0dc4ab89a2fe940e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CodepenSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17bafc2823ee69b0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CoffeeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #265125090be2c322 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ColumnHeightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a6ec0d45af7a5c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ColumnWidthOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0585487abfc658d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CommentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11edb5e060eae7f7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompassFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23633f386e4c0203 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompassOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc1713d7ac892589 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompassTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61fb4197527193bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CompressOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fcf93803fe12af6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ConsoleSqlOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6ac68f72ef6bd39 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContactsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8558403169c6835 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContactsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #259774aa4f2f7a64 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContactsTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a13b5f060b323fd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContainerFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a62dc9b121002e23 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContainerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #653594b7424a79de — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ContainerTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bce8a9efb977558 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ControlFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc8d1c465e597afe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ControlOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5c0df614d2efda0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ControlTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d529fab67450df1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #696fa1fa131b79a8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96d4b948fcd25904 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b8d2687bf9fd1e6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09ce8cf50cbb99c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74d0eb8fa293c28f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cd0fdcc8d959f5e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ede068ca9b16b7da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CopyrightTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97baac072e51d79d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CreditCardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c54610e771da04fb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CreditCardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72348b613c149765 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CreditCardTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #483d0ebe4189f88b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CrownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16929f5debcc1033 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CrownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f90f2af12fb228c5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CrownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33782be3b02c3bd1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CustomerServiceFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28a8a5ece3e7bf03 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CustomerServiceOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea78d838dd77146a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/CustomerServiceTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c61957d9163e89e6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e902a3727f75237d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashboardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79e425014577d699 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashboardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7368e891802bfe32 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DashboardTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8b8e1bdc9fec584 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DatabaseFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31276826d305f333 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DatabaseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d3f7231cb976892 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DatabaseTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec0fe697ab7e90ed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeepSeekFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d9b9dfd24488dc4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteColumnOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64f6baf989ef3fd1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87c115cb19d0a083 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03bfa6e4c227549f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteRowOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c99b68b02df58e6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeleteTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe3456bd0a4e32e9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeliveredProcedureOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37a1f508b964ca79 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DeploymentUnitOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f42b581c773ad41 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DesktopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d061b45ec364150 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiffFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5db18e1cd1c133f9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiffOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4584dcbdad7aa582 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiffTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70644138ba567766 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingdingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64fdb34bf9fe65f1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingtalkCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebf1ac77537b9aae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingtalkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06f66adadedf99c3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DingtalkSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7703535a6b2d6241 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DisconnectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #deeb5533b4718c86 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiscordFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65210a3bc56a271b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DiscordOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a0008065db32e62 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DislikeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1b890d0d2c739f3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DislikeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #819906a135384b03 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DislikeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a9178ce3b0412f6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DockerOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fde4e709f4fb399 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c7027f90295b899 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d086a0198358d994 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #902f54e582773c0b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #551dcb852fc40a58 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DollarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8a506e8527f91c6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DotChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8670ad425c51f042 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DotNetOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc67f4fccb9d97bb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DoubleLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8ba6e9aab281110 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DoubleRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #409719ad182ae22c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18ca336936f6b9eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b8267f0d8485c88 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ebb26c0aa2eb99b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4aaa074954763ec6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa65a76d1daa6499 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf1e756d7eceec98 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43c9c976b7407843 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DownloadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d393863f4a5651e1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DragOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f362291d7645557 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54f538a2c5f479d7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #984ab281fdc4739a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2490722fb54f60a8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DribbbleSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f67251d6db3289ce — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DropboxCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81b0f6bd9a5bb21f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DropboxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e78aebf813bec95 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/DropboxSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9dc83b00074e69df — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EditFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af5f718705ed0c2f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EditOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4a0279c3b3716f1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EditTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c53c8cd0f5ee4b70 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ElevenLabsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79b5ad1fa7869fab — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EllipsisOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52314ed9f77d6e44 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b63ba2b39b227a65 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnvironmentFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c83a25b242688cf4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnvironmentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ddd56444d3c858d7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EnvironmentTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5cdf89244f2b190 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d69ac46bc5dd4385 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f576d0b58986daaf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #291fad76c2bc1efb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d392c80089e3ccc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EuroTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eeadb4ee40b30da8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExceptionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1dde68b77d49fb93 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c76dace02cc71040 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33b663958fe5e8bd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #381a91671e99a9b1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExclamationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcabb7c3f3598939 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExpandAltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #983675db6d4e38e0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExpandOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef4e33be6ac6a7cf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExperimentFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64c70244d078fbd5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExperimentOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #966bf813711efef9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExperimentTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24694fbf5cd26228 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ExportOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28c6a2ccc833c893 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f60c8585e6f9de87 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeInvisibleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64d7a0209168c461 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeInvisibleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24cfd64ef8048f91 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeInvisibleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a91d533dd2bb332d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a65a2d7f103733f7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/EyeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cae879b3308670f7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FacebookFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a2853da0878e4dc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FacebookOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ae9670e8a176580 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FallOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b94a9cc30ffb440d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastBackwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d3374fd2c6ecdd3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastBackwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37af60f8f5773fe3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastForwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23ed977f18936321 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FastForwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a51857175031a11 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldBinaryOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64a06fef3d4933d0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldNumberOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fe38d2d89d3573e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldStringOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c52823e1294dc5c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FieldTimeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7905869a9995a0d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileAddFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f915d9460d26aae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a03fd90d4e2213aa — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileAddTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c533dc7c4c936a1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileDoneOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e3da9be7b2b2aa7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExcelFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d176e88d0cfaa4a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExcelOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2582b9645f34b415 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExcelTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10b50c2fba515d47 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExclamationFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84266246b119f5e9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExclamationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad30b80b129cba7b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileExclamationTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33998572378a82b9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #868c6c4379423bf1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileGifOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6558f6c9f5d5171b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileImageFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57fafb3bbb9c2e8e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileImageOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3495529005efd24b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileImageTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #984ad077599a7d41 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileJpgOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fadf6629ddb42e23 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileMarkdownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fc7b81391985cfe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileMarkdownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb81d5283f63ffb5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileMarkdownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #748e94f4601b6af0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa27451a73cf878b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePdfFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95dc4cb9fda7fa8d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePdfOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31a147d853e84db8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePdfTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f283a80d2e3b9b7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePptFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #515edfd65ec86ce3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePptOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3cba7c6914a6465 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilePptTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b406db5847b4cbe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileProtectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33bb51f46e87e799 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileSearchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f02a92525f8927e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileSyncOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d89c7da38a159559 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTextFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6246f2733f1f77f8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTextOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d117ff73a495ba7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTextTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aae39cbebf161c9e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d5441c8a00196ba — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileUnknownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #225cae6bbe17ec06 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileUnknownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #234646687a61b297 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileUnknownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d30c9c3e2f6814a2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileWordFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #12bb3a21b0caf4b3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileWordOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70c9dd03b6b9acb2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileWordTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ebdf1ec95fa0349 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileZipFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81490490cc0615f4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileZipOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e83e1788f8c41417 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FileZipTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2ffbb45b2eefce2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilterFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d281f17aa804969 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8173c5d08dc9765f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FilterTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdb7110a8f23d850 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FireFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #132dcf75bfbce349 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FireOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e3d2dfe1c460304 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FireTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6506bc95d52be8f6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FlagFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #43d3f8dd2dffd29a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FlagOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dc8f2b9b9bba703 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FlagTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #676e52079f4f15e0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderAddFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb4637765fe927f1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59dad3a1b66f63c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderAddTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35ca40cfad11ab01 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95e67f43bdaf6987 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOpenFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #354785fdae657ea9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOpenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3770cb792649599e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOpenTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb889a49178d49f9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #faccab14806626da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b53feb41137a0e2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FolderViewOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #70acfb8bd1e94d6e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FontColorsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9fab2091e70142a7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FontSizeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #720915e50ef049da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ForkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7409e39aa1dca391 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FormOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c88e32751eb27b0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FormatPainterFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c69901267eaa849b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FormatPainterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cd17a65e5f6dbed — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ForwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e8a809ec1a836d4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ForwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb4c17d2d3ac9651 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FrownFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8649a5631624dda9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FrownOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #808deff9ad1bf29b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FrownTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b755b10473b1d3e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FullscreenExitOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b979547855934eab — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FullscreenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83d493501c5490ae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunctionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dcd60e6d43eb442 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64ddf63e1775d316 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #497bb16e31a3f3c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundProjectionScreenOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61ebed451b12c11d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #783e48671e77c53c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FundViewOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e496d13e5fa0fda2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunnelPlotFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa23581d4e5c696a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunnelPlotOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42ece39bea8acb69 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/FunnelPlotTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #749a6fa9dec30767 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GatewayOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ac71d86e5f52110 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GeminiFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e8363e0666464c5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GifOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4a3df8e1c8a89e2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GiftFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a65916d117c83fab — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GiftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6af295d60ea0c710 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GiftTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03dd36f59339249e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GithubFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6ce201133d22d6c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GithubOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3ed1d297a2120b8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GitlabFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a544d3c1c391e36 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GitlabOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75775ccab253168c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GlobalOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc3fe5fdf7e9b287 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a9920265f47bf8a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b40e4a5dee6d7aac — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbc99eca0157b0cf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoldenFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc8c2e7f17ce4ba0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoogleCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48f40238bbce4063 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoogleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37a0729b6bf67cd8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GooglePlusCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd5cad60b634bf8a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GooglePlusOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29cfd9ab96bc1514 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GooglePlusSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce6660c7bf997bd1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GoogleSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f78f5341d8a6d6e8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/GroupOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34e129344ae22987 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HarmonyOSOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62463d0348af3c9b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HddFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69cda9a01ed7975b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b431425aad3d1d71 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HddTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e44ee089dae565a2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeartFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f36b6ff321396db7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #852108cbbe8bf633 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeartTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d695d3bd902f1bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HeatMapOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7edf1485039659bc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HighlightFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cacf9441ecc25600 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HighlightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e21e4fbd41b70322 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HighlightTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97ddf83c44651107 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HistoryOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b380d7947f3703da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HolderOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08dad37812ac5a96 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HomeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2bcc4229d2b1c010 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HomeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8dd1bd7f355973c6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HomeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9ca775e059b38ee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HourglassFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eceb98431db3e7a4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HourglassOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bffd6120bc0135d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HourglassTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f228eb82e479a398 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Html5Filled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5013efa7af32eb0e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Html5Outlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fcc57985fa7b6bc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Html5TwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a2ed8fbfb7d4123 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/HuggingFaceFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea8e85adb598ca4e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IdcardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #65a3b142e6558b88 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IdcardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9941426f1ad691cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IdcardTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee9dcffc263cd946 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IeCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16d2f5117dd49d6f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3223285c84ff603f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IeSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69cf466c4d1cc079 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ImportOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e04f8680b0a71c0e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InboxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c05a1f112cc3ce69 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c33515dad2e3fd3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ba1332828bee8ee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aac309e62dfce0c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InfoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe49e530d33f36d0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowAboveOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9356ad41e56c356 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowBelowOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b50bf8bc1706d22 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ffc26ee0539d4ca4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsertRowRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55bf59a59deba69a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InstagramFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efb7b30053adbd8b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InstagramOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6442ccc09685f36a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsuranceFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7dd3ddb5055d4b02 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsuranceOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0d2c3b98c58f99b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InsuranceTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d562c64e0da4b31 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InteractionFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57dfb9caea9a30dd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InteractionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #936d755ca8dde5e9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/InteractionTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #755c0d1ee071290e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/IssuesCloseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bee2a461f2ea194 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ItalicOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c028de304d511be — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/JavaOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a26d09120a2fac3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/JavaScriptOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0eb9d34053fdfda1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/KeyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55ca79756049515e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/KubernetesOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #587b30795fd62765 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LaptopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #853253f5e7f87d82 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LayoutFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e7556b3b4053373 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LayoutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f20fc9651d376043 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LayoutTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f99356d1559a7cd6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #222b45c510cbe98f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7f7735b07732c72 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ea4dc5b7f5a81b4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38229ee9f927687e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d0addd4d9ad62da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d62bd56852cd16b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LeftSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ae8a6d612887193 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LikeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f4b8e2240160046 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LikeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efe759f7c5a42a91 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LikeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #693477080136c04d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LineChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc135b7fde507a04 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LineHeightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73d75ce527cabef4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LineOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4281d75eea98f7b1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44b3b6f76a9bef27 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinkedinFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d6bb7b203771842 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinkedinOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6742176f9610eba0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LinuxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a3514e547f9aea2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/Loading3QuartersOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #287371b80e87925e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LoadingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c074bb303a6545bc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LockFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6978604da62692be — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #844f69703a62b771 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LockTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b9df437f1d2025ae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LoginOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a64a656465cbc3c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/LogoutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1453bcf8a94945ec — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MacCommandFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a7339e2d4c44245 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MacCommandOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1539ed9dd009a190 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MailFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7986f92a54895e57 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MailOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a4c3cce36a71cf2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MailTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b3fbc6b85ffd654 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ManOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d18dd69d1f35d9e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MastodonFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd57d445b2240dc7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MedicineBoxFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d4032683e4cfb7c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MedicineBoxOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d2656cd6867e27f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MedicineBoxTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #374ea98e365ce172 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a9ecc42eec49e9c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99a4d5f9c93b4a49 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0eb1944d04f1d9a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MediumWorkmarkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5130a30bb2bdd4fe — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MehFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fad3d3dd30b2e4c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MehOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b7009ba19111816 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MehTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2ab667282641700 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MenuFoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31269ee942b0318c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MenuOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f1059461ad09564 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MenuUnfoldOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7100a6c9290e4388 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MergeCellsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b07fc9711716a30b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MergeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2774dee04532b31 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MergeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bab33c34635497eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MessageFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbfd3cd5232f7937 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MessageOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #059bab7c335ec258 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MessageTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #87b939cfeb128798 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7669e709aa28310f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa50414261506b4b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1e4e6e9574d3217 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48b24fa21f1cbb10 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1ca86b0d0368bc6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19a0ecc911c70eb9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MinusSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fbf2f3f655a3c22 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MistralFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f143a9e2c1c3febc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MobileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69b254ff3085ebe0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MobileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #faecea613ba46f38 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MobileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90bafc270cc32df8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoneyCollectFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df0d61b0c458ac4b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoneyCollectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5be9c8e6ea645be5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoneyCollectTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78fac4ad2933ae83 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MonitorOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f8873c2c8770882 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoonFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8943f467ba99e8e2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoonOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b3542b80ca71fbd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MoreOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de245bb65e0f0ead — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MutedFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6882b1b7449824bf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/MutedOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c34ef27d504fa8a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NodeCollapseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e92d0ae6f2788c2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NodeExpandOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a7c2616d89dde002 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NodeIndexOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #017c9edafe2c38c8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NotificationFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e4773c78519c60c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NotificationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef53dac55bb39f0f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NotificationTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11d050c048b267b6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/NumberOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20cc9e95255cc0b0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OllamaFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14774a690c4cc276 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OneToOneOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7752dc282211b8be — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OpenAIFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd963613e82137ae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OpenAIOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db6333575e959a4f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/OrderedListOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8b04f56b2711a2b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PaperClipOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f82fc57323ef1eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PartitionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73b33a816d45f50f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5779aff93ffce4f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0889e100e4255ddd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbbaa1be67f9e809 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PauseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5192b52c70542ef — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PayCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a8395a1ac320f20 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PayCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #050dd4803cadacf4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PercentageOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #276efb00bdea86ca — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PerplexityFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16f537bd7baa8385 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PhoneFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50840783ce843069 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PhoneOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36f82bd2ab66368e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PhoneTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03dcbe69d48e941f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PicCenterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b7edd38320a156a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PicLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd7140cb038dcfeb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PicRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #180e8afe96fa7215 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PictureFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86d3dca43740c3c2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PictureOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5da86920c558ab5b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PictureTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3de07fd249c9051c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PieChartFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6253cc4dd283fd68 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PieChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff0ce7c99c789f18 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PieChartTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d6ec69837615c74 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PinterestFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fca36bdb5198e43 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PinterestOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a9ecd1d890e900b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlayCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6dd6605c59329944 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlayCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #478530e08637889a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlayCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8ee8fdb0d68b138 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlaySquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4068ced7dafde4c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlaySquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51419902c757ca82 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlaySquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2b3aa5364fd5476 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #836ed1b9f93dbdb0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84ab2cc342755983 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e595604911f8c32 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3ebafe3e3c66942 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9376e441837c59b2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a57acbc2b019a0d9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PlusSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fae902541fe8648a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d32d311f9d0290d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e82cdf7fef6922b2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #489a7edf37fee7c7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoundOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d2b01c13edbef65 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PoweroffOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9eca6ce06fa8f130 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PrinterFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4272b9e49b8ac2d6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PrinterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c84edc047ba501b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PrinterTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #626c9d40df7c6d55 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProductFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50029107533abb83 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProductOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #331cb168f93dd564 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProfileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a48d735b307ce45f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProfileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9a74f74041b3d8d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProfileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8583092f256251e0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProjectFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1ea775e22445a57 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProjectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c888ec5c7fab0cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ProjectTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95feb71605cdcd58 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PropertySafetyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c8e3b0cfdf450c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PropertySafetyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfca667c3d349e61 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PropertySafetyTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee81a9b774c2056f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PullRequestOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5fed64dfbb1fbc3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PushpinFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc54d34ea17e1847 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PushpinOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c6abc7fdaea8672 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PushpinTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea338906c102ef7e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/PythonOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a78544882256e0ec — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QqCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26d511c2c6a57c4a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QqOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a097f52cd513e922 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QqSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ecddb2c811c13f73 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QrcodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a7b57e605145ed8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df4105cd8ac4ca78 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e83bf29c09c674f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7730f6cb99b714eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QuestionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05fb18a56cacc4e5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/QwenFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84d5c60e5a7f695d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadarChartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17fd00295b59eb46 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusBottomleftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #060d36e9a2905885 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusBottomrightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c43ba3fa6c729d7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusSettingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90f02f19504498a1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusUpleftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f54b4a5fa9a2232a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RadiusUprightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #172ebd7ce9dfe3ec — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReadFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20bf9e714e6fee81 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0a686948fefd8c4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReconciliationFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25351d86cd295f17 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReconciliationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4db738dd56178521 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReconciliationTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03af134243926f0d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedEnvelopeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd0c50bcdb0b8634 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedEnvelopeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94566ff7b9c03457 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedEnvelopeTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b14d87303443265 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedditCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c41414c1411a2b6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedditOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #602ef6a0cb75bde4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedditSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a51c6af5d1aecd5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RedoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #59c05b51f6f69696 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReloadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da3fdd7d7138b2a6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ReplicateFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2eed17b2c58feb8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RestFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03f0db3b5c1b5c69 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RestOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c287c64b2cf5641e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RestTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #882efc928f261b39 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RetweetOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17da9b73ba70e13b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2da7c450c42739c3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1171ca7ad48d6e3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a8ff764a5d97897 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f8ad109c1765723 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef9b4f9843a20ffd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e13c1b9bb5a521e8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RightSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25488cee88d0c90e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RiseOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55d0be506bc7fce7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RobotFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b73bccf2ea0dabd9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RobotOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfaaea64f0aae798 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RocketFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a1606499048a811 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RocketOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d4e604b00822391d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RocketTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #570a13be72fb6714 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RollbackOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d2fbf16df2532a2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RotateLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c9fb41383e5ebf2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RotateRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a8bd7170c1557d7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/RubyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f50cb7ad584a568 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyCertificateFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20eee307bf53268f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyCertificateOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4aaca0d78fe989fc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyCertificateTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e933af33e7fa2f8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SafetyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09602c8be9c78bb7 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SaveFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b44a03089514f4a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SaveOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14204062dcba6350 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SaveTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #982d88f127caef1a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScanOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06b1119776afb321 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScheduleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c67d5efc45935429 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScheduleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b137ce96e16e8128 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScheduleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14437f145936f1e8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ScissorOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c93c4dce96cd694 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SearchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58655e9b21fc1e8b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SecurityScanFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08725a0e259e4de8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SecurityScanOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a0f4f63fd7a42ee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SecurityScanTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a485ccc1824ad8eb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SelectOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ebc99f3e3bd6408 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SendOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d4c787b2e68a90b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SettingFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17eee0e959b4d4de — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SettingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #139db7fac0b6073c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SettingTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c031c7a5a2bb083 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShakeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a23361cdec47873 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShareAltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44bcfd748684974e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShopFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44d8b3ec425ad93c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9671ab894de13b09 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShopTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f49a5a2c81683868 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingCartOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14aa18311827e6c9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5057bf1316b50063 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d7d0cb64c78f8bc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShoppingTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a70876a1ecd02b42 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ShrinkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1405e1d568988c2d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SignalFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0a30b06eda14bfc — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SignatureFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34fb7a9869721e85 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SignatureOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a8de064f933c906 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SisternodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #917c63297b87c47f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SketchCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c80d489112e3664 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SketchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e497a26ca325a5e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SketchSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13dcb4ac84b6b13d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkinFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #686d7e0283761b05 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkinOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f681a4707208c1e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkinTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8b497b06eac421f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkypeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ee4eaf952b2c8d5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SkypeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6702b211a30214b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #374b9bf7e8ba3771 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15aef17a2708a9e1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15c9b2ad664f91e6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlackSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f64639d3e2ded6b6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlidersFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf45714514dba936 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlidersOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21a0155bb555531c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SlidersTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34ed851f3eb78618 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmallDashOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f163a996187f773f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmileFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4aef3015f4f7405e — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmileOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7304339fbddf12d9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SmileTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #038f5dd78ae21164 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnapchatFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #590fdbf94c834663 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnippetsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #253744850a1f1958 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnippetsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #314fc4bda9d0ffa4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SnippetsTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c57cdba23fc9bec6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SolutionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9627cda5f4cfb5e1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SortAscendingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3958afc18639b18c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SortDescendingOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b87e4139f651faf — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SoundFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de2298bda782c1a2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SoundOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d3fa4eb5e11b190 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SoundTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #161b6a463817fdbd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SplitCellsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ff2776c951b47396 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SpotifyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0013168acc06d60b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SpotifyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77ba02b7b26bc630 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StarFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fa963ad4c1f5294 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StarOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #770edbbc59dc8603 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StarTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdd0379534bc6d16 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepBackwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0011d93f692495ab — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepBackwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8262691698e2e8c2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepForwardFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94a47ec54136e39f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StepForwardOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #207fc413594689ec — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #405fd4489ff516cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StopFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4281e7644bd5c672 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e415ae67a1870a0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StopTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1378c687dbae6309 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/StrikethroughOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf40c28e6476f9c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SubnodeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16e0fcc48b14eeef — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SunFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5319222df209dca — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SunOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90d643b09b111583 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwapLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #975bc42ac6834cab — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwapOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5600ae51e1526009 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwapRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49d4a40e8e833a6d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwitcherFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b28d88c089cae258 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwitcherOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9e1ffda1aacd680 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SwitcherTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38c50f1950e61f12 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/SyncOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b0f5e0c90026875 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TableOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4d444980e615aa1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TabletFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d06c3a003f29c95 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TabletOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #035ccc474eff6d83 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TabletTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf66170a09a19ea0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b294249d8a2e2736 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5b25385ddef4324 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5168842b7a42555c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed5f4b0a7f853607 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f05fea2d9b234f57 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TagsTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b07dbada1d62c2d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b840097a1010fa37 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f4afdcfccd8ef45 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef06328c5f4a60a8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TaobaoSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e2c4882d07fa7ab9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TeamOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a34d92179e8ea5d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TelegramFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #02de284b6d405a65 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThreadsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f862e6808b10ee58 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThunderboltFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b830ae7a01ca542 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThunderboltOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dfe072ee5bc2d74d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ThunderboltTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76bf95bb3df2f846 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TikTokFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7aa7b6a710428e5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TikTokOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9040f2ef9842fde — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToTopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42e121289b454511 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToolFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7378fb6e6c9a3806 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToolOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b08abaad70635e9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ToolTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1560f0d76ef62ec — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fe04b31c060ab1d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fa886390ce88ab9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a63cf6a1099d107c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrademarkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a331115f4b2ee59a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TransactionOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9591d08572c7fde — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TranslationOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #51717adc531a1619 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrophyFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #39a9b06dbc9a30e8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrophyOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fa7261a1dde6ad09 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TrophyTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22a543f4c816af47 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TruckFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b25120356c49da13 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TruckOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #00fc7f85072ed1ad — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitchFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #876247f7cde4f0e3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ca54e787b7918b4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitterCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef21c455ac7abb3b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitterOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a901c7c473691ca5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/TwitterSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82d3ece9bc788f18 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnderlineOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48ddde87ddb4b9f2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UndoOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #036ef3a6fbeee41f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UngroupOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c55ad95af3845b6d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnlockFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4894e88011b2c7f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnlockOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fefa769fea85574 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnlockTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c4434e54707b75f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UnorderedListOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75e505e520a3ee50 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54bf960cd5af3c0a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf3cc4d382aa0f4b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpCircleTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c728fedb8c268bdd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b3a72fba64299d0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55f8239f201d193d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbd92934c662b7f4 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UpSquareTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f79edc2ded14dfbd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UploadOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bb2e4292ebff6b1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsbFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #037ea1582ac6033f — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsbOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b352ae7507267f2 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsbTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #26ed8ed77f3ec20d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46e43b6ec52f0546 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserDeleteOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e94e4f37c256eb9 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95128e1797245052 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UserSwitchOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #834a45b326f49856 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsergroupAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a2417ae60df6e82 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/UsergroupDeleteOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22bbdb275ccb9fc5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerifiedOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4353ea5d62342ab3 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalAlignBottomOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #440a6a032ed6bc65 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalAlignMiddleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ebe02fac1e8ab18 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalAlignTopOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb98c1bdb56dfe3a — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalLeftOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0d00c9223be0c7c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VerticalRightOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8481063b1238e623 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraAddOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9c78c438a7ec32c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3bbf692e2157e901 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #108526f1b2de898b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/VideoCameraTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17e63e394b50ccab — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WalletFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7f2946de4f5a3ae — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WalletOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01c36d4812f018da — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WalletTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6ac659089c434af — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WarningFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #740fe6fa8ecd86d8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WarningOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3496c29bec83deee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WarningTwoTone.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68d4aa4783545cf8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af439f67e51076c8 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66697a28b5e97179 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatWorkFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c3c7d80630bf7b0d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WechatWorkOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2f97ed3437db80b5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08e4585836ae0648 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboCircleOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3cd1289962eb087 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8f95980d305d857 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c78461236884ad7b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WeiboSquareOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ace8439186dc54d0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WhatsAppOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06678191bd94e74b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WifiOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #941aae22aa2045cd — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WindowsFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7e588fa74609d8d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WindowsOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84b05e8c36e914c1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/WomanOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ba64a68f58eb037 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/XFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28bdb991bfc5cac5 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/XOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b594d3ffdef42abb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YahooFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #458f0c97c64b4a79 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YahooOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cfb5c7c85990b3ee — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YoutubeFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #336b567f516fadd0 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YoutubeOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54760a8a8774eb9d — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YuqueFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d7e50cbb61c931b — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/YuqueOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed328e8af2336aa1 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZhihuCircleFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92ba728c9a8bf7bb — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZhihuOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d50e206609f3a7b6 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZhihuSquareFilled.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ffd464de6191874 — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZoomInOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #028bb6b1d7697f9c — Environment-variable access.
pkgs/npm/@[email protected]/es/icons/ZoomOutOutlined.js:15 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5dfb9f64369df801 — Environment-variable access.
pkgs/npm/@[email protected]/lib/components/AntdIcon.js:73 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b52899b9654e462 — Environment-variable access.
pkgs/npm/@[email protected]/lib/components/AntdIconLight.js:59 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea33aa1039982941 — Environment-variable access.
pkgs/npm/@[email protected]/lib/components/Icon.js:87 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5d59acf05f8a4e88 — Environment-variable access.
pkgs/npm/@[email protected]/lib/cssUtils.js:158 
  if (process.env.NODE_ENV !== 'production' && typeof console !== 'undefined') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ceb49f497fc323b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AccountBookFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25d13a37cf378909 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AccountBookOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de6d6e0d31af1f0d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AccountBookTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b30a0bba1155f8f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AimOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88978f618a28c9ae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlertFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a59cf1f745d89e8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlertOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #073581bcf33aa1ee — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlertTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08d323c053abeb76 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlibabaOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a3cccc7c1f783ff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlignCenterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40f6d57003e1302f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlignLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a9720ac4b6044c3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlignRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #86ddc7ccce09cf50 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipayCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #25b89260506caa6e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipayCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #964b20ecf06bb7e0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipayOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dbd9a0a829b58545 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AlipaySquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97ff4b390974d1f8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AliwangwangFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c137e0b5a64b5e0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AliwangwangOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0cc3ae90c777349b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AliyunOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #912244aea3616b88 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AmazonCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fe264ab1e18d7ee — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AmazonOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27bc6d99636d31cc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AmazonSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19090498d26beaae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AndroidFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6261467fc58519fb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AndroidOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #933dd65762ba265a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AntCloudOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #caecd5e738925dcc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AntDesignOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1606f16061c11c69 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AnthropicFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed1c23e976125c7e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApartmentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e6145e470e59abda — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApiFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #212a874d87432ba3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApiOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d48bf84e169bd641 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ApiTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c9e6ff56a85faba — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4879574d95e20404 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8683da2ffe5654e0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1861bc854759834 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16da872e7b8cb4c3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #added2c151fe991f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AppstoreTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eee491c6ca3582ac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AreaChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a1285d6504f6ec3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowDownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ebdfbd2082ce9124 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6bdb650efe6a5415 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04a8283c6536116d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowUpOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11c6831e55c2bdd6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ArrowsAltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f947ebfbe06a7b28 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #191f6e20fcbb00a6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioMutedOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e45a2623b9a77b83 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #611eca0ba6a76929 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AudioTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #10fcaed760036778 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/AuditOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8254eb65a7360670 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BackwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df46cd917f905d47 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BackwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04310ff1d2caf193 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BaiduOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c9a4e0c83121fe2c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BankFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81293ad559c457c5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BankOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b5f94f4a15f84c8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BankTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #881266e3c7359cd6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BarChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #082713849097d19b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BarcodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #091a69dea5525d3e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BarsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f06a5ff24d1c9dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36acae26d3c4dd4f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdf8c12c1ba8e0aa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3549adadcf1501b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BehanceSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f525a5ed45826de0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BellFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fed408017660fa5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BellOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b6fafc7b44102cc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BellTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fed36723fcbd5d9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BgColorsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca6510f1383a3f98 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BilibiliFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29e2500e8a467b38 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BilibiliOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #711565ec25be5e49 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BlockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #802873481b5066c2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ffda14c06e2dc86 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BookFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f06500d1d80d92ae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BookOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2055e23b53432f8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BookTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acf6bf21ac68633a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderBottomOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77405337c627c4d0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderHorizontalOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c97c21dad93d4e3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderInnerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d78326cbe1f391ec — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #211dbcb2f9de94d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderOuterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05a447033272b83b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eecdca85c0edb8c4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30ec29c500bd9cb4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderTopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24c61ab1785da254 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderVerticleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #012a51082bd6b725 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BorderlessTableOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a152f1d45e004d1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoxPlotFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b268fd37c287eacd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoxPlotOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc2d290d7c18646e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BoxPlotTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b2e508677470412 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BranchesOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6add6436f9204589 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BugFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #448b04a2a669e73b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BugOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #96d79ee40dcbaa4c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BugTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40a7eb18199ca17f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BuildFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c27a3a9574cec157 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BuildOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a90f69d4abda10be — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BuildTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #931a892a20bbc9be — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BulbFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45fe5bd21f527ac4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BulbOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e65c965f84606c5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/BulbTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17ebfa253b952ec9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalculatorFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fec32583f86878e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalculatorOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91f72ccbd8381c96 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalculatorTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3749f82c8b809b7b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalendarFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2aae7e5e52ccd5c1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalendarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9def4d4952a30bd0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CalendarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #914f97809a49b5a6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CameraFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13738753ad815662 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CameraOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #116aa8844ab810e5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CameraTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0714355cab35bec9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e5ca13f80515727 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e7fb3ca9234a6a0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ba7a77c66a1ba138 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretDownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62760c1b53f3bbc4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretDownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #643b5ac11f5955d5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretLeftFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #747ce47152462e62 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41732d0794d54e4a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretRightFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6070af19c99a811 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4dbfd32d03cd6a8a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretUpFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ad4b01b070bc824 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CaretUpOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b97e7dbcb14987e1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarryOutFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fea2179d60674955 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarryOutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac647f49c9950b07 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CarryOutTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2d721a37a261c5a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #77f53eae1033c2ce — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #98229e4e6c82abb2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d91cc096af905e43 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f80ce3ca0c7bfd4f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c7053afb16fc249 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41b1f2b9fca8f439 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CheckSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e094db0daf4d74f7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ChromeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #206adb9d88849db1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ChromeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c91fbae6aced7021 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d5612c318cb76d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #29b70add16d3b171 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d65b0b96f7a9117 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e027223c9415454 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CiTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74981ac4169d4591 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClaudeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc0a85d48b21a70c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClearOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f9e56e17d8c6b6e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClockCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #defc862b22425d4e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClockCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74c98b3d6f76a356 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClockCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47b1ef8252c99f2d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18e7c266e3fcccc8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da72a4bca42a5a92 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a2bcaccf1da9b5a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a639fadc9163ddb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b5e503c9a5e068c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05c88471bf3caa98 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloseSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4b68f5afee0d6548 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudDownloadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28243c5a6ac45b84 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #441a37e78e7e6461 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f9b3801e8e0c52a8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudServerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d787e4b4d9602552 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudSyncOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ee2b7f11619779d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a18afb6a3489362c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CloudUploadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f98a8696e07d7ddb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ClusterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #241be4573df1c791 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f868f950d84c2ef6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21c6b91e87f85656 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeSandboxCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e46864482388d101 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeSandboxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fbdd41c5cffabdd0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeSandboxSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40e9ef73e807a78e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fdb37c07773a568 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #808bdcd20da53ec6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #461c44d30c50e9e2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3b68dd2b93210f39 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CodepenSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #08fb6a3f5169744b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CoffeeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb6c23a9c018778c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ColumnHeightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6398bcedd43b950c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ColumnWidthOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #823f72b3bafc760e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CommentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df9a78f2d025a043 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompassFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4551831def62261d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompassOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #304bf3cc604e45ba — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompassTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ada8bfe799bd3a00 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CompressOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75b9438a786bd098 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ConsoleSqlOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #325fe0129a2f047d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContactsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e5a95309f405c4e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContactsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #703ac5bc301d7ad4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContactsTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8a99d4b1d8c0785 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContainerFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ba9a22a7b24a8ae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContainerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd9bd08ebccbde46 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ContainerTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62501406be5017be — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ControlFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6453dcfd587e0d9d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ControlOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88ea5ae50506017f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ControlTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2da27d490001689 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5943fb63cc0269f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63bb875ea589b5b4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d368d18115c104a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81d82519fca05462 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #315e905e8f9f508c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad1dd0d8c79f0529 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a8d30f51679a2ac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CopyrightTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #254cd4971c59b007 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CreditCardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8206739f012b6b8d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CreditCardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a480d0adea853284 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CreditCardTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe8e3fbe261672a0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CrownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83aa1bd744e1b898 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CrownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58ae98d989025d4e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CrownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d505b5c9204c9b8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CustomerServiceFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f713b199611287a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CustomerServiceOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #efc0693729ae798d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/CustomerServiceTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c78d3610551d176 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89648071f42574c3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashboardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37000358b41e358b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashboardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88b5b77f4f67baec — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DashboardTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #32a4b9a40805c2e6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DatabaseFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c88b0915be9396fb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DatabaseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3e66f74f3b2a331 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DatabaseTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #071f5ca152a00e8e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeepSeekFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #310207c38ad2b0a5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteColumnOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f57860c1193fb7f7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ce89354bdb447f4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #34f65a44f83afc42 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteRowOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb470150368f331f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeleteTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6cd712ee94eff045 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeliveredProcedureOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c394d9742029de1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DeploymentUnitOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #76e5e3fb54e95118 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DesktopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94bd18149ae3ff40 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiffFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #933701921a36dc9f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiffOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f818873a24d36687 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiffTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d7bc4be4fced92e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingdingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #028c43c72f3512fa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingtalkCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14f9022f993b9177 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingtalkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #49eab58517df7c82 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DingtalkSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4ef92c2c005c508 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DisconnectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6dcc340d6974c95d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiscordFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1fb27ea78865bb7b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DiscordOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0021b9f32af0ca9a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DislikeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a422f4eed098014 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DislikeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4807332c2146f7c7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DislikeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d89c31de8f88327 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DockerOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5283bba3e0f27b5d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9b8a2800bcdd7ba0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7453ae0eb1677c72 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ff3f64e76e9da1f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ee8e5144cabf326c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DollarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4448955dca1bef35 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DotChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1792b5c271109f1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DotNetOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40c39393787a4291 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DoubleLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6fa96713793216e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DoubleRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1c7d096ac3a3ced — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #768aad9ca517c175 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #197aa4f1f7d9bc14 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #597b9b3af2e9542c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bb667ff3a71ff87 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7ce338c7eb8619de — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fed11ed1ad60beb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a69a4d6e43548a5d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DownloadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #553038abf40452cb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DragOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46772d1be7b18543 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9e148a2fc8b4cfae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c2597f1517ad811 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb232e0ee9b86972 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DribbbleSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #27ffc53ff8913b57 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DropboxCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d5479f68270768f6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DropboxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcaf2c38c143f302 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/DropboxSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1472f3856d212146 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EditFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de5a64a5d81a02dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EditOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #780d01d1cd0ee9b2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EditTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69a9ff303de43c42 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ElevenLabsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #486804bb64bb5096 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EllipsisOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72300276bc95fa51 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2452df147220fd0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnvironmentFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #577006b62b671ff3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnvironmentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d21889bf8f8a32e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EnvironmentTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb71a763a49f944f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2edeb2461b797fdf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9966313918224a8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d0136a3346ca1a2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9eab1b3ad11bf66 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EuroTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c446cf1f017a2226 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExceptionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c12f73f208137348 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e305c2145baef1d3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd0c2fbe754488d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72cc150afa8a9098 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExclamationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9adbc4b5227e007e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExpandAltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d92b952ad6aa1306 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExpandOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0534a87b50efbde3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExperimentFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1198ed7d839fb0a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExperimentOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bbf0da1f77a467c4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExperimentTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #287f10f49e56ceab — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ExportOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3566280643a9e4f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ed332f86eb1042c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeInvisibleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94129896142a8558 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeInvisibleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c80eb41c58c74d1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeInvisibleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f1a4423651004c6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9953353e10ca6446 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/EyeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d9bbddfaf19958b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FacebookFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #be2036ac445ab288 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FacebookOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #567926884c718704 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FallOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9036fbc8d1bb4e6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastBackwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0ae1a400719e7a0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastBackwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df6c3d19d7ea2d91 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastForwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e4ddcfdf1c78289 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FastForwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #080476b396adcf69 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldBinaryOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a1e22df00cdf68c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldNumberOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8a72a0ffbdc2dda — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldStringOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e09c873560227b3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FieldTimeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #112f92e83490423a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileAddFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #82eb020bee9757da — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abf60247476f36a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileAddTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90063e47c51a1535 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileDoneOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1ed4325f810cf01b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExcelFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9152bde44dcb5909 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExcelOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #847c744e9a9899e8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExcelTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99c8ab5ebdcd6157 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExclamationFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c6f6568052cdaae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExclamationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c68faad819eb30fd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileExclamationTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b55546d6b7cec0bf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55dcfe9726799612 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileGifOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #208a14cd71d89889 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileImageFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7a241078fff53b0b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileImageOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3809419c4b91aba — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileImageTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7bf085a268e881cc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileJpgOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63ebf60da40d70d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileMarkdownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9fdbc996323070d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileMarkdownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ab6e7f5c1a85781 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileMarkdownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3b000d8cb5dc4c3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c29dc872f7d89de — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePdfFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0164f943aceb18b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePdfOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #468aacc2d9a1a23d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePdfTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d74737737edf271 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePptFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e46858dddec81ac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePptOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #33e824121fb0a896 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilePptTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #036cd62eee0fccf3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileProtectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d45618a29ad2b2b5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileSearchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a88ccccdc13d41ce — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileSyncOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6d2a74c1873beaa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTextFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9d9d5ae9bd163a91 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTextOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7d76229d9a86714a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTextTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdceb84ec6e9a429 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3df254e3e4538281 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileUnknownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55d17225f6a4ffd0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileUnknownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2c2af355edee59f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileUnknownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0eddd2d4b95a5847 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileWordFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #da8ee6c180e3e5d7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileWordOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #403bd68435501372 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileWordTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8e917c332177cac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileZipFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0cc9d08cd9ed1d7a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileZipOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #790c6b1c6d4f9852 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FileZipTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31554a1a5c2c57a1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilterFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #55aca3e4ab021067 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5fece8243a12f4c2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FilterTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6a5f80c7867616bd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FireFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ad50acbe9f1d7a37 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FireOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #40c58518e3559c01 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FireTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5928803eff5c97c3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FlagFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cbb1366c5730e523 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FlagOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #739eeff8fd6ba66b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FlagTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5441505e629b5c39 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderAddFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2cb5d4cee328e61a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ec3630809e61375 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderAddTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #246511726d849851 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c0115fdd5400d643 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOpenFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0eb1ae7814360eb7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOpenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8ec59d0e40f4f3e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOpenTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3fa02a5e39924381 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81d363ced6a32bcb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af1264f6398ff79b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FolderViewOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e1f83296e655752f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FontColorsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #546ff269ff98e1ea — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FontSizeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3a334c71ba5eb16a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ForkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb50ec744acad881 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FormOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0f97aae9bf17071 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FormatPainterFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f368d5125c8f982 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FormatPainterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d2c16fd8721f7b5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ForwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d723e9e9d78f1ab5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ForwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2a8b71e72e449e3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FrownFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0b97a63ab2b84236 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FrownOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69f00dae49fd6cc3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FrownTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #154b8d046ec3f339 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FullscreenExitOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d6e211d3f816aba — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FullscreenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6caa429b56078915 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunctionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #89fc67614aa7986a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6ac5b39a1536256 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #150988809bfc2c4b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundProjectionScreenOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f84c8bbb39aa4e88 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b2c4cd343837df1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FundViewOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #744092d7c3901488 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunnelPlotFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6d0bd70658c3b38b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunnelPlotOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #357f00dac48723fb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/FunnelPlotTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1d7ec0f6054a7e92 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GatewayOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5fa350ceb38f0d8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GeminiFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #480e6d0d1a18d853 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GifOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ce0348252c6b68c4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GiftFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0fb6cdded3077c55 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GiftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05d12770d0af968a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GiftTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48fdc4fd4aca9e78 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GithubFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93345b574fdc03b5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GithubOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d7e229ecc060e68a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GitlabFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b65223ac1feafc75 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GitlabOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #412fbe9068f8d895 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GlobalOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a98e0fcc84e564e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2e6a8715fbf43096 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed56564839b1a26d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abcf7fdf653e93a6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoldenFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3ca3cec9f8b31614 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoogleCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #694d5978d742e212 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoogleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4ad241263788e506 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GooglePlusCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b74c39678563599 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GooglePlusOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb0f4fe557d9745a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GooglePlusSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #741da3db7a5868f4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GoogleSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a32470b8f8be652 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/GroupOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #498e6709f82a4d33 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HarmonyOSOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c8fefb8c3b039c7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HddFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #523645c6c993421c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f65e376c3be75c76 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HddTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46bd036e9d525040 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeartFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f1ea53eef106403 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63063a0ccd144111 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeartTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f938b5bf9a1f77a5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HeatMapOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef2e1f9b7a45d285 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HighlightFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcd2b64ab0a66807 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HighlightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f99eb528305b59c4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HighlightTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e1dab5d6ea6de7e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HistoryOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6601abf8952f20b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HolderOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91fb06398f5aa321 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HomeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d913c953e4e2c691 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HomeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #221e8d20a39e77a4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HomeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36c951c6f9c28780 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HourglassFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7f2e4b0941bbcc45 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HourglassOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c16a4a978ee6c00c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HourglassTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a935ab2373c0c2b1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Html5Filled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92956aaed1a0c74f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Html5Outlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c4e073062bba6e25 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Html5TwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bde4587fba0063f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/HuggingFaceFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #90167808ab7f437a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IdcardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f63c25e354b2dac3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IdcardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb74a7f2be8725d8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IdcardTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b1251fa939ba132c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IeCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #de2e5ae5f6359669 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91c511b83d85769e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IeSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #976eab19154d8cc0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ImportOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0693a578d1c757b3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InboxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9e7ca4fda43b14a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #646e2220f5561009 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af1817cd2c43c2cb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ff6dd521874ee1a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InfoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #247f0e9e597f3e07 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowAboveOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01d81edfdb4753fb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowBelowOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6058fadfb083206f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf3cd0bb40f7c400 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsertRowRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c03e2d7ffaa0f68 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InstagramFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45baa6d86154440b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InstagramOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7fcc4b8fafdc57b3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsuranceFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44a99ab749b46b47 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsuranceOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #764eb9f08568376f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InsuranceTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5275b12807e821ba — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InteractionFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c72f0ec4e182bda — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InteractionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3b6b729438c9e5d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/InteractionTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #84ae6f93fad48c33 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/IssuesCloseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6775a3c3ec58fa0a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ItalicOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42a8a7353926b360 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/JavaOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c60220a04f1042d3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/JavaScriptOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3747428987eaa069 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/KeyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0bbbb557c47e1872 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/KubernetesOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1709c56934e5f72d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LaptopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d0e4335f2996ddf0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LayoutFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b792f27152bb0270 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LayoutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0a52095d30244c7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LayoutTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6befd909772628b7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b3ad1d9cf2443a7a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c1c214cfc757705 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85e7c5fe4f503439 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #28d79bf0fc8f679a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8a648782d2a69da0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1bff763271cba21b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LeftSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11bfc3c988f42f19 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LikeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #46a5f2d0263f73a2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LikeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c2b2a54a9a38038a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LikeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81ac3192cbb4069a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LineChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97fd387cf3758168 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LineHeightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47b42c1e2b1aef47 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LineOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea81383f7cc42617 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e0e16a2ce38a6bb8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinkedinFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4f78cc63f489aca8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinkedinOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92f01f3008a61240 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LinuxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fcef9fcbc269dbd0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/Loading3QuartersOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #783647fbb65d8bb0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LoadingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3dd9788c345d23be — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LockFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93bebc5c2c5a4b22 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7320f6a916c36cd6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LockTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91d1ea251bb8d501 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LoginOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68b1912b5c3acd78 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/LogoutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa98e12ce2e31747 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MacCommandFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #006307402ea026e3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MacCommandOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c237906969dd82c6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MailFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94dbdb78469cdc86 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MailOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7efbdb10a90b44d3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MailTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e85ebcd2e1949305 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ManOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #432a91b5dcc72c58 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MastodonFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #405f6625c8c5730c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MedicineBoxFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ac8c321d25e0ede5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MedicineBoxOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #374590304a6fbe6c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MedicineBoxTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11865eaa1a705bec — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a5efcd3d425c3e56 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a04dd8b1e3e2b987 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a05d992fa64fb51 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MediumWorkmarkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ccf29d390e87638 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MehFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6dcaae0ff987a5a8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MehOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc3d7e4cca1a5b92 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MehTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4aa9b97f476c170e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MenuFoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #151772f0ba308eae — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MenuOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1a669bb47737c707 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MenuUnfoldOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4335e77811f309a8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MergeCellsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1213a542f6d875f2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MergeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52dac1cfd9c4135c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MergeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #54ef46a9d1257aad — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MessageFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #53c782e4373bb12c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MessageOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30f73c3113664783 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MessageTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #945faef2c9f87d8d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d11aaaec45478fb8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0d2dd9e788aebb3f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5d09e6b22e7cb05 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a28ed74a11361235 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4dc87d2edb7a8559 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3e80ff3130edd57f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MinusSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb296e99f891f2fd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MistralFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #09c9bf66d2188f79 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MobileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9873141cc722c321 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MobileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #317edc522286f876 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MobileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5759fe2cdd37f687 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoneyCollectFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #625cff99aa4914f0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoneyCollectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #266f97e73acdc5eb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoneyCollectTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9064bc0425d61805 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MonitorOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #56c72eaf519f96a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoonFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8f95e785d39c93a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoonOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #926cd0b0edf872c2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MoreOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b7c2e358808256e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MutedFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6249145f5c020e7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/MutedOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa04ca84b26b7166 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NodeCollapseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ddf34ecb8fea7ec — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NodeExpandOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cebb1495bafbb058 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NodeIndexOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1d29d29eda61b7b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NotificationFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6fb8bca4bcb0335 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NotificationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ecda587c6c37cb1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NotificationTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eae9f95b856c7ef6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/NumberOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99a1e498c68ccb3a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OllamaFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ae0fb847c715f1f8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OneToOneOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f89ae245f96730b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OpenAIFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3101be237b742808 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OpenAIOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd8cf14a5ad881d0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/OrderedListOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #133e3213aabb8053 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PaperClipOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #411a5128f89656db — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PartitionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a087b90ed59a71b6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c361a8346ba6a75 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #050b54a6c29449c5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2b2f080d1621e4ac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PauseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #66ed275921c0e895 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PayCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5bca56e49402f565 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PayCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ca942207fcc7e9eb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PercentageOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3db05985ec9d925 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PerplexityFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35433103a28c5c79 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PhoneFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e7a7927fe027411c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PhoneOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #50c4eac2954457c3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PhoneTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4a836237ebc642d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PicCenterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cee7542bb856e978 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PicLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #434fe55c3211bb6e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PicRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #af491e02d92e7c6e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PictureFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ea89ed69eb3d2fca — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PictureOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #694c3d515fe56c1c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PictureTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b06dba1378434059 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PieChartFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb737888e83aa6d1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PieChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fde4d731330e6d37 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PieChartTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fd48522f97073ac3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PinterestFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df10879a05cc90f0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PinterestOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #395448b26ba8bbe3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlayCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #58a73820fe5ed6da — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlayCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bebe8be0a4455598 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlayCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5cd5d867c45e9331 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlaySquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #20b13ade77df9293 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlaySquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8b75736a1e1870bf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlaySquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #42528cf78cee456e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #97d6d994f78ff6ce — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #954cb294c7665be4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #48aa8c4332e5abe9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15bbac899ab14f18 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0f2ed187533dcba1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7841ab2b2c5d0193 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PlusSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b94dd77bf6e2d673 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b5e99e6b665a9ad4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4bfebc7fd5a91c29 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb08c16eb36dfb3e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoundOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c95348ef87e16c3d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PoweroffOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d27a04c683098dd2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PrinterFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79f98b1ad5bd1234 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PrinterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88c0eb60f1592be6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PrinterTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f2c4f53b83336526 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProductFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c63bb2c2d4be8e91 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProductOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6610d043d82f64bb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProfileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cd1fecadb5df9e3f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProfileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #03bcd73308238013 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProfileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6fc8ad8709d0528 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProjectFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e348fe57a2b3a933 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProjectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f7a17df8b2e9a008 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ProjectTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13db5d1454ca52d7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PropertySafetyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #edac717db9178778 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PropertySafetyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0254a9f324d545ff — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PropertySafetyTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b98c73a18a388a00 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PullRequestOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #309b8589890b35da — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PushpinFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1e9e086cd0b7515a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PushpinOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d4494eaa5bc5b90 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PushpinTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4910d9dbac688180 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/PythonOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fc4e291dd1295ea3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QqCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e8f6faaea7363f67 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QqOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8da551297d20d40 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QqSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16cf9b17a7d31eac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QrcodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a4b4681bc8a55fa3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a91bbe9453fecd3d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #282806d82d48c7bf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e97ee83a24b0c78 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QuestionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #240a0b0a38288af2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/QwenFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c86a59fa430dd9b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadarChartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a33f4d9aebd5058 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusBottomleftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #11486bf91cebdca5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusBottomrightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61aa3e35ab884214 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusSettingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0e718b3bbb7e1d94 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusUpleftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #30e7b1d7b5dcbb11 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RadiusUprightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #957e3d06a0d1d874 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReadFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #046dc5cc9b4fe9a0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41e300a09ad6c563 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReconciliationFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f51e250a87b6fed2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReconciliationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38bd27fa94d7fb4b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReconciliationTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #75f8529ba9e60742 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedEnvelopeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0a1563bb03561d06 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedEnvelopeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a371811451f8520d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedEnvelopeTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abfc4d7ef62698dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedditCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #213ebbc766546edd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedditOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2d884399b9d80f9d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedditSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f5386a646b5a9cb7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RedoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #18f2293392481699 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReloadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3e2f3411ce672b4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ReplicateFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #130801587c75afb4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RestFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a339f7132e878b2f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RestOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef731e113d353e49 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RestTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8f47a4d2d1b83d0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RetweetOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6c2ddcd18553ae5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #054f16a636da7342 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #961c1e60dc0a1d23 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2fdc8788a85f3c16 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9bc9c927b4d4d9fd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d2873da10d1deb0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5406caa9067c791d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RightSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d15b10543b9c9ba2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RiseOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #df2830d4eb50d173 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RobotFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #526611c0dfe8f36c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RobotOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3cb283322cd37322 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RocketFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #94b7e44a433c54a1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RocketOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4235509d98a3605 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RocketTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #93d04f0b3fb49161 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RollbackOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #630c0e42c49bcfb7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RotateLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0ec52a7d706c4aaf — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RotateRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e792050e929fe72a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/RubyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8ef0f0975997f492 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyCertificateFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #91e7101771f241e4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyCertificateOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #aa0193f1d33749ef — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyCertificateTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2a623c72d858e31e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SafetyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c501e52589073941 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SaveFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78fdc62d501cf49e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SaveOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6f334cb13524311 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SaveTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6e679456dd8c493b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScanOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #720e43c2447f6273 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScheduleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f358a1a47c509b4e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScheduleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3da7c87064279367 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScheduleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d03af9edf4c04074 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ScissorOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #06d01de23070ef7f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SearchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a434880a3bb1a369 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SecurityScanFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #05556425deae017f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SecurityScanOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #790da72f383ed56a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SecurityScanTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c52da3a98ac97410 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SelectOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8f3cc102f360ccc6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SendOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a63449f55a02f552 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SettingFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8aad0debb85c1a3c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SettingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb09be8bf2537b27 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SettingTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eb53740fe7c3465e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShakeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d8721b8a6856f680 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShareAltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #31d4026094f0676d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShopFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1280906e451cc521 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6ce88bf1f7be86b7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShopTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d22d7c648c6f0a56 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingCartOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17ef611a1a4e61fa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a0b11320a2f0d2ac — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eae738611d55b945 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShoppingTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2147dc7e43321ea — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ShrinkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #85dd6310d35de871 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SignalFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f338d6fc61761b3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SignatureFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3d675f9700778435 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SignatureOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8ee67a0a0367612 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SisternodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0c4de10b34c69f11 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SketchCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2bca607d00d5b5e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SketchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf0f7434a3ca5de5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SketchSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14f50b7fcace0b4e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkinFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f891049d0ec0859a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkinOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #79b80421df7d9e76 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkinTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #95e31e191bf83eb8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkypeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #609bf4111be67896 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SkypeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ef02cd15f9a483c1 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57221eac137d1901 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4e093333f814bf8d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a09fa29532642318 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlackSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #36d4207592fc393d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlidersFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9dff254c1a9807e7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlidersOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fb1c0e6241e0bec2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SlidersTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cc5617b2f5da54cb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmallDashOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #73cea8f5d2395506 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmileFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c4b35ddeca526b3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmileOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #21aac291a00b5351 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SmileTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #72c7022e5b9e0983 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnapchatFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc31f6c3ba1fd44d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnippetsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d79519b15b356c2c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnippetsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a6707874edf90802 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SnippetsTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e5fc6978f38e54f4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SolutionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9a1fedc179973e85 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SortAscendingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63405d8f2f56e211 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SortDescendingOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b2c4cb6ff8bda748 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SoundFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9312070f4e06db64 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SoundOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #45446f2cfb09df09 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SoundTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cb33a500a34a467d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SplitCellsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed750ff196007d68 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SpotifyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e3d3a1313d5b5ae7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SpotifyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #92fad84a8196f85a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StarFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f68297aca54f4464 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StarOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ab42244df8a35d16 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StarTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7641631837ead2b8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepBackwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a8728bf0dbf6e2a5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepBackwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dc3ea6ec8e861833 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepForwardFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6daa15af245ec15c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StepForwardOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #035dface937b3362 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2ff644c74613671a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StopFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c22b3442a9544f46 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3eb5bbe23937f65 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StopTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4d85451d9bd6ef9e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/StrikethroughOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1c3bbcff66bca443 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SubnodeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99118f5f29dc0c20 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SunFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #62a4b5bdfd3c1eed — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SunOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c439d48a3f7fb1a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwapLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e10cb68c98d22e25 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwapOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9f8f472bda3ecd35 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwapRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3f794ce86a4a61c5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwitcherFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1f9fe8c09ac2f972 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwitcherOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8d3c77db549c6846 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SwitcherTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #614670435309334a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/SyncOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5ee830bad9dd6f6d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TableOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d1fd4e7f00c81740 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TabletFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71b49d21677d08c2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TabletOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b7d28839e46692dc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TabletTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #eec3ee2e1f3416e6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f607abbf7b5203ab — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #14da946b44cef8c4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #22cb7b11de592fa0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #299ba832c303c984 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d03272de76f7034f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TagsTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a9c27e800783375f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4032f9ece59b3f2f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f8c799fcf8f18ddd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #909f7c9107a7bf5f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TaobaoSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cf1e435c774f2e41 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TeamOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f405d24d51e0dfed — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TelegramFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f1b31249e22f70fe — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThreadsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7b6b455f65efaf87 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThunderboltFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bc8e9c200287d446 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThunderboltOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe0c7d1a4b34cd6d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ThunderboltTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a25ffee5a5882bcb — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TikTokFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3508c9131719535 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TikTokOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9079861193d5975a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToTopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #3c6a88535295c940 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToolFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #933c34f67d0cfec2 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToolOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d3f6d6fd171c0aa5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ToolTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #16dae766b7254a58 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #17f87ddd6eba0986 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #936076f75e5bf1e3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6f09817818c340f9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrademarkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44a3338a337115f7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TransactionOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #07ecf63f42fca798 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TranslationOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5c72b4c94eace91d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrophyFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #35d9460cd070d5fc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrophyOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #78487ee07e86d556 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TrophyTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4a4d88f4a1a8cec4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TruckFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9838ae7141223637 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TruckOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d060884dfba7e0f4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitchFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5483626091ce6fcc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a82700af20076142 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitterCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #15ac84aa4227886d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitterOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b8a8a38da02d0510 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/TwitterSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5634e9a02bcbd27e — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnderlineOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f6b1e2212ecdc85c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UndoOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #64ef8aa757e927fd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UngroupOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a3cbdd9e24e8e12f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnlockFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fa3c835d7cef649 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnlockOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ab90076e610d846 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnlockTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #db185dabcb851f27 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UnorderedListOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e87e49dd960f0905 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c6c34f49bbbb95b4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bcb58379c0457cf6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpCircleTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #23aa734dd4d32f01 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bb5b9043047901ef — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4037febeff13f89b — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e7dcd6d4ae78898 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UpSquareTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #cffedff84f5c5dca — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UploadOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a2487307e30d2eb5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsbFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8d018158e450528 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsbOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d9cfba448ca0ed9a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsbTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37cf95ed6ee01578 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fdce010ced218fd3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserDeleteOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c70cdd8accffaf86 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5e94ded6e7b2ef33 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UserSwitchOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83305f7fcf2e1bf5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsergroupAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #38cd9bfe0942d396 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/UsergroupDeleteOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a04dd6840eae947a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerifiedOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9c98ba2fbb90e624 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalAlignBottomOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #13d452d7bdf76a79 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalAlignMiddleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ed1625a9f77c3f8a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalAlignTopOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #69eb9b8199085b78 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalLeftOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #99caffcd60122604 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VerticalRightOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #abb5184d6eb7a0ef — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraAddOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6be1cd6fed48df5c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #a1726354004b2ef6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #317162c4303586d4 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/VideoCameraTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c15f76c7b646c10a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WalletFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c1e73a2aba8b577c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WalletOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #656033d70c7332a6 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WalletTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #52f75f851d03d2aa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WarningFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #24c794f40224fac8 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WarningOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #097960314c60953d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WarningTwoTone.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #0da85a4d186b7677 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5b9e3533f43ae99c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #61f802c280427f8f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatWorkFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #adcd2ef08c8eb356 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WechatWorkOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6bca73ac99235a3 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #47d692af5f886935 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboCircleOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b0c4755a03ae979f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9da950272b2409e0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #01a75ac927820eee — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WeiboSquareOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6b4d653f6d4163fd — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WhatsAppOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1cfda0a2463c39bc — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WifiOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afaaaa6fe3694692 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WindowsFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #37c02d653f7da17f — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WindowsOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #fe86f4176a9b38fa — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/WomanOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e27d3df045d81a71 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/XFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #acb7f88d19ebb589 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/XOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ded96386b1e26bd9 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YahooFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5aaacd63a3e08167 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YahooOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c93ae30cc6126c5 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YoutubeFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #647343870fef863d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YoutubeOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #ec87448f5b621f0a — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YuqueFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #533d96f92f88cfa0 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/YuqueOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4cddcfbdae4b3942 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZhihuCircleFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8c2c9c0c0fa96f3c — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZhihuOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #83464201cec17f70 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZhihuSquareFilled.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04ede5e78513e3b7 — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZoomInOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e90bbffa16e51b5d — Environment-variable access.
pkgs/npm/@[email protected]/lib/icons/ZoomOutOutlined.js:22 
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@anthropic-ai/sdk

npm dependency
expand_more 44 low-confidence finding(s)
low env_fs dependency Excluded from app score #2320777d482328e4 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:110 
        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d2a29f28027dc592 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:210 
        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #622a0a3dc43858fc — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.js:308 
        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c8e9b91db4c426d9 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:73 
        configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bf24ac1a443f1377 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:172 
        raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6fb1584a99203db6 — Filesystem access.
pkgs/npm/@[email protected]/core/credentials.mjs:268 
        return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c7f6467ecfa788c — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/credential-chain.js:203 
            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4eecfea4fe7cad3d — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/credential-chain.mjs:166 
            const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #44e1369515ad5c83 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/identity-token.js:51 
            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #88920a84e106d2d8 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/identity-token.mjs:14 
            content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e461433b8a872116 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/types.js:195 
            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #039a7ff679befc23 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/types.mjs:154 
            await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #04c474717fcc0f3f — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.js:56 
            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d72cd73e766f1467 — Filesystem access.
pkgs/npm/@[email protected]/lib/credentials/user-oauth.mjs:20 
            raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5a131d6ff0f036b5 — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:154 
    configRaw = await fs.promises.readFile(configPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #81b9494b50f020dd — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:258 
    raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7e83eefeccc0bf5b — Filesystem access.
pkgs/npm/@[email protected]/src/core/credentials.ts:372 
    return (await fs.promises.readFile(filePath, 'utf-8')).trim() || 'default';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #deddae406d46e088 — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/credential-chain.ts:250 
      const raw = await fs.promises.readFile(credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #71fd854b7cfdc9b2 — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/identity-token.ts:17 
      content = await fs.promises.readFile(path, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c24fdde18fa8c8b — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/types.ts:222 
      await fh.writeFile(JSON.stringify(data, null, 2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #d6e44b90ac1c45e9 — Filesystem access.
pkgs/npm/@[email protected]/src/lib/credentials/user-oauth.ts:45 
      raw = await fs.promises.readFile(config.credentialsPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b070db3bed0d5efd — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/fs-util.ts:112 
    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #f27daaf6dcde84bc — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:457 
        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #7f7b30ea301536bd — Filesystem access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:533 
        data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e971847d6cae311e — Environment-variable access.
pkgs/npm/@[email protected]/src/tools/agent-toolset/node.ts:806 
  const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2d71bc98d0cb7b0e — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:4 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b13f63ed3a84e9ac — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:52 
    await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #e5eb6abe1f7020a4 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:101 
    return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #44a9c6e7b06ccf81 — Filesystem access.
pkgs/npm/@[email protected]/src/tools/memory/node.ts:256 
      await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #879f7a5827b97510 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.js:115 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9de6cac25bd3b121 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/fs-util.mjs:107 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #a90e613ea8ece317 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:390 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #021785f1a47750b6 — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:469 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b9251aac568b8af1 — Environment-variable access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.js:755 
    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #2fc339f8de670dfe — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:375 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #b62ce18431af5c4e — Filesystem access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:454 
                data = await fs.readFile(abs, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #0f2d2a1046585df9 — Environment-variable access.
pkgs/npm/@[email protected]/tools/agent-toolset/node.mjs:740 
    const dirs = (process.env['PATH'] ?? '').split(path.delimiter);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #9bdcd9f2dac8baf1 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:43 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #61876ce8d70b0b3a — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:91 
        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #848ef57dcb430daa — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.js:213 
            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #35abd2ccac90431a — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:2 
import * as fs from 'fs/promises';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #cc9d3c9d61dbeb8b — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:38 
        await handle.writeFile(content, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #912a015866b1bbf9 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:86 
        return await fs.readFile(fullPath, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs tooling Excluded from app score unknown #ed8179be8880f1d6 — Filesystem access.
pkgs/npm/@[email protected]/tools/memory/node.mjs:208 
            await handle.writeFile(command.file_text, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@azure-rest/ai-inference

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #25f6394533dfc569 — Environment-variable access.
pkgs/npm/@[email protected]__sourcemap/src/tracingHelper.ts:237 
  const value = process.env[key] ?? process.env[key.toLowerCase()];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@cfworker/json-schema

npm dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #8669aa7e77feeeec — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/dereference.ts:75 
    : new URL('https://github.com/cfworker');

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

@composio/core

npm dependency
expand_more 15 low-confidence finding(s)
low env_fs dependency Excluded from app score #35d5f70c8fee0303 — Filesystem access.
pkgs/npm/@[email protected]/src/models/RemoteFile.ts:169 
    platform.writeFileSync(savePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #74f74eedc4415725 — Filesystem access.
pkgs/npm/@[email protected]/src/models/ToolRouterSessionFileMount.ts:135 
      const content = platform.readFileSync(input);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #63e765121bfddd56 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:47 
      const buf = fs.readFileSync(filePath, { encoding: null });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #6c78669340cb8224 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:52 
    const str = fs.readFileSync(filePath, { encoding });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #1caea74818891420 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:62 
      fs.writeFileSync(filePath, content, { encoding });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #bca3bde282dd9126 — Filesystem access.
pkgs/npm/@[email protected]/src/platform/node.ts:64 
      fs.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #2c66031a04d80657 — Environment-variable access.
pkgs/npm/@[email protected]/src/services/pusher/Pusher.ts:28 
    this.apiKey = client.apiKey ?? process.env.COMPOSIO_API_KEY ?? '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #8c8d4f9cff5e81aa — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/services/telemetry/TelemetryService.ts:14 
      const result = await fetch(`${TELEMETRY_URL}/metrics/invocations`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        body: JSON.stringify(payload),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress dependency Excluded from app score #07aefbf0616ae513 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/services/telemetry/TelemetryService.ts:35 
      const result = await fetch(`${TELEMETRY_URL}/errors`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
        },
        body: JSON.stringify(payload),
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs dependency Excluded from app score #3e07fca98df5977e — Environment-variable access.
pkgs/npm/@[email protected]/src/utils/env.ts:6 
    return process.env[name] || defaultValue;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f33e9e8c8f373d7a — Filesystem access.
pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:135 
    const content = platform.readFileSync(filePath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b6c3c56572dac945 — Filesystem access.
pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:448 
      platform.writeFileSync(filePath, content);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #7c88c4f817d7ee01 — Filesystem access.
pkgs/npm/@[email protected]/src/utils/fileUtils.node.ts:450 
      platform.writeFileSync(filePath, content, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #41d92c5abd23b3c4 — Filesystem access.
pkgs/npm/@[email protected]/src/utils/sdk.ts:34 
    const data = platform.readFileSync(dataPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress dependency Excluded from app score #e59028fef6ff9a16 — Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]/src/utils/version.ts:46 
    const response = await fetch(`https://registry.npmjs.org/${packageName}/latest`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

Skipped dependencies

Production

  • @atlaskit/pragmatic-drag-and-drop prod — dist-only: no readable source
  • @better-auth/expo prod — dist-only: no readable source
  • @better-auth/passkey prod — dist-only: no readable source
  • @chat-adapter/discord prod — dist-only: no readable source
  • @chat-adapter/slack prod — dist-only: no readable source
  • @chat-adapter/state-ioredis prod — dist-only: no readable source
  • @chat-adapter/telegram prod — dist-only: no readable source
  • @emotion/react prod — scan budget exceeded
  • @fal-ai/client prod — scan budget exceeded
  • @floating-ui/react prod — scan budget exceeded
  • @formkit/auto-animate prod — scan budget exceeded
  • @google/genai prod — scan budget exceeded
  • @henrygd/queue prod — scan budget exceeded
  • @huggingface/inference prod — scan budget exceeded
  • @icons-pack/react-simple-icons prod — scan budget exceeded
  • @khmyznikov/pwa-install prod — scan budget exceeded
  • @larksuiteoapi/node-sdk prod — scan budget exceeded
  • @lexical/utils prod — scan budget exceeded
  • @lobechat/agent-gateway-client prod — scan budget exceeded
  • @lobechat/agent-mock prod — scan budget exceeded
  • @lobechat/agent-runtime prod — scan budget exceeded
  • @lobechat/agent-signal prod — scan budget exceeded
  • @lobechat/agent-templates prod — scan budget exceeded
  • @lobechat/artifact-template prod — scan budget exceeded
  • @lobechat/builtin-agents prod — scan budget exceeded
  • @lobechat/builtin-skills prod — scan budget exceeded
  • @lobechat/builtin-tool-activator prod — scan budget exceeded
  • @lobechat/builtin-tool-agent-builder prod — scan budget exceeded
  • @lobechat/builtin-tool-agent-documents prod — scan budget exceeded
  • @lobechat/builtin-tool-agent-management prod — scan budget exceeded
  • @lobechat/builtin-tool-agent-signal prod — scan budget exceeded
  • @lobechat/builtin-tool-brief prod — scan budget exceeded
  • @lobechat/builtin-tool-browser prod — scan budget exceeded
  • @lobechat/builtin-tool-calculator prod — scan budget exceeded
  • @lobechat/builtin-tool-claude-code prod — scan budget exceeded
  • @lobechat/builtin-tool-cloud-sandbox prod — scan budget exceeded
  • @lobechat/builtin-tool-creds prod — scan budget exceeded
  • @lobechat/builtin-tool-group-agent-builder prod — scan budget exceeded
  • @lobechat/builtin-tool-group-management prod — scan budget exceeded
  • @lobechat/builtin-tool-knowledge-base prod — scan budget exceeded
  • @lobechat/builtin-tool-lobe-agent prod — scan budget exceeded
  • @lobechat/builtin-tool-lobe-delivery-checker prod — scan budget exceeded
  • @lobechat/builtin-tool-local-system prod — scan budget exceeded
  • @lobechat/builtin-tool-memory prod — scan budget exceeded
  • @lobechat/builtin-tool-message prod — scan budget exceeded
  • @lobechat/builtin-tool-notebook prod — scan budget exceeded
  • @lobechat/builtin-tool-page-agent prod — scan budget exceeded
  • @lobechat/builtin-tool-remote-device prod — scan budget exceeded
  • @lobechat/builtin-tool-self-iteration prod — scan budget exceeded
  • @lobechat/builtin-tool-skill-maintainer prod — scan budget exceeded
  • @lobechat/builtin-tool-skill-store prod — scan budget exceeded
  • @lobechat/builtin-tool-skills prod — scan budget exceeded
  • @lobechat/builtin-tool-task prod — scan budget exceeded
  • @lobechat/builtin-tool-topic-reference prod — scan budget exceeded
  • @lobechat/builtin-tool-user-interaction prod — scan budget exceeded
  • @lobechat/builtin-tool-verify prod — scan budget exceeded
  • @lobechat/builtin-tool-web-browsing prod — scan budget exceeded
  • @lobechat/builtin-tool-web-onboarding prod — scan budget exceeded
  • @lobechat/builtin-tools prod — scan budget exceeded
  • @lobechat/business-config prod — scan budget exceeded
  • @lobechat/business-const prod — scan budget exceeded
  • @lobechat/business-model-bank prod — scan budget exceeded
  • @lobechat/business-model-runtime prod — scan budget exceeded
  • @lobechat/chat-adapter-feishu prod — scan budget exceeded
  • @lobechat/chat-adapter-imessage prod — scan budget exceeded
  • @lobechat/chat-adapter-line prod — scan budget exceeded
  • @lobechat/chat-adapter-qq prod — scan budget exceeded
  • @lobechat/chat-adapter-wechat prod — scan budget exceeded
  • @lobechat/config prod — scan budget exceeded
  • @lobechat/const prod — scan budget exceeded
  • @lobechat/context-engine prod — scan budget exceeded
  • @lobechat/conversation-flow prod — scan budget exceeded
  • @lobechat/database prod — scan budget exceeded
  • @lobechat/desktop-bridge prod — scan budget exceeded
  • @lobechat/device-gateway-client prod — scan budget exceeded
  • @lobechat/edge-config prod — scan budget exceeded
  • @lobechat/editor-runtime prod — scan budget exceeded
  • @lobechat/electron-client-ipc prod — scan budget exceeded
  • @lobechat/electron-server-ipc prod — scan budget exceeded
  • @lobechat/eval-dataset-parser prod — scan budget exceeded
  • @lobechat/eval-rubric prod — scan budget exceeded
  • @lobechat/fetch-sse prod — scan budget exceeded
  • @lobechat/file-loaders prod — scan budget exceeded
  • @lobechat/heterogeneous-agents prod — scan budget exceeded
  • @lobechat/llm-generation-tracing prod — scan budget exceeded
  • @lobechat/local-file-shell prod — scan budget exceeded
  • @lobechat/markdown-patch prod — scan budget exceeded
  • @lobechat/memory-user-memory prod — scan budget exceeded
  • @lobechat/model-runtime prod — scan budget exceeded
  • @lobechat/observability-otel prod — scan budget exceeded
  • @lobechat/openapi prod — scan budget exceeded
  • @lobechat/prompts prod — scan budget exceeded
  • @lobechat/python-interpreter prod — scan budget exceeded
  • @lobechat/shared-tool-ui prod — scan budget exceeded
  • @lobechat/ssrf-safe-fetch prod — scan budget exceeded
  • @lobechat/tool-runtime prod — scan budget exceeded
  • @lobechat/utils prod — scan budget exceeded
  • @lobechat/web-crawler prod — scan budget exceeded
  • @lobehub/analytics prod — scan budget exceeded
  • @lobehub/charts prod — scan budget exceeded
  • @lobehub/desktop-ipc-typings prod — scan budget exceeded
  • @lobehub/editor prod — scan budget exceeded
  • @lobehub/icons prod — scan budget exceeded
  • @lobehub/market-sdk prod — scan budget exceeded
  • @lobehub/tts prod — scan budget exceeded
  • @lobehub/ui prod — scan budget exceeded
  • @modelcontextprotocol/sdk prod — scan budget exceeded
  • @napi-rs/canvas prod — scan budget exceeded
  • @neondatabase/serverless prod — scan budget exceeded
  • @next/third-parties prod — scan budget exceeded
  • @opentelemetry/auto-instrumentations-node prod — scan budget exceeded
  • @opentelemetry/exporter-jaeger prod — scan budget exceeded
  • @opentelemetry/resources prod — scan budget exceeded
  • @opentelemetry/sdk-metrics prod — scan budget exceeded
  • @opentelemetry/winston-transport prod — scan budget exceeded
  • @pierre/trees prod — scan budget exceeded
  • @react-pdf/renderer prod — scan budget exceeded
  • @react-three/drei prod — scan budget exceeded
  • @react-three/fiber prod — scan budget exceeded
  • @saintno/comfyui-sdk prod — scan budget exceeded
  • @t3-oss/env-core prod — scan budget exceeded
  • @t3-oss/env-nextjs prod — scan budget exceeded
  • @tanstack/react-query prod — scan budget exceeded
  • @trpc/client prod — scan budget exceeded
  • @trpc/next prod — scan budget exceeded
  • @trpc/react-query prod — scan budget exceeded
  • @trpc/server prod — scan budget exceeded
  • @upstash/qstash prod — scan budget exceeded
  • @upstash/workflow prod — scan budget exceeded
  • @vercel/analytics prod — scan budget exceeded
  • @vercel/edge-config prod — scan budget exceeded
  • @vercel/functions prod — scan budget exceeded
  • @vercel/speed-insights prod — scan budget exceeded
  • @virtuoso.dev/masonry prod — scan budget exceeded
  • @xterm/addon-fit prod — scan budget exceeded
  • @xterm/xterm prod — scan budget exceeded
  • @zumer/snapdom prod — scan budget exceeded
  • ahooks prod — scan budget exceeded
  • antd prod — scan budget exceeded
  • antd-style prod — scan budget exceeded
  • async-retry prod — scan budget exceeded
  • bcryptjs prod — scan budget exceeded
  • better-auth prod — scan budget exceeded
  • brotli-wasm prod — scan budget exceeded
  • buffer.js prod — scan budget exceeded
  • chat prod — scan budget exceeded
  • chroma-js prod — scan budget exceeded
  • class-variance-authority prod — scan budget exceeded
  • cmdk prod — scan budget exceeded
  • cookie prod — scan budget exceeded
  • countries-and-timezones prod — scan budget exceeded
  • d3-dsv prod — scan budget exceeded
  • dayjs prod — scan budget exceeded
  • debug prod — scan budget exceeded
  • dexie prod — scan budget exceeded
  • diff prod — scan budget exceeded
  • discord-api-types prod — scan budget exceeded
  • drizzle-orm prod — scan budget exceeded
  • drizzle-zod prod — scan budget exceeded
  • epub2 prod — scan budget exceeded
  • es-toolkit prod — scan budget exceeded
  • expo-server-sdk prod — scan budget exceeded
  • fast-deep-equal prod — scan budget exceeded
  • fflate prod — scan budget exceeded
  • ffmpeg-static prod — scan budget exceeded
  • file-type prod — scan budget exceeded
  • fuse.js prod — scan budget exceeded
  • gray-matter prod — scan budget exceeded
  • hono prod — scan budget exceeded
  • html-to-text prod — scan budget exceeded
  • i18next prod — scan budget exceeded
  • i18next-browser-languagedetector prod — scan budget exceeded
  • i18next-resources-to-backend prod — scan budget exceeded
  • immer prod — scan budget exceeded
  • ioredis prod — scan budget exceeded
  • jose prod — scan budget exceeded
  • js-sha256 prod — scan budget exceeded
  • jsondiffpatch prod — scan budget exceeded
  • jsonl-parse-stringify prod — scan budget exceeded
  • langfuse prod — scan budget exceeded
  • langfuse-core prod — scan budget exceeded
  • lexical prod — scan budget exceeded