Close Open Privacy Scan
App Privacy Score
97
/100
Low privacy risk
Low risk · 296 finding(s)
Based on: 1 first-party package(s) · 2/2 deps analyzed
Dependency score: 52 (Medium risk)
bar_chart Score Breakdown
env_fs
−3
list Scan Summary
1 high
0 medium
295 low
First-party packages:
1
Dependency packages:
2
Ecosystem:
npm
swap_horiz Application data flows
No application data flows were found. See dependency data flows below.
hub Dependency data flows (1)
high
playwright
dependency
User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
- 1source
pkgs/npm/[email protected]/lib/transform/esmLoader.js:8020 - 2sink
pkgs/npm/[email protected]/lib/transform/esmLoader.js:8023
</> First-Party Code
first-party (npm)
npm first-partyexpand_more 14 low-confidence finding(s)
low env_fs — Environment-variable access. 4 locations
low env_fs — Filesystem access. 10 locations
</> Dependencies
playwright
npm dependency
high
pii_flow
dependency
Excluded from app score
#fb0691c72e3428a0
—
User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
pkgs/npm/[email protected]/lib/transform/esmLoader.js:8023
· flow /tmp/closeopen-dukr54fc/pkgs/npm/[email protected]/lib/transform/esmLoader.js:8020 → /tmp/closeopen-dukr54fc/pkgs/npm/[email protected]/lib/transform/esmLoader.js:8023
transport?.post("pushToCompilationCache", { cache: transformed.serializedCache });User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.
Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.