Close Open Privacy Scan
App Privacy Score
Low risk · 1171 finding(s)
Based on: 1 first-party package(s) · 16/17 deps analyzed
Dependency score: 82 (Low risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
::ffff:192.168.0.1a9.comaclanthology.orgaggregate.ee.engr.uky.eduapi.nuget.orgapi.semanticscholar.orgarxiv.orgauai.orgblog.ganssle.iobrotlipy.readthedocs.iobugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcdn.mathjax.orgcens.ioc.eecrates.iodata-apis.orgdata.iana.orgdatatracker.ietf.orgdeveloper.mozilla.orgdigitalassets.lib.berkeley.edudiscuss.python.orgdl.acm.orgdmlc.github.iodoc.rust-lang.orgdocbook.sourceforge.netdocs.aiohttp.orgdocs.oracle.comdocs.pydantic.devdocs.pytest.orgdocs.python.orgdocs.rsdocs.scipy.orgdoi.orgen.wikipedia.orgerrors.pydantic.devexam_ple.comexport.arxiv.orgfoo.comgcc.gnu.orggithub.comgitlab.freedesktop.orggoogle-auth.readthedocs.iographics.stanford.edugroups.google.comhttpbin.orghuggingface.cohypothesis.readthedocs.ioicml.ccimageio.readthedocs.ioinfo.arxiv.orgipython.orgj3-fortran.orgjson-schema.orgkexue.fmlibsdl.orgmarc.najork.orgmathworld.wolfram.commatplotlib.orgmesonbuild.commetacpan.orgmodelcontextprotocol.iomypy.readthedocs.iomüller.denats.ionicolas.limare.netnumpy.orgnumpydoc.readthedocs.ioomoindrot.github.ioopenreview.netother.compackages.msys2.orgpackaging.python.orgpandas.pydata.orgpds-rings.seti.orgpenghao-bdsc.github.iopeople.eecs.berkeley.edupeps.python.orgpersonal.math.ubc.capublic.ukp.informatik.tu-darmstadt.depydantic-docs.helpmanual.iopyinstaller.readthedocs.iopymupdf.readthedocs.iopypi.orgpython-devtools.helpmanual.iopython.orgraw.githubusercontent.comrich.readthedocs.iosbert.netschemas.microsoft.comscikit-image.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgsethmlarson.devsourceware.orgstackoverflow.comtools.ietf.orgtruststore.readthedocs.iotyping.python.orgviews.scientific-python.orgweb.archive.orgwiki.python.orgwixtoolset.orgwrapdb.mesonbuild.comwww.aclweb.orgwww.ams.orgwww.artifex.comwww.cl.cam.ac.ukwww.ecma-international.orgwww.egenix.comwww.example.珠宝www.freebsd.orgwww.gmarts.orgwww.gnu.orgwww.google.comwww.iana.orgwww.intel.comwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.microsoft.comwww.oasis-open.orgwww.openblas.netwww.python.orgwww.researchgate.netwww.rfc-editor.orgwww.sbert.netwww.scipy.orgwww.stixfonts.orgwww.tondering.dkwww.w3.orgwww.xudongz.comwww.xyz.eduxn--fiqs8s.icom.museum
</> First-Party Code
first-party (python)
python first-partyexpand_more 11 low-confidence finding(s)
low env_fs — Filesystem access. 8 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations
</> Dependencies
aiohttp
python dependencyexpand_more 30 low-confidence finding(s)
low env_fs — Filesystem access. 10 locations
low env_fs — Environment-variable access. 9 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 6 locations
anyio
python dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
arxiv
python dependencyexpand_more 1 low-confidence finding(s)
resp = self._session.get(url, headers={"user-agent": _USER_AGENT})Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
httpx
python dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Environment-variable access. 4 locations
mcp
python dependencyexpand_more 39 low-confidence finding(s)
low env_fs — Environment-variable access. 16 locations
pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:343
pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:344
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 6 locations
low env_fs — Filesystem access. 15 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
numpy
python dependencyexpand_more 982 low-confidence finding(s)
low env_fs — Filesystem access. 618 locations
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57
low env_fs — Environment-variable access. 356 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
pydantic
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 5 locations
pydantic-settings
python dependencyexpand_more 3 low-confidence finding(s)
return parse_env_vars(os.environ, self.case_sensitive, self.env_ignore_empty, self.env_parse_none_str)Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs — Filesystem access. 2 locations
pymupdf4llm
python dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
PYMUPDF_SETUP_VERSION = os.environ.get("PYMUPDF_SETUP_VERSION")Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
python-dateutil
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 8 locations
name = os.environ["TZ"]Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
python-dotenv
python dependencyexpand_more 11 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
low env_fs — Environment-variable access. 8 locations
sentence-transformers
python dependencyexpand_more 58 low-confidence finding(s)
low env_fs — Environment-variable access. 7 locations
low env_fs — Filesystem access. 51 locations
pkgs/python/[email protected]/sentence_transformers/sentence_transformer/evaluation/nano_beir.py:353
pkgs/python/[email protected]/sentence_transformers/sentence_transformer/evaluation/nano_beir.py:358
starlette
python dependencyexpand_more 2 low-confidence finding(s)
def __init__(self, environ: MutableMapping[str, str] = os.environ):Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
with open(file_name, encoding=encoding) as input_file:Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
uvicorn
python dependencyexpand_more 5 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 2 locations
Skipped dependencies
Production
- pymupdf-layout prod — no sdist (wheels only)