Close Open Privacy Scan
App Privacy Score
Low risk · 11 finding(s)
Based on: 5 first-party package(s) · 40/44 deps analyzed
Dependency score: 97 (Low risk)
bar_chart Score Breakdown
No category deductions recorded.
list Scan Summary
swap_horiz External domains
687fb701029421ae5549d998--8000.hf.jobsapi-inference.huggingface.coapi.anthropic.comapi.cerebras.aiapi.cohere.comapi.deepinfra.comapi.endpoints.huggingface.cloudapi.featherless.aiapi.fireworks.aiapi.github.comapi.groq.comapi.minimax.ioapi.novita.aiapi.openai.comapi.publicai.coapi.replicate.comapi.scaleway.aiapi.together.xyzapi.wavespeed.aiapi.z.aiapp.neptune.aiarxiv.orgastral.shattribution.omnilib.devblog.amjith.combugs.python.orgcdn-media.huggingface.cocdn.britannica.comcdnjs.cloudflare.comclear.mlclick.palletsprojects.comclip-cn-beijing.oss-cn-beijing.aliyuncs.comconemu.github.ioconsole.anthropic.comconsole.cloud.google.comcoqui.aicoverage.readthedocs.iodagshub.comdatasets-server.huggingface.codatatracker.ietf.orgdeveloper.apple.comdeveloper.mozilla.orgdevelopers.google.comdiscord.comdiscuss.huggingface.codiscuss.pytorch.orgdocs.github.comdocs.microsoft.comdocs.neptune.aidocs.nvidia.comdocs.pydantic.devdocs.pytest.orgdocs.python.orgdocs.pytorch.orgdocs.ray.iodocs.swanlab.cndocs.wandb.aidvc.orgeli.thegreenplace.neten.wikipedia.orgendpoints.huggingface.coessentia.upf.edufal.runfarm4.staticflickr.comfilesystem-spec.readthedocs.iofishshell.comflyte.orgformulae.brew.shgiou.stanford.edugist.github.comgit-scm.comgithub.comgoogle-auth.readthedocs.iogooseberrycreative.comguillaumejaume.github.iohf.cohg.python.orghips.hearstapps.comhub-ci.huggingface.cohub.my-company.comhuggingface.coi.postimg.ccimages.cocodataset.orgimages.pexels.cominference.api.nscale.cominotify.aiken.czjson-schema.orgjzgu0buei5.us-east-1.aws.endpoints.huggingface.cloudkeras.iolists.sourceforge.netmistralai.github.iomkdocstrings.github.iomodelcontextprotocol.iomsdn.microsoft.commy-text-to-image.region.vendor.endpoints.huggingface.cloudndjson.orgnew-url.comnew.webhook.sitenineplanets.orgnlp.stanford.eduoai.endpoints.kepler.ai.cloud.ovh.netonnxruntime.aiopenaipublic.blob.core.windows.netoptuna.readthedocs.iopaddle-model-ecology.bj.bcebos.compawamoy.github.iopbs.twimg.compendulum.eustace.iopeps.python.orgplatform.minimax.ioplatform.openai.comportal.azure.comproceedings.neurips.ccprotobuf.devpygments.orgpypi.orgpypi.python.orgpytorch.orgpyyaml.orgqianwen-res.oss-cn-beijing.aliyuncs.comqueue.fal.runqwenlm.github.ioraw.githubusercontent.comrequests.readthedocs.iorouter.huggingface.corrc.cvc.uab.essafetensors-convert.hf.spacestackoverflow.comstorage.googleapis.comsuno-ai.notion.siteswanlab.cnthumbs.dreamstime.comtimgolden.me.uktldp.orgtwine.readthedocs.iotwitter.comtyper.tiangolo.comupload.wikimedia.orgvt100.netwebhook.sitewww.apache.orgwww.brynosaurus.comwww.comet.comwww.cs.cmu.eduwww.deepmind.comwww.delorie.comwww.dvc.orgwww.google.comwww.googleapis.comwww.ietf.orgwww.ilankelman.orgwww.kxan.comwww.linuxjournal.comwww.mkdocs.orgwww.mlflow.orgwww.mlsite.netwww.nature.comwww.oreilly.comwww.paddleocr.aiwww.python-httpx.orgwww.python.orgwww.scivision.devwww.tensorflow.orgwww.textualize.iowww.w3.orgwww.w3schools.comwww.wandb.com
</> First-Party Code
first-party (rust): evals/oracles/rs_oracle
rust first-partyexpand_more 1 low-confidence finding(s)
if let Ok(src) = fs::read_to_string(&path) {Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
</> Dependencies
proc-macro2
rust dependencyexpand_more 8 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
syn
rust dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
Skipped dependencies
Production
- pydantic-ai prod — no python source in sdist
- tree-sitter-php prod — no sdist (wheels only)
- torch prod — no sdist (wheels only)
- pymilvus prod — no sdist (wheels only)