Close Open Privacy Scan
App Privacy Score
Medium risk · 1191 finding(s)
Based on: 28 first-party package(s) · 147/175 deps analyzed
Dependency score: 57 (Medium risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
api.github.comapi.slack.comapi.telegram.orgbetterexplained.combitbucket.orgblogs.msdn.microsoft.combpa.stbugs.python.orgcode.activestate.comconemu.github.iocore.telegram.orgdevelopers.google.comdiscord.comdiscord.ggdiscordpy.readthedocs.iodocs.docker.comdocs.github.comdocs.microsoft.comdocs.pytest.orgdocs.python.orgdocs.rseli.thegreenplace.neten.wikipedia.orggithub.comgrpc.github.iohost.docker.internalhttpbin.orghyper.rsindex.docker.ioipywidgets.readthedocs.iojson-schema.orgmembers.loria.frmerlinux.eunumpy.orgoauth2.googleapis.comoeis.orgonnxruntime.aipackaging.python.orgpeps.python.orgpip.pypa.iopluggy.readthedocs.iopy.readthedocs.iopybites.blogspot.bepyjwt.readthedocs.iopyo3.rspypi.orgpytest.orgpythontesting.netqdrant.techrequests.readthedocs.ioschemathesis.readthedocs.iosetuptools.pypa.iosetuptools.readthedocs.iosmarie.github.iospec.openapis.orgstackoverflow.comstorage.googleapis.comswagger.iotox.wikitqdm.github.iovirtualenv.pypa.iow.wikiwww-cs-faculty.stanford.eduwww.github.comwww.numberanalytics.comwww.python.orgwww.rfc-editor.orgwww.youtube.com
</> First-Party Code
first-party (rust)
rust first-partyexpand_more 123 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 110 locations
low env_fs — Filesystem access. 8 locations
low env_fs — Environment-variable access. 5 locations
first-party (rust): lib/api
rust first-partyexpand_more 1 low-confidence finding(s)
let build_out_dir = PathBuf::from(env::var("OUT_DIR").unwrap());Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
first-party (rust): lib/collection
rust first-partyexpand_more 228 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 216 locations
low env_fs — Environment-variable access. 3 locations
first-party (rust): lib/common/common
rust first-partyexpand_more 44 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 20 locations
low env_fs — Filesystem access. 16 locations
first-party (rust): lib/common/dataset
rust first-partyexpand_more 2 low-confidence finding(s)
&mut File::create(&tmp_fname)?,Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
let result = Command::new(var_os("CARGO").context("$CARGO not set")?)Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
first-party (rust): lib/edge
rust first-partyexpand_more 2 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 2 locations
first-party (rust): lib/gpu
rust first-partyexpand_more 13 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 13 locations
first-party (rust): lib/gridstore
rust first-partyexpand_more 14 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 11 locations
first-party (rust): lib/quantization
rust first-partyexpand_more 7 low-confidence finding(s)
low env_fs — Environment-variable access. 2 locations
low env_fs — Filesystem access. 5 locations
first-party (rust): lib/segment
rust first-partyexpand_more 111 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 91 locations
low env_fs — Filesystem access. 17 locations
low env_fs — Environment-variable access. 3 locations
first-party (rust): lib/shard
rust first-partyexpand_more 30 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 26 locations
low env_fs — Filesystem access. 4 locations
first-party (rust): lib/sparse
rust first-partyexpand_more 5 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 2 locations
first-party (rust): lib/storage
rust first-partyexpand_more 109 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 106 locations
low env_fs — Filesystem access. 2 locations
let delay_secs: f64 = std::env::var("QDRANT__STAGING__SNAPSHOT_RECOVERY_DELAY")Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
first-party (rust): lib/wal
rust first-partyexpand_more 5 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 2 locations
let seed: usize = env::var("WAL_TEST_SEED")Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
</> Dependencies
actix-cors
rust dependencyexpand_more 1 low-confidence finding(s)
log::info!("starting HTTP server at http://localhost:8080");A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
actix-files
rust dependencyexpand_more 17 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 3 locations
low env_fs — Filesystem access. 14 locations
actix-multipart
rust dependencyexpand_more 2 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 2 locations
actix-web
rust dependencyexpand_more 22 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 21 locations
if let Ok(val) = env::var(name) {Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
actix-web-validator
rust dependencyexpand_more 4 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 4 locations
ahash
rust dependencyexpand_more 1 low-confidence finding(s)
let arch = env::var("CARGO_CFG_TARGET_ARCH").expect("CARGO_CFG_TARGET_ARCH was not set");Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
anyhow
rust dependencyexpand_more 7 low-confidence finding(s)
low env_fs — Environment-variable access. 7 locations
atomicwrites
rust dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Filesystem access. 4 locations
bm25
rust dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
chrono
rust dependencyexpand_more 19 low-confidence finding(s)
low env_fs — Filesystem access. 15 locations
colored
rust dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Environment-variable access. 4 locations
config
rust dependencyexpand_more 2 low-confidence finding(s)
let run_mode = env::var("RUN_MODE").unwrap_or_else(|_| "development".into());Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
let buf = fs::read(filename)?;Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
console-subscriber
rust dependencyexpand_more 28 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 22 locations
low env_fs — Environment-variable access. 5 locations
let file = std::fs::File::create(path)?;Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
crc32c
rust dependencyexpand_more 2 low-confidence finding(s)
let file = std::fs::File::create(path)?;Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
let out_dir = std::env::var("OUT_DIR").unwrap();Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
env_logger
rust dependencyexpand_more 3 low-confidence finding(s)
log::info!("a log from `MyLogger`");A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs — Environment-variable access. 2 locations
flate2
rust dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
fs-err
rust dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
fs_extra
rust dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Filesystem access. 4 locations
geo
rust dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
indexmap
rust dependencyexpand_more 1 low-confidence finding(s)
match std::env::var_os("CARGO_FEATURE_STD") {Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
memmap2
rust dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Filesystem access. 4 locations
num_cpus
rust dependencyexpand_more 2 low-confidence finding(s)
::std::env::var(name).ok().map(|val| val.parse().unwrap())Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
let file = match File::open("/proc/cpuinfo") {Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
object_store
rust dependencyexpand_more 38 low-confidence finding(s)
low env_fs — Filesystem access. 14 locations
low env_fs — Environment-variable access. 21 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
tracing::warn!(
"StorageClass attribute not supported on HTTP client as header key is unknown"
);A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
proc-macro2
rust dependencyexpand_more 8 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
prost-wkt-types
rust dependencyexpand_more 3 low-confidence finding(s)
let dir = PathBuf::from(env::var("OUT_DIR").unwrap());Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs — Filesystem access. 2 locations
quick_cache
rust dependencyexpand_more 14 low-confidence finding(s)
low env_fs — Environment-variable access. 10 locations
quote
rust dependencyexpand_more 1 low-confidence finding(s)
let rustc = env::var_os("RUSTC")?;Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
raft-proto
rust dependencyexpand_more 1 low-confidence finding(s)
let base = std::env::var("CARGO_MANIFEST_DIR").unwrap_or_else(|_| ".".to_string());Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
reqwest
rust dependencyexpand_more 42 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 4 locations
low env_fs — Filesystem access. 3 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 33 locations
low env_fs — Environment-variable access. 2 locations
rustls
rust dependencyexpand_more 11 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
low env_fs — Environment-variable access. 2 locations
rustls-pki-types
rust dependencyexpand_more 1 low-confidence finding(s)
File::open(file_name).map_err(Error::Io)?,Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
schemars
rust dependencyexpand_more 1 low-confidence finding(s)
let target = env::var("TARGET").unwrap();Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
serde
rust dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
fs::write(out_dir.join("private.rs"), module).unwrap();Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
serde_cbor
rust dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
serde_json
rust dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Environment-variable access. 2 locations
serial_test
rust dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
slog
rust dependencyexpand_more 1 low-confidence finding(s)
if std::env::var_os("CARGO_FEATURE_STD").is_some()Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
syn
rust dependencyexpand_more 3 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
let rustc = env::var_os("RUSTC")?;Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
sysinfo
rust dependencyexpand_more 67 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 64 locations
thiserror
rust dependencyexpand_more 7 low-confidence finding(s)
low env_fs — Environment-variable access. 7 locations
tokio
rust dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
match std::env::var(ENV_WORKER_THREADS) {Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
tonic
rust dependencyexpand_more 6 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 6 locations
tower
rust dependencyexpand_more 3 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 3 locations
tracing
rust dependencyexpand_more 1 low-confidence finding(s)
b.iter(|| tracing::info!("hello world!"))A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
tracing-appender
rust dependencyexpand_more 14 low-confidence finding(s)
low env_fs — Filesystem access. 4 locations
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 10 locations
tracing-subscriber
rust dependencyexpand_more 113 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 107 locations
low env_fs — Environment-variable access. 6 locations
tracing-tracy
rust dependencyexpand_more 2 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 2 locations
zerocopy
rust dependencyexpand_more 2 low-confidence finding(s)
let cargo_toml = fs::read_to_string("Cargo.toml").expect("failed to read Cargo.toml");Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
let rustc_cmd_name = env::var_os("RUSTC").expect("could not get rustc command name");Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
Skipped dependencies
Production
- sys-info prod — no rust source in crate
- slog-stdlog prod — no rust source in crate
- prost-for-raft prod — no version pinned
- common prod — cdn 403
- cancel prod — cdn 403
- issues prod — cdn 403
- segment prod — cdn 403
- collection prod — cdn 403
- api prod — cdn 403
- wal prod — cdn 403
- fnv prod — no rust source in crate
- edge prod — cdn 403
- edge-py-codegen prod — cdn 403
- dataset prod — cdn 403
- rust-stemmers prod — cdn 403
- gridstore prod — cdn 403
- macros prod — cdn 403
- posting_list prod — cdn 403
- quantization prod — cdn 403
- rustix prod — scan budget exceeded
- docopt prod — scan budget exceeded
- qdrant-edge prod — scan budget exceeded
- ureq prod — scan budget exceeded
- ash prod — scan budget exceeded
- gpu-allocator prod — scan budget exceeded
- shaderc prod — scan budget exceeded
- permutation_iterator prod — scan budget exceeded
- arrayvec prod — scan budget exceeded