Close Open Privacy Scan
App Privacy Score
Low risk · 1374 finding(s)
Based on: 1 first-party package(s) · 12/14 deps analyzed
Dependency score: 72 (Medium risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
0x10c.comagda.readthedocs.ioaggregate.ee.engr.uky.eduaheui.github.ioalloy.mit.eduampl.comandroid.stackexchange.comangular.ioapi.nuget.orgarduino.ccarrow.apache.orgarturo-lang.ioarxiv.orgasymptote.sf.netatom.ioaugeas.netawslabs.github.iobaremessages.orgberry-lang.github.iobetterexplained.combford.infobitbucket.orgblackboxframework.orgblitzbasic.comblitzresearch.itch.ioblog.ganssle.ioboa.cs.iastate.eduboogie-docs.readthedocs.iobrew.shbugreports.qt.iobugs.python.orgbugs.winehq.orgbugzilla.gnome.orgcapnproto.orgcc65.github.iocdn.mathjax.orgcdnjs.cloudflare.comcens.ioc.eeceylon-lang.orgcfengine.orgchaiscript.comchapel-lang.orgchardet.feedparser.orgcharm.cs.illinois.educirru.orgcjheath.github.ioclaylabs.comclean.cs.ru.nlclojure.orgcloud.google.comcmake.orgcode.activestate.comcode.google.comcode.kx.comcoffeescript.orgcolab.research.google.comcollaboration.cmc.ec.gc.cacommunity.sap.comcplint.eucran.r-project.orgcrates.iocrmsh.github.iocrystal-lang.orgcsound.comcucumber.iocython.orgdarcs.netdaringfireball.netdart.devdata-apis.orgdatatracker.ietf.orgdevcenter.heroku.comdeveloper.algorand.orgdeveloper.android.comdeveloper.apple.comdeveloper.nvidia.comdeveloper.r-project.orgdevelopers.google.comdigitalassets.lib.berkeley.edudlang.orgdmlc.github.iodoc.qt.iodoc.rust-lang.orgdocbook.sourceforge.netdocker.iodocs.aeternity.comdocs.bodo.aidocs.chromia.comdocs.microsoft.comdocs.modular.comdocs.mql4.comdocs.nvidia.comdocs.pytest.orgdocs.python.orgdocs.rsdocs.scipy.orgdocs.sourcemod.netdocs.sqlalchemy.orgdocs.tigergraph.comdocs.ton.orgdocs.typo3.orgdocs.waves.techdocutils.sourceforge.iodoi.orgdotnet.microsoft.comduelengine.orgec-lang.orgelixir-lang.orgelm-lang.orgen.m.wikipedia.orgen.wikipedia.orgen.wikiversity.orgexslt.orgextempore.moso.com.auezhillang.orgfacebook.github.iofactorcode.orgfburl.comfennel-lang.orgfirefox-source-docs.mozilla.orgfishshell.comfortran-lang.orgfr.wikipedia.orgfreedesktop.orgfreefem.orgfrexx.defsharp.orgfuthark-lang.orggcc.gnu.orggenshi.edgewall.orggit.sr.htgithub.comgitlab.freedesktop.orggitlab.gnome.orggizmojo.orggleam.rungnuplot.infogo.devgolo-lang.orggosu-lang.github.iogpuopen.comgraphics.pixar.comgraphics.stanford.edugraphql.orggroovy-lang.orggroups.google.comhaml.infohandlebarsjs.comharelang.orghaxe.orghelp.adobe.comhelp.gooddata.comhpccsystems.comhtml.spec.whatwg.orghttpd.apache.orghttpwg.orghuggingface.cohylang.orgidris2.readthedocs.ioimageio.readthedocs.ioinform-fiction.orginform7.comioke.orgiolanguage.comipython.orgisabelle.in.tum.deisocpp.orgj3-fortran.orgjanet-lang.orgjasmin.sourceforge.netjfbillingsley.comjinja.palletsprojects.comjmespath.orgjsoftware.comjson-ld.orgjson-schema.orgjson5.orgjsonnet.orgjulialang.orgjuttle.github.iokid-templating.orgkippura.orgkoka-lang.github.iokotlinlang.orgleanprover-community.github.iolearn.microsoft.comlesscss.orglibsdl.orglighttpd.netlilypond.orglinux.die.netlisp-lang.orglivescript.netllvm.orglogtalk.orgluau-lang.orgmacaulay2.commanpages.debian.orgmathworld.wolfram.commatplotlib.orgmaxima.sourceforge.netmc-stan.orgmcmc-jags.sourceforge.iomembers.loria.frmesonbuild.commetacpan.orgminecraft.wikiminiscript.orgmips.commlochbaum.github.iomoinmo.inmonte.readthedocs.iomoonscript.orgmsdn.microsoft.comnasm.usnemerle.orgneo4j.comnestedtext.orgnewspeaklanguage.orgnginx.netnicolas.limare.netnim-lang.orgnitlanguage.orgnixos.orgnodejs.orgnotmuchmail.orgnsis.sourceforge.netnumba.readthedocs.ionumexpr.readthedocs.ionumpy.orgnumpydoc.readthedocs.ionusmv.fbk.euocaml.orgoeis.orgooc-lang.github.ioopalang.orgopencobol.add1tocobol.comopenscad.orgorgmode.orgpackages.msys2.orgpackaging.python.orgpandas.pydata.orgparquet.apache.orgpaste.lisp.orgpastie.caboo.sepeople.eecs.berkeley.edupeps.python.orgperldoc.perl.orgpersonal.math.ubc.caphix.x10.mxpig.apache.orgpike.lysator.liu.sepresbrey.mit.edupreview.redd.itprojects.eclipse.orgprometheus.ioprql-lang.orgpsysh.orgptls.devpugjs.orgpuppet.compygments.orgpyinstaller.readthedocs.iopyos.github.iopyperclip.readthedocs.iopypi.orgpypi.python.orgpython.livinglogic.depython.orgqlik.comracket-lang.orgraw.githubusercontent.comreasonml.github.iorefspecs.linuxfoundation.orgrelaxng.orgriverbed.comroboconf.github.iorobotframework.orgrocq-prover.orgrpm-software-management.github.iorzimmerman.github.iosanssecours.github.iosass-lang.comscalate.fusesource.orgscalate.github.ioschemas.microsoft.comscikit-image.orgscipy-cookbook.readthedocs.ioscipy-lectures.orgsel4.systemssetuptools.pypa.ioshenlanguage.orgshex.ioskarnet.orgslim-template.github.iosnowballstem.orgsoliditylang.orgsource.android.comsourceware.orgspecifications.freedesktop.orgspecifications.openehr.orgspecs.frictionlessdata.iospinroot.comssrg.nicta.com.austackoverflow.comsupercollider.github.iosupport.sas.comtact-lang.orgtango.freedesktop.orgtechnet.microsoft.comtestanything.orgtexfaq.orgthrift.apache.orgtiddlywiki.comtodotxt.comtoml.ioton-blockchain.github.iotools.ietf.orgtreetop.rubyforge.orgtruststore.readthedocs.iottssh2.osdn.jptug.orgtwig.symfony.comtyping.python.orgtypst.appunicode-org.github.ious3.php.netvala.devvalidate-pyproject.readthedocs.iovelocity.apache.orgverifpal.comviews.scientific-python.orgvirustotal.github.iovisualstudio.microsoft.comvuejs.orgvyper.readthedocs.iow.wikiweb.archive.orgweb.cs.wpi.eduwebassembly.github.iowebassembly.orgwebsockets.readthedocs.iowerkzeug.palletsprojects.comwhiley.orgwiki.archlinux.orgwiki.debian.orgwiki.haskell.orgwiki.portal.chalmers.sewiki.secondlife.comwiki.xxiivv.comwixtoolset.orgwowpedia.fandom.comwrapdb.mesonbuild.comwren.iowww-cs-faculty.stanford.eduwww.adaic.orgwww.adobe.comwww.ams.orgwww.ansys.comwww.antlr.orgwww.apoioinformatica.inf.brwww.archlinux.orgwww.autohotkey.comwww.autoitscript.comwww.bbcbasic.co.ukwww.bbcode.orgwww.broadcom.comwww.cappuccino.devwww.cheetahtemplate.orgwww.colm.netwww.compuphase.comwww.cryptol.netwww.debian.orgwww.devicetree.orgwww.djangoproject.comwww.eclipse.orgwww.ecma-international.orgwww.eiffel.comwww.embarcadero.comwww.erlang.orgwww.exelisvis.comwww.fantom.orgwww.felix-lang.orgwww.fico.comwww.forth.comwww.freedesktop.orgwww.fstar-lang.orgwww.gap-system.orgwww.gnu.orgwww.godotengine.orgwww.google.comwww.graphviz.orgwww.haskell.orgwww.idris-lang.orgwww.ietf.orgwww.indusoft.comwww.intel.comwww.itu.intwww.json.orgwww.kernel.orgwww.khronos.orgwww.l3harrisgeospatial.comwww.lassosoft.comwww.logilab.orgwww.lua.orgwww.makotemplates.orgwww.maplesoft.comwww.masonhq.comwww.math.hmc.eduwww.mathjax.orgwww.mathworks.comwww.mcbe-dev.netwww.mcternan.me.ukwww.mediawiki.orgwww.modelica.orgwww.modula2.orgwww.monokai.nlwww.moo.mud.orgwww.mql5.comwww.mrc-bsu.cam.ac.ukwww.mupad.comwww.muppetlabs.comwww.myghty.orgwww.mysql.comwww.ncl.ucar.eduwww.newlisp.orgwww.nordtheme.comwww.numberanalytics.comwww.oasis-open.orgwww.omg.orgwww.openblas.netwww.openbugs.infowww.opendylan.orgwww.openehr.orgwww.openldap.orgwww.openpgp.orgwww.openpolicyagent.orgwww.opm.govwww.oracle.comwww.oreilly.comwww.parasail-lang.orgwww.perl.orgwww.php.netwww.ponylang.iowww.postgresql.orgwww.povray.orgwww.praat.orgwww.progress.comwww.python.orgwww.r-project.orgwww.raku.orgwww.rebol.comwww.red-bean.comwww.red-lang.orgwww.regressive.orgwww.rexxinfo.orgwww.rfc-base.orgwww.rfc-editor.orgwww.ruby-lang.orgwww.rubydoc.infowww.rust-lang.orgwww.sarl.iowww.scala-lang.orgwww.scheme-reports.orgwww.scilab.orgwww.scipy.orgwww.smalltalk.orgwww.smarty.netwww.spicelang.comwww.sqlite.orgwww.squid-cache.orgwww.stata.comwww.statsmodels.orgwww.stixfonts.orgwww.swift.orgwww.swig.orgwww.sylabs.iowww.tads.orgwww.tcl.tkwww.tcsh.orgwww.terraform.iowww.textualize.iowww.thermoscientific.comwww.thingsdb.netwww.tsql.infowww.typescriptlang.orgwww.unicon.orgwww.varnish-software.comwww.vim.orgwww.visual-prolog.comwww.vitanuova.comwww.w3.orgwww.wavemetrics.comwww.wolfram.comwww.workwithcolor.comwww.x.orgwww.xyz.eduwww.youtube.comwww.zeek.orgwww2.cs.arizona.edux10-lang.orgxarray.pydata.orgxlrd.readthedocs.ioyaml.orgzephir-lang.comziglang.org
</> First-Party Code
first-party (python)
python first-partyexpand_more 52 low-confidence finding(s)
low env_fs — Filesystem access. 31 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations
low env_fs — Environment-variable access. 17 locations
image = Image.open(requests.get(url, stream = True).raw)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
</> Dependencies
rich
python dependency yield from progress.track(
sequence,
total=total,
completed=completed,
description=description,
update_period=update_period,
)A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 22 low-confidence finding(s)
low env_fs — Environment-variable access. 4 locations
low env_fs — Filesystem access. 18 locations
fastparquet
python dependencyexpand_more 5 low-confidence finding(s)
low env_fs — Environment-variable access. 2 locations
low env_fs — Filesystem access. 3 locations
ninja
python dependencyexpand_more 6 low-confidence finding(s)
low env_fs — Environment-variable access. 4 locations
low env_fs — Filesystem access. 2 locations
numpy
python dependencyexpand_more 982 low-confidence finding(s)
low env_fs — Filesystem access. 618 locations
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:106
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:155
pkgs/python/[email protected]/vendored-meson/meson/mesonbuild/interpreterbase/interpreterbase.py:676
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/105 generatorcustom/catter.py:8
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/129 build by default/mygen.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:2
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/228 custom_target source/x.py:4
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage1.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:5
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/262 generator chain/stage2.py:6
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen1.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/71 ctarget dependency/gen2.py:9
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:10
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:43
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:50
pkgs/python/[email protected]/vendored-meson/meson/test cases/common/95 manygen/subdir/manygen.py:57
low env_fs — Environment-variable access. 356 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 3 locations
pandas
python dependencyexpand_more 29 low-confidence finding(s)
low env_fs — Filesystem access. 12 locations
low env_fs — Environment-variable access. 16 locations
return urllib.request.urlopen(*args, **kwargs) # noqa: TID251Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
pygments
python dependencyexpand_more 48 low-confidence finding(s)
low env_fs — Environment-variable access. 5 locations
low env_fs — Filesystem access. 34 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 6 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations
regex
python dependencyexpand_more 3 low-confidence finding(s)
safetensors
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
setuptools
python dependencyexpand_more 163 low-confidence finding(s)
low env_fs — Environment-variable access. 79 locations
low env_fs — Filesystem access. 82 locations
req = urllib.request.urlopen(url)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
with urlopen(url, context=context) as response: # noqa: S310 (audit URLs)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
tokenizers
python dependencyexpand_more 12 low-confidence finding(s)
os.environ["RAYON_NUM_THREADS"] = str(num_threads)Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs — Filesystem access. 10 locations
response = get(args.model, allow_redirects=True)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
websockets
python dependencyexpand_more 24 low-confidence finding(s)
low env_fs — Filesystem access. 2 locations
low env_fs — Environment-variable access. 22 locations
wheel
python dependencyexpand_more 18 low-confidence finding(s)
low env_fs — Filesystem access. 14 locations
Skipped dependencies
Production
- torch prod — no sdist (wheels only)
- pillow prod — sdist exceeds byte cap