Close Open Privacy Scan
App Privacy Score
Low risk · 275 finding(s)
Based on: 1 first-party package(s) · 10/10 deps analyzed
Dependency score: 72 (Medium risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
blogs.msdn.combugs.jython.orgbugs.python.orgcdn.jsdelivr.netclick.palletsprojects.comcode.activestate.comcode.djangoproject.comcode.google.comcommonmark.orgcryptography.iocvsweb.openwall.comdatatracker.ietf.orgdev.mysql.comdeveloper.apple.comdeveloper.mozilla.orgdiscuss.python.orgdjangosnippets.orgdocs.pydantic.devdocs.python.orgdocs.rsen.wikipedia.orgerrors.pydantic.devexam_ple.comfastapi.tiangolo.comfonts.googleapis.comfoo.comforum.md5decrypter.co.ukfoss.heptapod.netfxr.googlebit.comgist.github.comgithub.comhtml.spec.whatwg.orghypothesis.readthedocs.ioinotify.aiken.czjson-schema.orglocalhost.tiangolo.commodelcontextprotocol.iomypy.readthedocs.ionats.iopackaging.python.orgpasslib.readthedocs.iopeps.python.orgpgp.mit.edupydantic-docs.helpmanual.iopyjwt.readthedocs.iopypi.orgpypi.python.orgpython-devtools.helpmanual.ioraw.githubusercontent.comrich.readthedocs.iosethmlarson.devspdx.devstarlette.devswagger.iotimgolden.me.uktyper.tiangolo.comunpkg.comus.generation-nt.comwww.apache.orgwww.dynamic.net.auwww.eff.orgwww.example.珠宝www.faqs.orgwww.iana.orgwww.linuxjournal.comwww.mindrot.orgwww.mlsite.netwww.openbsd.orgwww.openwall.comwww.python.orgwww.rfc-editor.orgwww.theregister.co.ukwww.w3.orgwww.xudongz.comwww.youtube.com
</> First-Party Code
first-party (python)
python first-partyexpand_more 15 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
</> Dependencies
typer
python dependency for value in track(range(100), description="Processing..."):A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 66 low-confidence finding(s)
low env_fs — Filesystem access. 37 locations
low env_fs — Environment-variable access. 29 locations
click
python dependencyexpand_more 31 low-confidence finding(s)
low env_fs — Filesystem access. 8 locations
low env_fs — Environment-variable access. 23 locations
fastapi
python dependencyexpand_more 70 low-confidence finding(s)
low env_fs — Filesystem access. 55 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 12 locations
os.environ["DYLD_FALLBACK_LIBRARY_PATH"] = "/opt/homebrew/lib"Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
mcp
python dependencyexpand_more 39 low-confidence finding(s)
low env_fs — Environment-variable access. 16 locations
pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:343
pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:344
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 6 locations
low env_fs — Filesystem access. 15 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 2 locations
passlib
python dependencyexpand_more 18 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
low env_fs — Filesystem access. 10 locations
pydantic
python dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 5 locations
pyjwt
python dependencyexpand_more 5 low-confidence finding(s)
with open(os.path.join(here, *parts), encoding="utf-8") as f:Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs — Environment-variable access. 3 locations
with urllib.request.urlopen(
r, timeout=self.timeout, context=self.ssl_context
) as response:Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
python-dotenv
python dependencyexpand_more 11 low-confidence finding(s)
low env_fs — Filesystem access. 3 locations
low env_fs — Environment-variable access. 8 locations
uvicorn
python dependencyexpand_more 5 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 2 locations
watchdog
python dependencyexpand_more 5 low-confidence finding(s)
if is_macos or os.getenv("FORCE_MACOS_MACHINE", "0") == "1":Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.