Close Open Privacy Scan
App Privacy Score
Low risk · 170 finding(s)
Based on: 7 first-party package(s) · 124/132 deps analyzed
Dependency score: 57 (Medium risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
100.100.100.200access.line.meaccount.health.nokia.comaccount.withings.comaccounts.google.comaccounts.spotify.comacme-staging-v02.api.letsencrypt.orgacme-v02.api.letsencrypt.orgacs.amazonaws.comaka.msamazonaws.comapi.amazon.comapi.badgr.ioapi.cohere.comapi.dropboxapi.comapi.ebay.comapi.fitbit.comapi.github.comapi.hipchat.comapi.instagram.comapi.line.meapi.login.yahoo.comapi.mediamath.comapi.odnoklassniki.ruapi.openai.comapi.paypal.comapi.pinterest.comapi.sandbox.paypal.comapi.siliconflow.cnapi.voyageai.comapi.x.comapp.asana.comapp.rakuten.co.jpappleid.apple.comauth.ebay.combadgr.combattle.netbitbucket.orgcloud.google.comdashscope.aliyuncs.comdiscord.comdocs.aws.amazon.comdocs.microsoft.comen.wikipedia.orgencoding.spec.whatwg.orgfakestorage.blob.core.windows.netfoursquare.comgenerativelanguage.googleapis.comgit.k8s.iogithub.comgitlab.comgo.devgolang.orggoogle-styleguide.googlecode.comgoogle.github.iograph.facebook.comgraph.qq.comgrpc.iohg.mozilla.orghttpbin.orghyper.rsid.heroku.comid.twitch.tvjson.orgkauth.kakao.comkubernetes.iolearn.microsoft.comllm.api.cloud.yandex.netlogin.chinacloudapi.cnlogin.coinbase.comlogin.live.comlogin.mailchimp.comlogin.microsoftonline.comlogin.microsoftonline.uslogin.uber.commanagement.azure.commanagement.chinacloudapi.cnmanagement.core.chinacloudapi.cnmanagement.core.usgovcloudapi.netmanagement.core.windows.netmanagement.usgovcloudapi.netmetadata.tencentyun.commilvus.ionid.naver.como2.mail.ruoauth.pipedrive.comoauth.vk.comoauth.web.cern.choauth.yandex.comoauth2.googleapis.comoauth2.mtls.googleapis.comopentelemetry.iopkg.go.devprotobuf.devpublicsuffix.orgpulsar.apache.orgpyroscope.ioraw.githubusercontent.comrouter.huggingface.cos3.amazonaws.comslack.comsnowballstem.orgstackoverflow.comstorage.azure.comstorage.googleapis.comstorage.mtls.googleapis.comstorage.universe_domainsts.amazonaws.comsts.universe_domaint1sandbox.mediamath.comtext-embeddings-service.milvus-ci.svc.cluster.localtext-rerank-service.milvus-ci.svc.cluster.localtools.ietf.orgwikipedia.orgwww.alibabacloud.comwww.amazon.comwww.apache.orgwww.dropbox.comwww.facebook.comwww.fitbit.comwww.googleapis.comwww.hipchat.comwww.iana.orgwww.ibm.comwww.linkedin.comwww.odnoklassniki.ruwww.openstreetmap.orgwww.patreon.comwww.paypal.comwww.pinterest.comwww.sandbox.paypal.comwww.splitwise.comwww.strava.comwww.unicode.orgwww.w3.orgx.comzoom.us
</> First-Party Code
first-party (rust): internal/core/thirdparty/tantivy/tantivy-binding
rust first-partyexpand_more 24 low-confidence finding(s)
low env_fs — Environment-variable access. 3 locations
low env_fs — Filesystem access. 21 locations
</> Dependencies
env_logger
rust dependencyexpand_more 3 low-confidence finding(s)
log::info!("a log from `MyLogger`");A telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs — Environment-variable access. 2 locations
flate2
rust dependencyexpand_more 9 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
jieba-rs
rust dependencyexpand_more 3 low-confidence finding(s)
let path = Path::new(&env::var("OUT_DIR").unwrap()).join("hmm_prob.rs");Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs — Filesystem access. 2 locations
libc
rust dependencyexpand_more 13 low-confidence finding(s)
low env_fs — Environment-variable access. 13 locations
lindera
rust dependencyexpand_more 7 low-confidence finding(s)
low env_fs — Filesystem access. 6 locations
if let Ok(config_path) = env::var("LINDERA_CONFIG_PATH") {Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
lindera-dictionary
rust dependencyexpand_more 21 low-confidence finding(s)
low env_fs — Environment-variable access. 4 locations
low env_fs — Filesystem access. 17 locations
lingua
rust dependencyexpand_more 11 low-confidence finding(s)
low env_fs — Filesystem access. 11 locations
pinyin
rust dependencyexpand_more 2 low-confidence finding(s)
let path = Path::new(&env::var("OUT_DIR").unwrap()).join(name);Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
Ok(BufWriter::new(File::create(&path)?))Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
reqwest
rust dependencyexpand_more 42 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 4 locations
low env_fs — Filesystem access. 3 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 33 locations
low env_fs — Environment-variable access. 2 locations
scopeguard
rust dependencyexpand_more 1 low-confidence finding(s)
let f = File::create("newfile.txt").unwrap();Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
serde_json
rust dependencyexpand_more 2 low-confidence finding(s)
low env_fs — Environment-variable access. 2 locations
tantivy
rust dependencyexpand_more 6 low-confidence finding(s)
low env_fs — Filesystem access. 5 locations
std::env::var("NUM_FUNCTIONAL_TEST_ITERATIONS")Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
tar
rust dependencyexpand_more 4 low-confidence finding(s)
low env_fs — Filesystem access. 4 locations
tokio
rust dependencyexpand_more 6 low-confidence finding(s)
low env_fs — Filesystem access. 5 locations
match std::env::var(ENV_WORKER_THREADS) {Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
tonic
rust dependencyexpand_more 6 low-confidence finding(s)
low telemetry — Log/trace emission. Structured logs can carry PII to sinks/aggregators. 6 locations
unicode-general-category
rust dependencyexpand_more 2 low-confidence finding(s)
let output_path = PathBuf::from(env::var("OUT_DIR").unwrap()).join("category.rs");Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
File::create(path).unwrap_or_else(|_| panic!("unable to open {}", path.to_string_lossy()));Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.
Fix: Usually benign; confirm any secret read here is not later sent externally.
zstd-sys
rust dependencyexpand_more 8 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
Skipped dependencies
Production
- github.com/klauspost/compress prod — module zip exceeds byte cap
- github.com/greatroar/blobloom prod — proxy 404
- github.com/milvus-io/milvus/client/v3 prod — proxy 404
- github.com/milvus-io/milvus/pkg/v3 prod — proxy 404
- google.golang.org/api prod — module zip exceeds byte cap
- github.com/milvus-io/milvus/client/v2 prod — proxy 404
- github.com/huaweicloud/huaweicloud-sdk-go-v3 prod — module zip exceeds byte cap
- tantivy-5 prod — no version pinned