Close Open Privacy Scan

link https://github.com/cline/cline
bolt Snapshot: commit c564045
science engine v1.14
schedule 2026-07-17T05:14:04.625214+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

smart_toy MCP server detected: @ai-sdk/anthropic, @ai-sdk/openai, @anthropic-ai/sdk, @modelcontextprotocol/sdk +2 more — detected in dependencies, not a safety judgment.

App Privacy Score

97 /100
Low privacy risk

Low risk · 61 finding(s)

Dependency score: 72 (Medium risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 61 low
First-party packages: 1
Dependency packages: 4
Ecosystem: rust

swap_horiz External domains

100.82.5.118169.254.169.254agentskills.ioai-gateway.vercel.shai-sdk.devai.google.devaihubmix.comaiplatform.googleapis.comaistudio.google.comapexsurveys.oracle.comapi.aiapi.aihubmix.comapi.anthropic.comapi.asksage.aiapi.cerebras.aiapi.cline.botapi.deepseek.comapi.dify.aiapi.exa.aiapi.fireworks.aiapi.getdial.aiapi.github.comapi.groq.comapi.hicap.aiapi.inference.wandb.aiapi.kilo.aiapi.minimax.ioapi.mistral.aiapi.moonshot.aiapi.novu.coapi.openai.comapi.sambanova.aiapi.studio.nebius.aiapi.telegram.orgapi.together.aiapi.together.xyzapi.v0.devapi.workos.comapi.x.aiapi.xiaomimimo.comapi.z.aiapp.baseten.coapp.cline.botapp.example.botapp.posthog.comapp.requestly.ioark.cn-beijing.volces.comauth.openai.comauth.tokenfactory.nebius.comautopush-generativelanguage.sandbox.googleapis.comavatars.githubusercontent.combailian.console.aliyun.combase-ui.combedrock-agent-runtime.us-west-2.amazonaws.combedrock-mantle.us-east-1.api.awsbedrock-runtime.us-east-1.amazonaws.combitcoin.orgchatgpt.comclaude.aicline.botcline.github.iocloud.cerebras.aicloud.google.comcloud.langfuse.comcloud.tencent.comcode-internal.aiservice.us-chicago-1.oci.oraclecloud.comcode.aiservice.us-chicago-1.oci.oraclecloud.comcommunity.cline.botconfluence.oraclecorp.comconsole.aihubmix.comconsole.anthropic.comconsole.firebase.google.comconsole.groq.comconsole.mistral.aiconsole.volcengine.comcontent-firebaseappcheck.googleapis.comcore-api.staging.int.cline.botcursor.comcustomersurveys.oracle.comdashboard.hicap.aidashscope.aliyuncs.comdata.cline.botdevelopers.openai.comdiscord.comdiscord.ggdocs.anthropic.comdocs.cline.botdocs.cloud.google.comdocs.expo.devdocs.litellm.aidocs.sambanova.aidummy.comejiidnob33g9ap1r.public.blob.vercel-storage.comexample.ngrok-free.appfcmregistrations.googleapis.comfirebase.google.comfirebaseinstallations.googleapis.comfirebaselogging.googleapis.comfirebaseremoteconfig.googleapis.comfireworks.aifonts.googleapis.comgemini-api-demos.uc.r.appspot.comgenerativelanguage.googleapis.comgithub.comgoo.glgoogle.aip.devhelp.openai.comhelp.sap.comheroui-assets.nyc3.cdn.digitaloceanspaces.comheroui.comhuggingface.coidcs-9dc693e80d9b469480d7afe00e743931.identity.oraclecloud.comimg.heroui.chatinfer-modelarts.cn-southwest-2.myhuaweicloud.cominference-api.nousresearch.cominference.baseten.coinference.poolside.aiinvalid-url-to-show-fallback.comjs-na2.hs-scripts.comjson-schema.orglmstudio.ailogin-ext.identity.oraclecloud.commanagement.azure.commarketplace.visualstudio.commetadata.google.internalmodel-api.baseten.comodelcontextprotocol.iomodels.devnews.google.comnpm.imoauth2.googleapis.comontheline.trincoll.eduopen.bigmodel.cnopenrouter.aiplatform.claude.complatform.moonshot.aiplatform.moonshot.cnplatform.openai.compokeapi.coposthog.compptr.devpurl.oclc.orgpurl.orgraw.githubusercontent.comreact.devreactjs.orgregistry.npmjs.orgrouter.huggingface.corouter.requesty.aischemas.microsoft.comschemas.openxmlformats.orgschemas.zwobble.orgscira.aisecuretoken.google.comsentry.ioskills.shstaging-app.cline.botstorage.googleapis.comstuk.github.iosupport.huaweicloud.comswapi.py4e.comt3.chattailwindcss.comtokenhub.tencentmaas.comus.i.posthog.comus.posthog.comv0.appvercel.comvia.placeholder.comwandb.aiwww.allrecipes.comwww.anthropic.comwww.apple.comwww.baseten.cowww.deepseek.comwww.foodnetwork.comwww.google.comwww.googleapis.comwww.gstatic.comwww.linkedin.comwww.minimax.iowww.reddit.comwww.w3.orgx.aix.comz.ai

</> First-Party Code

first-party (rust): apps/examples/desktop-app/src-tauri

rust first-party
expand_more 4 low-confidence finding(s)
low env_fs test-only #ba26f3fcd8d8cb19 — Environment-variable access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:200 
    let explicit = std::env::var("CLINE_CODE_SIDECAR_BIN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #933d40ff36a9b30c — Environment-variable access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:364 
    if let Ok(value) = std::env::var("CLINE_MCP_SETTINGS_PATH") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1fd40af0563fd631 — Environment-variable access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:370 
    let home = std::env::var("HOME").map_err(|_| "HOME is not set".to_string())?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3772eb2fed49d858 — Filesystem access.
repo/apps/examples/desktop-app/src-tauri/src/main.rs:469 
        fs::write(&settings_path, body)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

rfd

rust dependency
expand_more 9 low-confidence finding(s)
low env_fs dependency Excluded from app score #869615733979e755 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:2 
    let target_os = std::env::var("CARGO_CFG_TARGET_OS").expect("target OS not detected");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #57c29a636f5b7877 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:8 
            let gtk = std::env::var_os("CARGO_FEATURE_GTK3").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #594d9b587f170661 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:9 
            let xdg = std::env::var_os("CARGO_FEATURE_XDG_PORTAL").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4e7c42ac4db6827 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:18 
                let tokio = std::env::var_os("CARGO_FEATURE_TOKIO").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b40fe1c81fa4f987 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:19 
                let async_std = std::env::var_os("CARGO_FEATURE_ASYNC_STD").is_some();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #21764c31813d7ae9 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/backend/macos/utils/user_alert.rs:183 
            log::error!("UserAler result send error: {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #0f5b09fc91d22cdf — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/backend/macos/utils/user_alert.rs:191 
                log::error!("UserAler error: {err}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #71afba52fc7b74f2 — Filesystem access.
pkgs/rust/[email protected]/src/file_handle/native.rs:29 
                    let res = std::fs::read(path);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #afe43d5821411bc5 — Filesystem access.
pkgs/rust/[email protected]/src/file_handle/native.rs:82 
                    let res = std::fs::write(path, bytes);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

serde

rust dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #609351adda2b965b — Environment-variable access.
pkgs/rust/[email protected]/build.rs:24 
    let out_dir = PathBuf::from(env::var_os("OUT_DIR").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c856ebfbffcce053 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:25 
    let patch_version = env::var("CARGO_PKG_VERSION_PATCH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #c29458ae00eb2d36 — Filesystem access.
pkgs/rust/[email protected]/build.rs:27 
    fs::write(out_dir.join("private.rs"), module).unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b51b214e18f39441 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:61 
    let rustc = env::var_os("RUSTC")?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

serde_json

rust dependency
expand_more 2 low-confidence finding(s)
low env_fs dependency Excluded from app score #49c92d591a2a0239 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:10 
    let target_arch = env::var_os("CARGO_CFG_TARGET_ARCH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #8e8bf7efbebf728d — Environment-variable access.
pkgs/rust/[email protected]/build.rs:11 
    let target_pointer_width = env::var_os("CARGO_CFG_TARGET_POINTER_WIDTH").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

tauri

rust dependency
expand_more 42 low-confidence finding(s)
low env_fs dependency Excluded from app score #e7c1b93bf4286b1e — Environment-variable access.
pkgs/rust/[email protected]/build.rs:241 
  std::env::var(format!("CARGO_FEATURE_{}", AsShoutySnakeCase(feature)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #4c16bb0c3db75b45 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:263 
  let target_os = std::env::var("CARGO_CFG_TARGET_OS").unwrap();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #19619f135d6e0d23 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:268 
  let out_dir = PathBuf::from(env::var("OUT_DIR").unwrap());

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b90af1913ed5d7cc — Filesystem access.
pkgs/rust/[email protected]/build.rs:271 
  std::fs::write(
    checked_features_out_path,
    CHECKED_FEATURES.get().unwrap().lock().unwrap().join(","),
  )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #b4ac9f381ae27c29 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:279 
  let target_env = std::env::var("CARGO_CFG_TARGET_ENV");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #68f24be342889e6b — Environment-variable access.
pkgs/rust/[email protected]/build.rs:280 
  let is_tauri_workspace = std::env::var("__TAURI_WORKSPACE__").is_ok_and(|v| v == "true");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #884bb843392165a4 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:287 
      std::env::var(var).unwrap_or_else(|_| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5f3b772783be311b — Environment-variable access.
pkgs/rust/[email protected]/build.rs:292 
    if let Ok(kotlin_out_dir) = std::env::var("WRY_ANDROID_KOTLIN_FILES_OUT_DIR") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #f3d4dedd249865a2 — Filesystem access.
pkgs/rust/[email protected]/build.rs:311 
        let content = fs::read_to_string(file.path())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #dd3de7003fde10ad — Environment-variable access.
pkgs/rust/[email protected]/build.rs:324 
    if let Some(project_dir) = env::var_os("TAURI_ANDROID_PROJECT_PATH").map(PathBuf::from) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #9ab4b4dcd1c43641 — Environment-variable access.
pkgs/rust/[email protected]/build.rs:325 
      let package_unescaped = env::var("TAURI_ANDROID_PACKAGE_UNESCAPED")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #5623319a4541c52c — Filesystem access.
pkgs/rust/[email protected]/build.rs:329 
      std::fs::write(
        project_dir.join("app").join("proguard-tauri.pro"),
        tauri_proguard,
      )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #504ebda58dea3daf — Environment-variable access.
pkgs/rust/[email protected]/build.rs:337 
      PathBuf::from(std::env::var_os("CARGO_MANIFEST_DIR").unwrap()).join("mobile/android");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e45b420acc735bdb — Environment-variable access.
pkgs/rust/[email protected]/build.rs:345 
        PathBuf::from(std::env::var_os("CARGO_MANIFEST_DIR").unwrap()).join("mobile/ios-api");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs dependency Excluded from app score #e9e8901907835ad1 — Filesystem access.
pkgs/rust/[email protected]/src/app.rs:361 
        return std::fs::read(asset_path).ok().map(|bytes| {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #2db1b15a46940b9f — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:576 
      log::error!("failed to exit: {}", e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b29598e0ab383260 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:590 
      log::debug!("restart triggered on the main thread");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b4ba674980fdf4c2 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:594 
      log::debug!("restart triggered from a separate thread");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #d8aedd87e974064e — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/app.rs:606 
          log::error!("failed to request exit: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #054e07a3259ed346 — Filesystem access.
pkgs/rust/[email protected]/src/image/mod.rs:97 
    let bytes = std::fs::read(path)?;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #7fc4c8c805232951 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:74 
            log::debug!("Unknown CspHash variant encountered: {:?}", _csp_hash);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #b00f3cc3d4606263 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:409 
        log::debug!("Asset `{path}` not found; fallback to {path}.html");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #f680fdfae2df28f7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:416 
        log::debug!("Asset `{path}` not found; fallback to {path}/index.html",);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #40d1590fc8c18c79 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:423 
        log::debug!("Asset `{path}` not found; fallback to index.html");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #c4b4ef1b11a1fa42 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/manager/mod.rs:431 
        log::error!("{error}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #ca3f453f74384bf8 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/path/android.rs:54 
          log::error!("failed to get file name from URI: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #bcd5c15e40911cf3 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/process.rs:84 
      log::error!("failed to restart app: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #e17b79ba0f45e8f4 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/process.rs:122 
            log::error!("failed to restart app: {e}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #1341c1a3ecd2fb00 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:42 
    log::error!("asset protocol path \"{}\" is not valid: {}", path, e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #a5293889232308c7 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:47 
    log::error!("asset protocol not configured to allow the path: {}", path);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low env_fs dependency Excluded from app score #dff333ad50292eed — Filesystem access.
pkgs/rust/[email protected]/src/protocol/asset.rs:52 
  let mut file = match File::open(path.clone()) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low telemetry dependency Excluded from app score #388fa0194998f0b1 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:58 
          log::error!("Failed to open Android external storage file '{}': {}. This may be due to missing storage permissions.", path, e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #0a490a21c4bc6088 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:62 
        log::error!("File does not exist at path: {}", path);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #de1a5b37baf9738d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/asset.rs:65 
        log::error!("Missing OS permission to access path \"{}\": {}", path, e);

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #f9998478f27ac1de — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:133 
          log::info!("adding dev server root certificate");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #fd26bc679bd4586d — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:145 
          log::warn!(
            "the dev root-certificate-path option was provided, but you must enable one of the following Tauri features in Cargo.toml: native-tls, native-tls-vendored, rustls-tls"
          );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #23895f127a6638be — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:150 
        log::warn!(
          "loading HTTPS URL; you might need to provide a certificate via the `dev --root-certificate-path` option. You must enable one of the following Tauri features in Cargo.toml: native-tls, native-tls-vendored, rustls-tls"
        );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #323c7e4d26171c07 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/protocol/tauri.rs:206 
        log::error!("{error_message}");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #3127fb71565b58d3 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:396 
          tracing::error!("failed to resolve data directory");

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #eb4bd66649a95001 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:403 
              tracing::error!(
                "data_directory `{}` is not a safe path, ignoring config. Validation error was: {_err}",
                data_directory.display()
              );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #a2715ffd958c1b29 — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:416 
              tracing::error!(
                "data_directory `{}` is not a relative path, ignoring config.",
                data_directory.display()
              );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
low telemetry dependency Excluded from app score #eb099921052882ce — Log/trace emission. Structured logs can carry PII to sinks/aggregators.
pkgs/rust/[email protected]/src/webview/mod.rs:1750 
      tracing::error!(
        "__TAURI_INVOKE_KEY__ expected {expected} but received {}",
        request.invoke_key
      );

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

Skipped dependencies

Production

  • @cline/shared prod — dist-only: no readable source
  • @cline/llms prod — dist-only: no readable source
  • @cline/agents prod — dist-only: no readable source
  • @cline/core prod — dist-only: no readable source
  • @types/uuid prod — no javascript source
  • @chat-adapter/discord prod — dist-only: no readable source
  • @chat-adapter/gchat prod — dist-only: no readable source
  • @chat-adapter/slack prod — dist-only: no readable source
  • @chat-adapter/linear prod — dist-only: no readable source
  • @chat-adapter/telegram prod — dist-only: no readable source
  • @chat-adapter/whatsapp prod — dist-only: no readable source
  • @cline/cline-hub prod — registry 404
  • @clack/prompts prod — dist-only: no readable source
  • @fontsource/azeret-mono prod — no javascript source
  • @radix-ui/react-slider prod — dist-only: no readable source
  • @radix-ui/react-slot prod — dist-only: no readable source
  • @radix-ui/react-switch prod — dist-only: no readable source
  • @radix-ui/react-tooltip prod — dist-only: no readable source
  • class-variance-authority prod — dist-only: no readable source
  • framer-motion prod — dist-only: no readable source
  • fuse.js prod — dist-only: no readable source
  • magic-string prod — dist-only: no readable source
  • mermaid prod — dist-only: no readable source
  • react-textarea-autosize prod — dist-only: no readable source
  • react-virtuoso prod — dist-only: no readable source
  • @fontsource-variable/schibsted-grotesk prod — no javascript source
  • @radix-ui/react-use-controllable-state prod — dist-only: no readable source
  • @rive-app/react-webgl2 prod — dist-only: no readable source
  • @shikijs/langs prod — dist-only: no readable source
  • @shikijs/themes prod — dist-only: no readable source
  • @streamdown/cjk prod — dist-only: no readable source
  • @xyflow/react prod — dist-only: no readable source
  • cmdk prod — dist-only: no readable source
  • motion prod — dist-only: no readable source
  • next-themes prod — dist-only: no readable source
  • react-jsx-parser prod — dist-only: no readable source
  • shadcn prod — dist-only: no readable source
  • shiki prod — dist-only: no readable source
  • sonner prod — dist-only: no readable source
  • streamdown prod — dist-only: no readable source
  • tokenlens prod — dist-only: no readable source