Close Open Privacy Scan

bolt Snapshot: commit 93b7b7d
science engine v1.22
schedule 2026-07-21T21:08:26.027168+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

smart_toy MCP server detected: @modelcontextprotocol/sdk — detected in dependencies, not a safety judgment.

App Privacy Score

87 /100
Low privacy risk

Low risk · 1301 finding(s)

Dependency score: 82 (Low risk)

bar_chart Score Breakdown

egress −10
env_fs −3

list Scan Summary

0 high 0 medium 1301 low
First-party packages: 2
Dependency packages: 9
Ecosystem: npm

swap_horiz External domains

base-ui.comdatabase.windows.netdbhub.aigithub.comjson-schema.orgreact.devreactjs.orgwww.w3.org

</> First-Party Code

first-party (npm)

npm first-party
expand_more 366 low-confidence finding(s)
low env_fs test-only Excluded from app score #81e6b95439fbda13 Filesystem access.
repo/scripts/build-mcpb.mjs:72
const manifest = JSON.parse(readFileSync(join(root, "mcpb", "manifest.json"), "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5cb7502e2b938497 Filesystem access.
repo/scripts/build-mcpb.mjs:74
writeFileSync(join(bundleDir, "manifest.json"), JSON.stringify(manifest, null, 2) + "\n");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #96bc5f9b6beb7541 Filesystem access.
repo/scripts/build-mcpb.mjs:82
writeFileSync(
  join(bundleDir, "package.json"),
  JSON.stringify(
    {
      name: "dbhub-mcpb",
      version: bundleVersion,
      private: true,
      type: "module",
      description: "Staged MCP Bundle contents for DBHub (generated by scripts/build-mcpb.mjs)",
      dependencies,
    },
    null,
    2
  ) + "\n"
);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7cc0e0c825d0e70e Filesystem access.
repo/scripts/mcpb-common.mjs:8
export const rootPkg = JSON.parse(readFileSync(join(root, "package.json"), "utf-8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0a1bb2edf2f26a2c Environment-variable access.
repo/scripts/mcpb-common.mjs:11
export const bundleVersion = process.env.MCPB_VERSION || rootPkg.version;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a059b7b26a964457 Filesystem access.
repo/src/__fixtures__/helpers.ts:13
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #88558c33affc9331 Filesystem access.
repo/src/__tests__/http-bind-host.integration.test.ts:3
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #75ae083a4e0e1c65 Filesystem access.
repo/src/__tests__/json-rpc-integration.test.ts:3
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only Excluded from app score #925090a060aab425 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/__tests__/json-rpc-integration.test.ts:64
        const response = await fetch(`${baseUrl}/mcp`, {
          method: 'POST',
          headers: {
            'Content-Type': 'application/json',
            'Accept': 'application/json, text/event-stream'
          },
          body: JSON.stringify({
            jsonrpc: '2.0',
            id: 'health-check',
            method: 'notifications/initialized'
          })
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #fd5f633a6572eb68 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/__tests__/json-rpc-integration.test.ts:157
    const response = await fetch(`${baseUrl}/mcp`, {
      method: 'POST',
      headers: {
        'Content-Type': 'application/json',
        'Accept': 'application/json, text/event-stream',
      },
      body: JSON.stringify({
        jsonrpc: '2.0',
        id: Math.random().toString(36).substr(2, 9),
        method: 'tools/call',
        params: {
          name: method,
          arguments: params
        }
      })
    });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #bc1a8b42c248c59f Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/__tests__/json-rpc-integration.test.ts:354
      const response = await fetch(`${baseUrl}/mcp`, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
          'Accept': 'application/json, text/event-stream',
        },
        body: JSON.stringify({
          // Missing required jsonrpc field
          id: 'test',
          method: 'tools/call',
          params: {
            name: 'execute_sql',
            arguments: { sql: 'SELECT 1' }
          }
        })
      });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #865609a915692d24 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/api/__tests__/requests.integration.test.ts:156
      const response = await fetch(
        `${BASE_URL}/api/requests?source_id=${encodeURIComponent("db_with_underscore")}`
      );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #099eef61c483273b Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/api/__tests__/sources.integration.test.ts:278
      const response = await fetch(`${BASE_URL}/api/sources/${encodeURIComponent('readonly_limited')}`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only Excluded from app score #34371a0c6182fbc7 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/api/__tests__/sources.integration.test.ts:336
      const response = await fetch(`${BASE_URL}/api/sources/${encodeURIComponent(specialId)}`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only Excluded from app score #38e83ac328427769 Filesystem access.
repo/src/config/__tests__/env.test.ts:2
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #84766b9d658c7034 Environment-variable access.
repo/src/config/__tests__/env.test.ts:19
    delete process.env.DB_TYPE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fe186cb7fabcd956 Environment-variable access.
repo/src/config/__tests__/env.test.ts:20
    delete process.env.DB_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #025d23ae2e0d6e3c Environment-variable access.
repo/src/config/__tests__/env.test.ts:21
    delete process.env.DB_PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bbb730deb24690ca Environment-variable access.
repo/src/config/__tests__/env.test.ts:22
    delete process.env.DB_USER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7c92aef6951427bc Environment-variable access.
repo/src/config/__tests__/env.test.ts:23
    delete process.env.DB_PASSWORD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #70dab8cf7da628c6 Environment-variable access.
repo/src/config/__tests__/env.test.ts:24
    delete process.env.DB_NAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c7117a94ded8d8b6 Environment-variable access.
repo/src/config/__tests__/env.test.ts:25
    delete process.env.DSN;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #733b0e7b5e61d57c Environment-variable access.
repo/src/config/__tests__/env.test.ts:26
    delete process.env.ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #edbd9ad25a33a7e9 Environment-variable access.
repo/src/config/__tests__/env.test.ts:36
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d8dac6db02c67b90 Environment-variable access.
repo/src/config/__tests__/env.test.ts:37
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b22b7893b9bb9b68 Environment-variable access.
repo/src/config/__tests__/env.test.ts:38
      process.env.DB_PORT = '5432';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #37dc540595310229 Environment-variable access.
repo/src/config/__tests__/env.test.ts:39
      process.env.DB_USER = 'testuser';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6c527b79d3174635 Environment-variable access.
repo/src/config/__tests__/env.test.ts:40
      process.env.DB_PASSWORD = 'testpass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #474d5f10c5f08239 Environment-variable access.
repo/src/config/__tests__/env.test.ts:41
      process.env.DB_NAME = 'testdb';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #55e24a317d9f69cd Environment-variable access.
repo/src/config/__tests__/env.test.ts:52
      process.env.DB_TYPE = 'mysql';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be608cccec1d0781 Environment-variable access.
repo/src/config/__tests__/env.test.ts:53
      process.env.DB_HOST = 'mysql.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8f57bac8a55f8ed1 Environment-variable access.
repo/src/config/__tests__/env.test.ts:54
      process.env.DB_USER = 'admin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #777375fa0133a475 Environment-variable access.
repo/src/config/__tests__/env.test.ts:55
      process.env.DB_PASSWORD = 'secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #58d3baf5aae3b75d Environment-variable access.
repo/src/config/__tests__/env.test.ts:56
      process.env.DB_NAME = 'myapp';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b51e0ed0d7136d8 Environment-variable access.
repo/src/config/__tests__/env.test.ts:67
      process.env.DB_TYPE = 'mariadb';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #73d222a4a4b503a4 Environment-variable access.
repo/src/config/__tests__/env.test.ts:68
      process.env.DB_HOST = 'mariadb.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bd00302c8a101802 Environment-variable access.
repo/src/config/__tests__/env.test.ts:69
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #415e4ebdf4daeeca Environment-variable access.
repo/src/config/__tests__/env.test.ts:70
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01738d40f0081676 Environment-variable access.
repo/src/config/__tests__/env.test.ts:71
      process.env.DB_NAME = 'database';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e253ef04215d83bc Environment-variable access.
repo/src/config/__tests__/env.test.ts:82
      process.env.DB_TYPE = 'sqlserver';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a00d9226401d6ccd Environment-variable access.
repo/src/config/__tests__/env.test.ts:83
      process.env.DB_HOST = 'sqlserver.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c10eef86dbbd654d Environment-variable access.
repo/src/config/__tests__/env.test.ts:84
      process.env.DB_USER = 'sa';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2cbcbf7593e2c4a3 Environment-variable access.
repo/src/config/__tests__/env.test.ts:85
      process.env.DB_PASSWORD = 'strongpass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3031a3399d7ee9be Environment-variable access.
repo/src/config/__tests__/env.test.ts:86
      process.env.DB_NAME = 'master';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #532c4191e7757ee7 Environment-variable access.
repo/src/config/__tests__/env.test.ts:97
      process.env.DB_TYPE = 'sqlite';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2b287cc3a1a4654a Environment-variable access.
repo/src/config/__tests__/env.test.ts:98
      process.env.DB_NAME = '/path/to/database.db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4cadb4293088d9b5 Environment-variable access.
repo/src/config/__tests__/env.test.ts:109
      process.env.DB_TYPE = 'postgresql';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f29f82b134595cfd Environment-variable access.
repo/src/config/__tests__/env.test.ts:110
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #94d0745657b8fb59 Environment-variable access.
repo/src/config/__tests__/env.test.ts:111
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b92902fbc9da8c0e Environment-variable access.
repo/src/config/__tests__/env.test.ts:112
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0899d373f567f219 Environment-variable access.
repo/src/config/__tests__/env.test.ts:113
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #542736baade50c47 Environment-variable access.
repo/src/config/__tests__/env.test.ts:121
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e2a3cc8200cc3a2 Environment-variable access.
repo/src/config/__tests__/env.test.ts:122
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8c082c47c2dc3336 Environment-variable access.
repo/src/config/__tests__/env.test.ts:123
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #75860621f4761bfc Environment-variable access.
repo/src/config/__tests__/env.test.ts:124
      process.env.DB_PASSWORD = 'test@pass:with/special#chars&more=special';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d8a1cb0e22e8fe25 Environment-variable access.
repo/src/config/__tests__/env.test.ts:125
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fd4fbe261dec8a9b Environment-variable access.
repo/src/config/__tests__/env.test.ts:135
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4948dd04556a1cd4 Environment-variable access.
repo/src/config/__tests__/env.test.ts:136
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #81a8099831bb1edb Environment-variable access.
repo/src/config/__tests__/env.test.ts:137
      process.env.DB_USER = '[email protected]';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #893f0da81923045a Environment-variable access.
repo/src/config/__tests__/env.test.ts:138
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b3710f9262470d8 Environment-variable access.
repo/src/config/__tests__/env.test.ts:139
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #80fdaee2e935f83f Environment-variable access.
repo/src/config/__tests__/env.test.ts:149
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0e0040c988d8741a Environment-variable access.
repo/src/config/__tests__/env.test.ts:150
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #037f4ab633d6c194 Environment-variable access.
repo/src/config/__tests__/env.test.ts:151
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2166c827364f059d Environment-variable access.
repo/src/config/__tests__/env.test.ts:152
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #344a2d85e3a3d914 Environment-variable access.
repo/src/config/__tests__/env.test.ts:153
      process.env.DB_NAME = 'my-db@test';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c098aab4b1ce60dd Environment-variable access.
repo/src/config/__tests__/env.test.ts:163
      process.env.DB_TYPE = 'sqlite';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #150a8fd241f84d91 Environment-variable access.
repo/src/config/__tests__/env.test.ts:164
      process.env.DB_NAME = '/tmp/test_db@#$.db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9e2c5c382975ed62 Environment-variable access.
repo/src/config/__tests__/env.test.ts:175
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a44e76b79b466636 Environment-variable access.
repo/src/config/__tests__/env.test.ts:176
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0785322ceb1e9d50 Environment-variable access.
repo/src/config/__tests__/env.test.ts:185
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d9965ff0e7996d87 Environment-variable access.
repo/src/config/__tests__/env.test.ts:186
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #540c3134fd4a933e Environment-variable access.
repo/src/config/__tests__/env.test.ts:187
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #11f80c172f92f27e Environment-variable access.
repo/src/config/__tests__/env.test.ts:188
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #481108627fe5b1f3 Environment-variable access.
repo/src/config/__tests__/env.test.ts:196
      process.env.DB_TYPE = 'sqlite';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #651302739a13c445 Environment-variable access.
repo/src/config/__tests__/env.test.ts:205
      process.env.DB_TYPE = 'oracle';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7b5065604dddde61 Environment-variable access.
repo/src/config/__tests__/env.test.ts:206
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bbdfbd3a30d0e299 Environment-variable access.
repo/src/config/__tests__/env.test.ts:207
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4e17b3a7e6bd81e3 Environment-variable access.
repo/src/config/__tests__/env.test.ts:208
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #92c7a7d77e3bb7e9 Environment-variable access.
repo/src/config/__tests__/env.test.ts:209
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1b2110c20156e26c Environment-variable access.
repo/src/config/__tests__/env.test.ts:217
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e446b39d6e332a96 Environment-variable access.
repo/src/config/__tests__/env.test.ts:218
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #34cdd9be11f61a59 Environment-variable access.
repo/src/config/__tests__/env.test.ts:219
      process.env.DB_PORT = '9999';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ccb3c1787b774097 Environment-variable access.
repo/src/config/__tests__/env.test.ts:220
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a6f8034cae7e2c2d Environment-variable access.
repo/src/config/__tests__/env.test.ts:221
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4b3690d707dd04ca Environment-variable access.
repo/src/config/__tests__/env.test.ts:222
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e47d78d89c05ec09 Environment-variable access.
repo/src/config/__tests__/env.test.ts:230
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b2acd66aa11e550b Environment-variable access.
repo/src/config/__tests__/env.test.ts:231
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4f3a5ce86f36a699 Environment-variable access.
repo/src/config/__tests__/env.test.ts:232
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ffb9fe79fca2f64 Environment-variable access.
repo/src/config/__tests__/env.test.ts:233
      process.env.DB_PASSWORD = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #55c82601af623994 Environment-variable access.
repo/src/config/__tests__/env.test.ts:234
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea68dcf15f65f7ff Environment-variable access.
repo/src/config/__tests__/env.test.ts:244
      process.env.DSN = 'postgres://direct:dsn@localhost:5432/directdb';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d8142e545f5c5da8 Environment-variable access.
repo/src/config/__tests__/env.test.ts:245
      process.env.DB_TYPE = 'mysql';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #02e55a581111bbe7 Environment-variable access.
repo/src/config/__tests__/env.test.ts:246
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7c7ad2db40ec82d9 Environment-variable access.
repo/src/config/__tests__/env.test.ts:247
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5699cf50cb434c74 Environment-variable access.
repo/src/config/__tests__/env.test.ts:248
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9530fde7b792d93d Environment-variable access.
repo/src/config/__tests__/env.test.ts:249
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6e190b7a770a35a6 Environment-variable access.
repo/src/config/__tests__/env.test.ts:260
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cc7a5e1fada87555 Environment-variable access.
repo/src/config/__tests__/env.test.ts:261
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7e33f9bac7e24ee7 Environment-variable access.
repo/src/config/__tests__/env.test.ts:262
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #18148a1f6cbbffdf Environment-variable access.
repo/src/config/__tests__/env.test.ts:263
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #58bacf2700c81f63 Environment-variable access.
repo/src/config/__tests__/env.test.ts:264
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1f1feb847d186cdf Environment-variable access.
repo/src/config/__tests__/env.test.ts:275
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #557149723357078f Environment-variable access.
repo/src/config/__tests__/env.test.ts:276
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e6410ee2c5ca77bc Environment-variable access.
repo/src/config/__tests__/env.test.ts:285
      process.env.DB_TYPE = 'sqlite';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f3465844e307c7d1 Environment-variable access.
repo/src/config/__tests__/env.test.ts:286
      process.env.DB_NAME = ':memory:';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3c9a4deb500e6d0a Environment-variable access.
repo/src/config/__tests__/env.test.ts:299
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a4c361269007f66e Environment-variable access.
repo/src/config/__tests__/env.test.ts:300
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ec20a21f94d29b52 Environment-variable access.
repo/src/config/__tests__/env.test.ts:301
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #07b4ee18ce1b3be8 Environment-variable access.
repo/src/config/__tests__/env.test.ts:302
      process.env.DB_PASSWORD = '!@#$%^&*()+={}[]|\\:";\'<>?,./~`';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e2895fca486142d7 Environment-variable access.
repo/src/config/__tests__/env.test.ts:303
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bba723fdb5e48dad Environment-variable access.
repo/src/config/__tests__/env.test.ts:318
      process.env.DB_TYPE = 'postgres';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0ac732f1298b761d Environment-variable access.
repo/src/config/__tests__/env.test.ts:319
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1364a45b1e367360 Environment-variable access.
repo/src/config/__tests__/env.test.ts:320
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #37ef4948707f24b7 Environment-variable access.
repo/src/config/__tests__/env.test.ts:321
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8e6a57dfb2e65f18 Environment-variable access.
repo/src/config/__tests__/env.test.ts:322
      process.env.DB_NAME = 'тест_база_данных'; // Cyrillic characters

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d92d09f9b9f68a53 Environment-variable access.
repo/src/config/__tests__/env.test.ts:331
      process.env.DB_TYPE = 'POSTGRES';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1c9110939d6ad9c5 Environment-variable access.
repo/src/config/__tests__/env.test.ts:332
      process.env.DB_HOST = 'localhost';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #582e36fa5bfb81b0 Environment-variable access.
repo/src/config/__tests__/env.test.ts:333
      process.env.DB_USER = 'user';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7716682cb70b29cd Environment-variable access.
repo/src/config/__tests__/env.test.ts:334
      process.env.DB_PASSWORD = 'pass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e26e2ab851e80acb Environment-variable access.
repo/src/config/__tests__/env.test.ts:335
      process.env.DB_NAME = 'db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9a01abbee205a354 Environment-variable access.
repo/src/config/__tests__/env.test.ts:366
      process.env.ID = 'prod';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2317f1173e205e73 Environment-variable access.
repo/src/config/__tests__/env.test.ts:377
      process.env.ID = 'staging-db-01';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5b403c3f2e2c2394 Environment-variable access.
repo/src/config/__tests__/env.test.ts:388
      process.env.ID = '123';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cb5a72e0791c6915 Environment-variable access.
repo/src/config/__tests__/env.test.ts:403
      delete process.env.HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #374f89ae40299803 Environment-variable access.
repo/src/config/__tests__/env.test.ts:404
      delete process.env.DBHUB_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c56fe08baa09947e Environment-variable access.
repo/src/config/__tests__/env.test.ts:419
      process.env.DBHUB_HOST = '127.0.0.1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4dfa3012d8f50b04 Environment-variable access.
repo/src/config/__tests__/env.test.ts:427
      process.env.HOST = 'my-laptop.local';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #55eedabca501c92d Environment-variable access.
repo/src/config/__tests__/env.test.ts:451
      process.env.DBHUB_HOST = '0.0.0.0';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9816a0dbdec69345 Environment-variable access.
repo/src/config/__tests__/env.test.ts:460
      process.env.DBHUB_HOST = '';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e2afd68296367e3e Environment-variable access.
repo/src/config/__tests__/env.test.ts:472
      process.env.DBHUB_HOST = '   ';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ce4813534d716fb2 Environment-variable access.
repo/src/config/__tests__/env.test.ts:480
      process.env.DBHUB_HOST = '  127.0.0.1  ';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5b66a31373af808d Environment-variable access.
repo/src/config/__tests__/env.test.ts:488
      process.env.DBHUB_HOST = '::1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f0e15c7639d9f660 Environment-variable access.
repo/src/config/__tests__/env.test.ts:663
      process.env.DSN = 'postgres://user:pass@localhost:5432/mydb';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a785fbc24dcdd532 Filesystem access.
repo/src/config/__tests__/env.test.ts:676
      fs.writeFileSync(path.join(dir, '.env'), 'DSN_FROM_ENV_FILE=sqlite://interpolated.db\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b86fda47250c6e6a Environment-variable access.
repo/src/config/__tests__/env.test.ts:684
        expect(process.env.DSN_FROM_ENV_FILE).toBe('sqlite://interpolated.db');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1cad94bd66f9121f Environment-variable access.
repo/src/config/__tests__/env.test.ts:687
        delete process.env.DSN_FROM_ENV_FILE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d29366c28444243c Environment-variable access.
repo/src/config/__tests__/env.test.ts:695
      process.env.DB_TYPE = 'sqlite';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ba66fe519de05ea Environment-variable access.
repo/src/config/__tests__/env.test.ts:696
      process.env.DB_NAME = 'test.db';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ff9697f9a4ee03ef Environment-variable access.
repo/src/config/__tests__/ssh-config-integration.test.ts:30
    delete process.env.SSH_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #01ba3c208e0484f7 Environment-variable access.
repo/src/config/__tests__/ssh-config-integration.test.ts:31
    delete process.env.SSH_USER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #823ab4bbd7013540 Environment-variable access.
repo/src/config/__tests__/ssh-config-integration.test.ts:32
    delete process.env.SSH_PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #95fb5663bee958fe Environment-variable access.
repo/src/config/__tests__/ssh-config-integration.test.ts:33
    delete process.env.SSH_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #53c24c31758ae090 Environment-variable access.
repo/src/config/__tests__/ssh-config-integration.test.ts:34
    delete process.env.SSH_PASSWORD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bfc3016ca45fe5fd Environment-variable access.
repo/src/config/__tests__/ssh-config-integration.test.ts:96
    process.env.SSH_HOST = 'mybastion';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8cb0d27f306a2885 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:4
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #05aad02fcff322f6 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:40
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d35f5938731f95f5 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:65
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #51d9860ae09cbd7e Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:85
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e6f1964106826580 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:105
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b3c2cef171e89bd5 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:130
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #995e7446c8427c0e Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:142
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2a3bcac826a0be81 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:160
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b34b0f18d225da8b Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:181
      fs.writeFileSync(customConfigPath, tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f8f17e1a11c8287c Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:230
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #03c4e4eb3f30170c Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:251
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #717b95529a9491df Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:270
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #848df9743fdfae36 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:286
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fd42719f8b3bd8d4 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:300
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #28927d692060db1d Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:309
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf5604cf72555e73 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:324
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9a4be3e9b5215668 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:334
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fb12c6e8cf438919 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:345
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #dc177aa0148a5d6c Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:357
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5299463ab5761bf1 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:373
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e1b397ae72ff878d Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:388
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e18c22bb36a6d230 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:407
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8c88332d8e3b2b8b Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:422
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6813f0102f85bb6a Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:434
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #840ca86889f9cb7b Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:446
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fb52af331baab9f9 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:460
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4071cbf572fe3816 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:477
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #43825ace7c54affb Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:491
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #346e1e776fe85427 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:512
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #acd637f88b35e3a3 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:531
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #179e78a08efc3e59 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:550
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #772114e499920ed6 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:562
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #15b3f37a2584a39b Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:574
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bbc1feb2809aae2b Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:588
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #de8880b912316d47 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:602
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a8d939e1ade63803 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:614
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #60dac16cca1bdea2 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:626
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #977536e6b9d41735 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:640
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7ca7df72358a6dbd Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:652
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3ec42e5f409bb846 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:666
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4a621f3a3aae07ff Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:679
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8ac9ba6298eb5359 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:691
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ddddb9286642e337 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:703
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1cce800f1ad63979 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:716
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5957864feaf597b0 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:727
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #056b3afee27f8a68 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:746
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c851547bd5a8e279 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:765
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e43cafbcdeab9a28 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:784
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6d7a4fff005a7613 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:800
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #56a438de4006aecf Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:816
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0e5334799748a2a5 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:823
        fs.writeFileSync(certPath, 'cert-content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #20e2420b4d95dfca Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:836
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #11e4dee88ac141c9 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:843
        fs.writeFileSync(certPath, 'cert-content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f25c909cb1ee11a5 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:855
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2535064c63b184d1 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:862
        fs.writeFileSync(certPath, 'cert-content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #764202493d1d0342 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:875
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #57c273590d17e89d Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:896
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aeb0c13dde114a2a Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:915
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #52eada98285731db Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:934
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7bb3895057edcbdf Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:954
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e5fdcad72eae05d5 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:970
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #70eb3742b6796c62 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:986
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7335d185b7874bf3 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1002
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6c1ea0590630932d Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1019
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a8708e41872d5b99 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1035
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #56e11cd64c78d6c3 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1048
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0c8406727f0c46db Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1061
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #50841a80f76516ba Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1083
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #658d04b284f90b5d Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1110
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #233e320b698eb20b Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1126
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #4b7209c9472ab89d Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1140
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #62bf3ec33a1e6ad8 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1155
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ad4e35c570ac2010 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1167
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8174fd4d9791948e Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1180
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cf19ea295c4f2434 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1198
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #5fd42e9b0c350e6d Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1213
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #50513f342d7dd562 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1228
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7261609d9bcfd2c0 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1241
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1b2efbf3a3ed0a2f Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1252
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9e5d27b3cc40a285 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1269
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c1ec7fc716d09c73 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1284
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #62d4ec0ae69e74d0 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1299
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f13b46dc77bd173c Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1311
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d94595301089bc20 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1325
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3befb090c3550c78 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1336
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #987a817ee658d84c Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1353
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0cdfda582e8feadf Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1368
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #8e996f308fa336ec Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1380
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #21786b1577dc2b15 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1392
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #08ef22eb2cef33b3 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1403
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cef905f3f228a3d1 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1420
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #cc262c97372f53c1 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1435
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3200f1ef6f7b25e6 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1450
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #60d8caacaa1a63ce Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1462
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #730b9378392b6f00 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1474
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a39ff6a6222ed50f Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1487
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c0b961610134c122 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:1502
        fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c2211232e1d30216 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2051
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f1d9de520dac7e5f Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2135
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7de5fb745679e036 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2159
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #68cb819dbac5913e Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2189
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be83345fd5e2dd8f Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2214
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2599d973ac98f357 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2250
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ab4124388f7bb558 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2276
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e73ab454cb7320cd Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2294
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #99e24a0706858a7c Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2312
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b79949d438d97ee1 Environment-variable access.
repo/src/config/__tests__/toml-loader.test.ts:2330
      process.env.TEST_DB_PASSWORD = 's3cret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #46cefc51ef53886d Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2336
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #23d3eea258936e1d Environment-variable access.
repo/src/config/__tests__/toml-loader.test.ts:2344
      process.env.TEST_DB_USER = 'admin';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #9afb87f24271b053 Environment-variable access.
repo/src/config/__tests__/toml-loader.test.ts:2345
      process.env.TEST_DB_PASSWORD = 'p@ss';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a7a65bfb3d4e3213 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2351
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #be4f4a0b3bba5179 Environment-variable access.
repo/src/config/__tests__/toml-loader.test.ts:2359
      process.env.TEST_DB_HOST = 'db.example.com';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #237d6b5d854671ca Environment-variable access.
repo/src/config/__tests__/toml-loader.test.ts:2360
      process.env.TEST_DB_PASSWORD = 'secret';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ce1ff9fe6592396a Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2370
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #7fc3b3a1e2201972 Environment-variable access.
repo/src/config/__tests__/toml-loader.test.ts:2379
      process.env.TEST_SSH_PASSWORD = 'sshpass';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d5f9ff2f8e28a519 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2388
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #ea4d8d90aae9c325 Environment-variable access.
repo/src/config/__tests__/toml-loader.test.ts:2396
      delete process.env.NONEXISTENT_VAR;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #93ba8154e002f553 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2402
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b1db08132be3086a Environment-variable access.
repo/src/config/__tests__/toml-loader.test.ts:2422
      process.env.TEST_SCHEMA = 'production';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #30d6dfa29cc259d9 Filesystem access.
repo/src/config/__tests__/toml-loader.test.ts:2434
      fs.writeFileSync(path.join(tempDir, 'dbhub.toml'), tomlContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #aac8b1515a7756b5 Filesystem access.
repo/src/config/demo-loader.ts:7
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10153ae4b5eae5b5 Filesystem access.
repo/src/config/demo-loader.ts:46
  return fs.readFileSync(filePath, "utf8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b0358b3d4b23e66 Filesystem access.
repo/src/config/env.ts:3
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #95b2a8c6f31c00bf Environment-variable access.
repo/src/config/env.ts:82
  const isDevelopment = process.env.NODE_ENV === "development" || process.argv[1]?.includes("tsx");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #be1c5ead259df3dc Environment-variable access.
repo/src/config/env.ts:120
    if (process.env.READONLY !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5b20d01f72d4c6de Environment-variable access.
repo/src/config/env.ts:134
    if (process.env.MAX_ROWS !== undefined) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8089390fcc833bbf Environment-variable access.
repo/src/config/env.ts:171
  const dbType = process.env.DB_TYPE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #36d57baa730239f9 Environment-variable access.
repo/src/config/env.ts:172
  const dbHost = process.env.DB_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8633493d89cd7ca0 Environment-variable access.
repo/src/config/env.ts:173
  const dbUser = process.env.DB_USER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e478f5e1d028db7e Environment-variable access.
repo/src/config/env.ts:174
  const dbPassword = process.env.DB_PASSWORD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #224380554f899ef2 Environment-variable access.
repo/src/config/env.ts:175
  const dbName = process.env.DB_NAME;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea4d59818ebf5a1a Environment-variable access.
repo/src/config/env.ts:176
  const dbPort = process.env.DB_PORT;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f130906ee6a11653 Environment-variable access.
repo/src/config/env.ts:264
  if (process.env.DSN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #462b1b98fc30e390 Environment-variable access.
repo/src/config/env.ts:265
    return { dsn: process.env.DSN, source: "environment variable" };

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c02933abc1ccf5fe Environment-variable access.
repo/src/config/env.ts:278
  if (loadedEnvFile && process.env.DSN) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0d00d1c003afc3cc Environment-variable access.
repo/src/config/env.ts:279
    return { dsn: process.env.DSN, source: `${loadedEnvFile} file` };

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b87c1516382aeb41 Environment-variable access.
repo/src/config/env.ts:311
  if (process.env.TRANSPORT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f9e66671adcdee7 Environment-variable access.
repo/src/config/env.ts:312
    const type = process.env.TRANSPORT === "http" ? "http" : "stdio";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24e6983a1c1d9eb6 Environment-variable access.
repo/src/config/env.ts:339
  if (process.env.PORT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7d85291187a10d3 Environment-variable access.
repo/src/config/env.ts:340
    const port = parseInt(process.env.PORT, 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a64f2c293f2c612e Environment-variable access.
repo/src/config/env.ts:422
  const envHost = process.env.DBHUB_HOST?.trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #86cbe3a61744d541 Environment-variable access.
repo/src/config/env.ts:453
  const envValue = process.env.DBHUB_ALLOWED_HOSTS?.trim();

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2a1a9856a3b002d8 Environment-variable access.
repo/src/config/env.ts:507
  if (process.env.ID) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e578b5fdcec89412 Environment-variable access.
repo/src/config/env.ts:508
    return { id: process.env.ID, source: "environment variable" };

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c1042b9647cbbba3 Environment-variable access.
repo/src/config/env.ts:523
  const hasSSHArgs = args["ssh-host"] || process.env.SSH_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #24981e483a5d4075 Environment-variable access.
repo/src/config/env.ts:538
  } else if (process.env.SSH_HOST) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #df61beaed8d262b7 Environment-variable access.
repo/src/config/env.ts:539
    sshConfigHost = process.env.SSH_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #35c32a24021cd3b4 Environment-variable access.
repo/src/config/env.ts:540
    config.host = process.env.SSH_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b45dec7af9f50295 Environment-variable access.
repo/src/config/env.ts:563
  } else if (process.env.SSH_PORT) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c2963363f6819f2 Environment-variable access.
repo/src/config/env.ts:564
    config.port = parseInt(process.env.SSH_PORT, 10);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #12289ef64f02dab5 Environment-variable access.
repo/src/config/env.ts:572
  } else if (process.env.SSH_USER) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f1ff82406c96bf38 Environment-variable access.
repo/src/config/env.ts:573
    config.username = process.env.SSH_USER;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bb9eb23f2037f2c0 Environment-variable access.
repo/src/config/env.ts:581
  } else if (process.env.SSH_PASSWORD) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #44b688b5a4417b32 Environment-variable access.
repo/src/config/env.ts:582
    config.password = process.env.SSH_PASSWORD;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #32261de7871a2322 Environment-variable access.
repo/src/config/env.ts:591
      config.privateKey = path.join(process.env.HOME || "", config.privateKey.substring(2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4606ae0f2c698057 Environment-variable access.
repo/src/config/env.ts:594
  } else if (process.env.SSH_KEY) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8755415c51a2f6e7 Environment-variable access.
repo/src/config/env.ts:595
    config.privateKey = process.env.SSH_KEY;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e8d0331073b8f488 Environment-variable access.
repo/src/config/env.ts:598
      config.privateKey = path.join(process.env.HOME || "", config.privateKey.substring(2));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f397cb8a5d2fd233 Environment-variable access.
repo/src/config/env.ts:607
  } else if (process.env.SSH_PASSPHRASE) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1db5fd50ca432701 Environment-variable access.
repo/src/config/env.ts:608
    config.passphrase = process.env.SSH_PASSPHRASE;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bbfdcce1230e990a Environment-variable access.
repo/src/config/env.ts:616
  } else if (process.env.SSH_PROXY_JUMP) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8bcb8301fa07b72b Environment-variable access.
repo/src/config/env.ts:617
    config.proxyJump = process.env.SSH_PROXY_JUMP;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #39bfb512e6140ab0 Environment-variable access.
repo/src/config/env.ts:633
  } else if (process.env.SSH_KEEPALIVE_INTERVAL) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14cc3266febd99c4 Environment-variable access.
repo/src/config/env.ts:634
    config.keepaliveInterval = parseNonNegativeInteger(process.env.SSH_KEEPALIVE_INTERVAL, "SSH_KEEPALIVE_INTERVAL");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a87f438819d0c839 Environment-variable access.
repo/src/config/env.ts:642
  } else if (process.env.SSH_KEEPALIVE_COUNT_MAX) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d52b0bf6e999b7a8 Environment-variable access.
repo/src/config/env.ts:643
    config.keepaliveCountMax = parseNonNegativeInteger(process.env.SSH_KEEPALIVE_COUNT_MAX, "SSH_KEEPALIVE_COUNT_MAX");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10d370367a05cee0 Filesystem access.
repo/src/config/toml-loader.ts:1
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c66bb5b4634314a2 Filesystem access.
repo/src/config/toml-loader.ts:22
    const fileContent = fs.readFileSync(configPath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e5269fb67bd8b202 Environment-variable access.
repo/src/config/toml-loader.ts:771
      const envValue = process.env[varName];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #0a58349fb50e334f Filesystem access.
repo/src/connectors/__tests__/connect-failure-cleanup.test.ts:2
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #2a621914f1e4e56e Filesystem access.
repo/src/connectors/__tests__/dsn-parser.test.ts:2
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1b4ca2ebbb23255f Filesystem access.
repo/src/connectors/__tests__/dsn-parser.test.ts:19
    fs.writeFileSync(certPath, '-----BEGIN CERTIFICATE-----\ntest\n-----END CERTIFICATE-----\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a00bc6917fb7823a Filesystem access.
repo/src/connectors/__tests__/dsn-parser.test.ts:71
    fs.writeFileSync(path.join(tempDir, 'ca.pem'), 'test-ca-content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #3b68930b7396898b Environment-variable access.
repo/src/connectors/__tests__/postgres-ssh.integration.test.ts:73
      delete process.env.SSH_HOST;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fd3a75bd6c8bd5d2 Filesystem access.
repo/src/connectors/__tests__/sqlite.integration.test.ts:5
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ec78bca50e1567a Filesystem access.
repo/src/connectors/postgres/index.ts:1
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e4ac08e55808ab66 Filesystem access.
repo/src/connectors/postgres/index.ts:95
            sslConfig.ca = await fs.promises.readFile(certPath, "utf-8");

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #00f86855bddfc556 Filesystem access.
repo/src/server.ts:7
import { readFileSync } from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c80138b11ecc50f4 Filesystem access.
repo/src/server.ts:27
const packageJson = JSON.parse(readFileSync(packageJsonPath, "utf8"));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a8c2d0419742f9e Environment-variable access.
repo/src/server.ts:259
      if (process.env.NODE_ENV !== 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4d10248f7a60ac8a Environment-variable access.
repo/src/server.ts:298
        if (process.env.NODE_ENV === 'development') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #1773e20687b5a661 Filesystem access.
repo/src/utils/__tests__/config-watcher.test.ts:2
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #938fda9d1d0e1e2a Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:3
import { mkdtempSync, writeFileSync, rmSync, symlinkSync, mkdirSync, realpathSync, unlinkSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f1fba57f860048e2 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:17
    writeFileSync(targetFile, 'test');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #567ca1f3af22a636 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:56
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #6ffc0b34af2d491e Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:68
      writeFileSync(identityPath, 'fake-key-content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bf45ccb5de5c7d61 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:76
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #205a0ba69cc14594 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:90
      writeFileSync(identityPath1, 'fake-key-1');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d36fb94f6103e141 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:91
      writeFileSync(identityPath2, 'fake-key-2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a2eea32768dfb259 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:100
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #f27c8ec6f906cddb Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:116
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #39b1bbeb38881d4a Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:131
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #85901f9d9b7a7b07 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:146
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #d940044f5310b6c4 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:162
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #bdd6868a266a8126 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:171
      writeFileSync(mockKeyPath, 'fake-key');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b0a2460897590400 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:179
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #25709b3db4fd8caf Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:211
      writeFileSync(filePath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a1fb092b23faed9d Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:220
      writeFileSync(targetPath, 'content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #fda0e28989946929 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:255
      writeFileSync(configFile, 'Host test\n  User testuser\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e5906b517ca0731c Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:275
      writeFileSync(join(targetDir, 'config'), configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #32841963a3f7c4c0 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:292
      writeFileSync(keyPath, 'fake-key-content');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #91490d9fcc06982d Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:303
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #b4354cb63f72874d Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:321
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #e3f5bd04e7eb3896 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:336
      writeFileSync(configPath, configContent);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a573ff95db861c9f Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:549
      writeFileSync(keyPath, '-----BEGIN OPENSSH PRIVATE KEY-----\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #aec289deb940d32e Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:550
      writeFileSync(configPath, `
Host mybastion
  HostName bastion.example.com
  User ubuntu
  Port 2200
  IdentityFile ${keyPath}

Host target-with-jump
  HostName 10.0.0.5
  User admin
  ProxyJump mybastion
`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #a9d20302348e38b2 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:572
      writeFileSync(keyPath, '-----BEGIN OPENSSH PRIVATE KEY-----\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #745002086a7a908b Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:573
      writeFileSync(configPath, `
Host bastion
  HostName bastion.example.com
  Port 2200
  IdentityFile ${keyPath}
`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c071ae3a357625b8 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:590
      writeFileSync(keyPath, '-----BEGIN OPENSSH PRIVATE KEY-----\n');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #756d278bea8ca8d6 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:591
      writeFileSync(configPath, `
Host bastion
  Port 2200
  IdentityFile ${keyPath}
`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #493f440a52583191 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:606
      writeFileSync(configPath, `
Host x
  HostName x.example.com
  User xu
Host a
  HostName a.example.com
  User au
  ProxyJump x
Host b
  HostName b.example.com
  User bu
`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #c0061d968ae2fde6 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:623
      writeFileSync(configPath, `
Host a
  HostName a.example.com
  User au
  ProxyJump b
Host b
  HostName b.example.com
  User bu
  ProxyJump a
`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #04d64fee2cb089c7 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:637
      writeFileSync(configPath, `Host unused\n  HostName u.example.com\n  User uu\n`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #99fb17dc2f01a28c Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:643
      writeFileSync(configPath, `
Host mybastion
  HostName bastion.example.com
  User ubuntu
  Port 2200
`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #449951fa9b625a98 Filesystem access.
repo/src/utils/__tests__/ssh-config-parser.test.ts:657
      writeFileSync(configPath, `
Host mybastion
  HostName bastion.example.com
  User ubuntu
`);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2dc167f8ae5b19f0 Filesystem access.
repo/src/utils/config-watcher.ts:1
import fs from "fs";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9657445efe9d46a0 Filesystem access.
repo/src/utils/ssh-config-parser.ts:1
import { readFileSync, realpathSync, statSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1361f924cde5fe95 Filesystem access.
repo/src/utils/ssh-config-parser.ts:128
    const configContent = readFileSync(sshConfigPath, 'utf8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #33e7faab468e5c1d Filesystem access.
repo/src/utils/ssh-tunnel.ts:2
import { readFileSync } from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f95286eaf789574 Filesystem access.
repo/src/utils/ssh-tunnel.ts:67
      return readFileSync(resolvedKeyPath);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only Excluded from app score #923f1beec8ddfafe Filesystem access.
repo/tsup.config.ts:2
import fs from 'fs';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (npm): frontend

npm first-party
expand_more 2 low-confidence finding(s)
low egress production #6d7aac8e483dd68b Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/frontend/src/api/requests.ts:12
    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress production #ecf63dc77ede1238 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/frontend/src/api/sources.ts:48
    const response = await fetch(`${API_BASE}/sources/${encodeURIComponent(sourceId)}`);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

</> Dependencies

@base-ui/react

npm dependency
expand_more 820 low-confidence finding(s)
low env_fs dependency Excluded from app score #a7b940fa2e0107f9 Environment-variable access.
pkgs/npm/@[email protected]/accordion/header/AccordionHeader.js:37
if (process.env.NODE_ENV !== "production") AccordionHeader.displayName = "AccordionHeader";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #edcdc15f755539ba Environment-variable access.
pkgs/npm/@[email protected]/accordion/header/AccordionHeader.mjs:32
if (process.env.NODE_ENV !== "production") AccordionHeader.displayName = "AccordionHeader";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fec6dc8becdc204 Environment-variable access.
pkgs/npm/@[email protected]/accordion/item/AccordionItem.js:113
if (process.env.NODE_ENV !== "production") AccordionItem.displayName = "AccordionItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85b9d32766c9d855 Environment-variable access.
pkgs/npm/@[email protected]/accordion/item/AccordionItem.mjs:107
if (process.env.NODE_ENV !== "production") AccordionItem.displayName = "AccordionItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8c39fa85f995886 Environment-variable access.
pkgs/npm/@[email protected]/accordion/item/AccordionItemContext.js:14
if (process.env.NODE_ENV !== "production") AccordionItemContext.displayName = "AccordionItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60d9db463ff284d8 Environment-variable access.
pkgs/npm/@[email protected]/accordion/item/AccordionItemContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: AccordionItemContext is missing. Accordion parts must be placed within <Accordion.Item>.' : (0, _formatErrorMessage2.default)(9));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9de02c2f8e5f88a2 Environment-variable access.
pkgs/npm/@[email protected]/accordion/item/AccordionItemContext.mjs:6
if (process.env.NODE_ENV !== "production") AccordionItemContext.displayName = "AccordionItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4fa1b5e8a35de08 Environment-variable access.
pkgs/npm/@[email protected]/accordion/item/AccordionItemContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: AccordionItemContext is missing. Accordion parts must be placed within <Accordion.Item>.' : _formatErrorMessage(9));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b5eb30c7ebd1016 Environment-variable access.
pkgs/npm/@[email protected]/accordion/panel/AccordionPanel.js:52
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c6a45c503679c7a Environment-variable access.
pkgs/npm/@[email protected]/accordion/panel/AccordionPanel.js:128
if (process.env.NODE_ENV !== "production") AccordionPanel.displayName = "AccordionPanel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69c7d3368ecd4a7e Environment-variable access.
pkgs/npm/@[email protected]/accordion/panel/AccordionPanel.mjs:46
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9825dfcf0c518b5 Environment-variable access.
pkgs/npm/@[email protected]/accordion/panel/AccordionPanel.mjs:122
if (process.env.NODE_ENV !== "production") AccordionPanel.displayName = "AccordionPanel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31e4166b82766d7a Environment-variable access.
pkgs/npm/@[email protected]/accordion/root/AccordionRoot.js:46
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6d9561cdf38e125 Environment-variable access.
pkgs/npm/@[email protected]/accordion/root/AccordionRoot.js:124
if (process.env.NODE_ENV !== "production") AccordionRoot.displayName = "AccordionRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a033d6d7d31e02bc Environment-variable access.
pkgs/npm/@[email protected]/accordion/root/AccordionRoot.mjs:40
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #671a05cd5111225d Environment-variable access.
pkgs/npm/@[email protected]/accordion/root/AccordionRoot.mjs:118
if (process.env.NODE_ENV !== "production") AccordionRoot.displayName = "AccordionRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a45bc4ddf31fef7 Environment-variable access.
pkgs/npm/@[email protected]/accordion/root/AccordionRootContext.js:14
if (process.env.NODE_ENV !== "production") AccordionRootContext.displayName = "AccordionRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #772abb2feae3137a Environment-variable access.
pkgs/npm/@[email protected]/accordion/root/AccordionRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: AccordionRootContext is missing. Accordion parts must be placed within <Accordion.Root>.' : (0, _formatErrorMessage2.default)(10));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95c156e9bfb14065 Environment-variable access.
pkgs/npm/@[email protected]/accordion/root/AccordionRootContext.mjs:6
if (process.env.NODE_ENV !== "production") AccordionRootContext.displayName = "AccordionRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60446a90edbe8fb9 Environment-variable access.
pkgs/npm/@[email protected]/accordion/root/AccordionRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: AccordionRootContext is missing. Accordion parts must be placed within <Accordion.Root>.' : _formatErrorMessage(10));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #902568b39d3f7548 Environment-variable access.
pkgs/npm/@[email protected]/accordion/trigger/AccordionTrigger.js:75
if (process.env.NODE_ENV !== "production") AccordionTrigger.displayName = "AccordionTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d590e798921932ec Environment-variable access.
pkgs/npm/@[email protected]/accordion/trigger/AccordionTrigger.mjs:70
if (process.env.NODE_ENV !== "production") AccordionTrigger.displayName = "AccordionTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea00b5f133574c35 Environment-variable access.
pkgs/npm/@[email protected]/avatar/fallback/AvatarFallback.js:55
if (process.env.NODE_ENV !== "production") AvatarFallback.displayName = "AvatarFallback";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50474ff0748c0c2e Environment-variable access.
pkgs/npm/@[email protected]/avatar/fallback/AvatarFallback.mjs:50
if (process.env.NODE_ENV !== "production") AvatarFallback.displayName = "AvatarFallback";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d29c8e14b62bbb24 Environment-variable access.
pkgs/npm/@[email protected]/avatar/image/AvatarImage.js:86
if (process.env.NODE_ENV !== "production") AvatarImage.displayName = "AvatarImage";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3aeb61475bcf79c3 Environment-variable access.
pkgs/npm/@[email protected]/avatar/image/AvatarImage.mjs:80
if (process.env.NODE_ENV !== "production") AvatarImage.displayName = "AvatarImage";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c98da3b686320fdc Environment-variable access.
pkgs/npm/@[email protected]/avatar/root/AvatarRoot.js:46
if (process.env.NODE_ENV !== "production") AvatarRoot.displayName = "AvatarRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #29821d12a3f6f664 Environment-variable access.
pkgs/npm/@[email protected]/avatar/root/AvatarRoot.mjs:41
if (process.env.NODE_ENV !== "production") AvatarRoot.displayName = "AvatarRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c86114fe6fc0a1f0 Environment-variable access.
pkgs/npm/@[email protected]/avatar/root/AvatarRootContext.js:14
if (process.env.NODE_ENV !== "production") AvatarRootContext.displayName = "AvatarRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f3c5c7dabc57ba1 Environment-variable access.
pkgs/npm/@[email protected]/avatar/root/AvatarRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: AvatarRootContext is missing. Avatar parts must be placed within <Avatar.Root>.' : (0, _formatErrorMessage2.default)(13));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5aa690a74204fa36 Environment-variable access.
pkgs/npm/@[email protected]/avatar/root/AvatarRootContext.mjs:6
if (process.env.NODE_ENV !== "production") AvatarRootContext.displayName = "AvatarRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #901933f486fd88b2 Environment-variable access.
pkgs/npm/@[email protected]/avatar/root/AvatarRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: AvatarRootContext is missing. Avatar parts must be placed within <Avatar.Root>.' : _formatErrorMessage(13));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e141ed8ed4c79e0 Environment-variable access.
pkgs/npm/@[email protected]/button/Button.js:45
if (process.env.NODE_ENV !== "production") Button.displayName = "Button";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cb58ff4d267cc80 Environment-variable access.
pkgs/npm/@[email protected]/button/Button.mjs:39
if (process.env.NODE_ENV !== "production") Button.displayName = "Button";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb96764ea3689bdc Environment-variable access.
pkgs/npm/@[email protected]/checkbox-group/CheckboxGroup.js:132
if (process.env.NODE_ENV !== "production") CheckboxGroup.displayName = "CheckboxGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #403e420f3b95792e Environment-variable access.
pkgs/npm/@[email protected]/checkbox-group/CheckboxGroup.mjs:127
if (process.env.NODE_ENV !== "production") CheckboxGroup.displayName = "CheckboxGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c308792d8750c68 Environment-variable access.
pkgs/npm/@[email protected]/checkbox-group/CheckboxGroupContext.js:14
if (process.env.NODE_ENV !== "production") CheckboxGroupContext.displayName = "CheckboxGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4fad16e49f2abf4 Environment-variable access.
pkgs/npm/@[email protected]/checkbox-group/CheckboxGroupContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: CheckboxGroupContext is missing. CheckboxGroup parts must be placed within <CheckboxGroup>.' : (0, _formatErrorMessage2.default)(3));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdc11385fba2994d Environment-variable access.
pkgs/npm/@[email protected]/checkbox-group/CheckboxGroupContext.mjs:6
if (process.env.NODE_ENV !== "production") CheckboxGroupContext.displayName = "CheckboxGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #349604d36cd340aa Environment-variable access.
pkgs/npm/@[email protected]/checkbox-group/CheckboxGroupContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: CheckboxGroupContext is missing. CheckboxGroup parts must be placed within <CheckboxGroup>.' : _formatErrorMessage(3));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #253715609637a77b Environment-variable access.
pkgs/npm/@[email protected]/checkbox/indicator/CheckboxIndicator.js:70
if (process.env.NODE_ENV !== "production") CheckboxIndicator.displayName = "CheckboxIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bea79a43dca424c6 Environment-variable access.
pkgs/npm/@[email protected]/checkbox/indicator/CheckboxIndicator.mjs:65
if (process.env.NODE_ENV !== "production") CheckboxIndicator.displayName = "CheckboxIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e255135830329e5a Environment-variable access.
pkgs/npm/@[email protected]/checkbox/root/CheckboxRoot.js:347
if (process.env.NODE_ENV !== "production") CheckboxRoot.displayName = "CheckboxRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a73abe1263839c3 Environment-variable access.
pkgs/npm/@[email protected]/checkbox/root/CheckboxRoot.mjs:341
if (process.env.NODE_ENV !== "production") CheckboxRoot.displayName = "CheckboxRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c452a3b5931f2fe7 Environment-variable access.
pkgs/npm/@[email protected]/checkbox/root/CheckboxRootContext.js:14
if (process.env.NODE_ENV !== "production") CheckboxRootContext.displayName = "CheckboxRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a95392078b0db61c Environment-variable access.
pkgs/npm/@[email protected]/checkbox/root/CheckboxRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: CheckboxRootContext is missing. Checkbox parts must be placed within <Checkbox.Root>.' : (0, _formatErrorMessage2.default)(14));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1837fb9a600d6f5f Environment-variable access.
pkgs/npm/@[email protected]/checkbox/root/CheckboxRootContext.mjs:6
if (process.env.NODE_ENV !== "production") CheckboxRootContext.displayName = "CheckboxRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34816d95fe9fcf99 Environment-variable access.
pkgs/npm/@[email protected]/checkbox/root/CheckboxRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: CheckboxRootContext is missing. Checkbox parts must be placed within <Checkbox.Root>.' : _formatErrorMessage(14));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #348c5e876b796f4a Environment-variable access.
pkgs/npm/@[email protected]/collapsible/panel/CollapsiblePanel.js:34
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be39e7a7780ef2a6 Environment-variable access.
pkgs/npm/@[email protected]/collapsible/panel/CollapsiblePanel.js:117
if (process.env.NODE_ENV !== "production") CollapsiblePanel.displayName = "CollapsiblePanel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0d875afd7afb3cb Environment-variable access.
pkgs/npm/@[email protected]/collapsible/panel/CollapsiblePanel.mjs:28
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16aa6ad221e77bac Environment-variable access.
pkgs/npm/@[email protected]/collapsible/panel/CollapsiblePanel.mjs:111
if (process.env.NODE_ENV !== "production") CollapsiblePanel.displayName = "CollapsiblePanel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b54208b90bee894 Environment-variable access.
pkgs/npm/@[email protected]/collapsible/panel/useCollapsiblePanel.js:321
    if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6aca56461d1ae3c1 Environment-variable access.
pkgs/npm/@[email protected]/collapsible/panel/useCollapsiblePanel.mjs:315
    if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e28fe72f784452d1 Environment-variable access.
pkgs/npm/@[email protected]/collapsible/root/CollapsibleRoot.js:61
if (process.env.NODE_ENV !== "production") CollapsibleRoot.displayName = "CollapsibleRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a367199165d34daf Environment-variable access.
pkgs/npm/@[email protected]/collapsible/root/CollapsibleRoot.mjs:55
if (process.env.NODE_ENV !== "production") CollapsibleRoot.displayName = "CollapsibleRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da002734e8395b7b Environment-variable access.
pkgs/npm/@[email protected]/collapsible/root/CollapsibleRootContext.js:14
if (process.env.NODE_ENV !== "production") CollapsibleRootContext.displayName = "CollapsibleRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e980e51fd5929be2 Environment-variable access.
pkgs/npm/@[email protected]/collapsible/root/CollapsibleRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: CollapsibleRootContext is missing. Collapsible parts must be placed within <Collapsible.Root>.' : (0, _formatErrorMessage2.default)(15));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ad7319ebd05ebec Environment-variable access.
pkgs/npm/@[email protected]/collapsible/root/CollapsibleRootContext.mjs:6
if (process.env.NODE_ENV !== "production") CollapsibleRootContext.displayName = "CollapsibleRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c358fb160821708 Environment-variable access.
pkgs/npm/@[email protected]/collapsible/root/CollapsibleRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: CollapsibleRootContext is missing. Collapsible parts must be placed within <Collapsible.Root>.' : _formatErrorMessage(15));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54c23680cbafa41f Environment-variable access.
pkgs/npm/@[email protected]/collapsible/trigger/CollapsibleTrigger.js:62
if (process.env.NODE_ENV !== "production") CollapsibleTrigger.displayName = "CollapsibleTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfa721397806a3c7 Environment-variable access.
pkgs/npm/@[email protected]/collapsible/trigger/CollapsibleTrigger.mjs:56
if (process.env.NODE_ENV !== "production") CollapsibleTrigger.displayName = "CollapsibleTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17245a49a524b955 Environment-variable access.
pkgs/npm/@[email protected]/combobox/arrow/ComboboxArrow.js:55
if (process.env.NODE_ENV !== "production") ComboboxArrow.displayName = "ComboboxArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #605ad64f9bcae8c4 Environment-variable access.
pkgs/npm/@[email protected]/combobox/arrow/ComboboxArrow.mjs:50
if (process.env.NODE_ENV !== "production") ComboboxArrow.displayName = "ComboboxArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #adf9e9c754654997 Environment-variable access.
pkgs/npm/@[email protected]/combobox/backdrop/ComboboxBackdrop.js:56
if (process.env.NODE_ENV !== "production") ComboboxBackdrop.displayName = "ComboboxBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46fd56a2489ea546 Environment-variable access.
pkgs/npm/@[email protected]/combobox/backdrop/ComboboxBackdrop.mjs:50
if (process.env.NODE_ENV !== "production") ComboboxBackdrop.displayName = "ComboboxBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cc60a91919edb46 Environment-variable access.
pkgs/npm/@[email protected]/combobox/chip-remove/ComboboxChipRemove.js:111
if (process.env.NODE_ENV !== "production") ComboboxChipRemove.displayName = "ComboboxChipRemove";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8fde70b71e19b7df Environment-variable access.
pkgs/npm/@[email protected]/combobox/chip-remove/ComboboxChipRemove.mjs:106
if (process.env.NODE_ENV !== "production") ComboboxChipRemove.displayName = "ComboboxChipRemove";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #670bf16c54f4f66a Environment-variable access.
pkgs/npm/@[email protected]/combobox/chip/ComboboxChip.js:126
if (process.env.NODE_ENV !== "production") ComboboxChip.displayName = "ComboboxChip";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #adf6f899af707037 Environment-variable access.
pkgs/npm/@[email protected]/combobox/chip/ComboboxChip.mjs:121
if (process.env.NODE_ENV !== "production") ComboboxChip.displayName = "ComboboxChip";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0614e9f9537eea8f Environment-variable access.
pkgs/npm/@[email protected]/combobox/chip/ComboboxChipContext.js:14
if (process.env.NODE_ENV !== "production") ComboboxChipContext.displayName = "ComboboxChipContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb7b765cf80b310d Environment-variable access.
pkgs/npm/@[email protected]/combobox/chip/ComboboxChipContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxChipContext is missing. ComboboxChip parts must be placed within <Combobox.Chip>.' : (0, _formatErrorMessage2.default)(17));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e162f09ffced6822 Environment-variable access.
pkgs/npm/@[email protected]/combobox/chip/ComboboxChipContext.mjs:6
if (process.env.NODE_ENV !== "production") ComboboxChipContext.displayName = "ComboboxChipContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97698724664991ff Environment-variable access.
pkgs/npm/@[email protected]/combobox/chip/ComboboxChipContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxChipContext is missing. ComboboxChip parts must be placed within <Combobox.Chip>.' : _formatErrorMessage(17));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce0e463f564b8bae Environment-variable access.
pkgs/npm/@[email protected]/combobox/chips/ComboboxChips.js:65
if (process.env.NODE_ENV !== "production") ComboboxChips.displayName = "ComboboxChips";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f2b1389411903ab Environment-variable access.
pkgs/npm/@[email protected]/combobox/chips/ComboboxChips.mjs:60
if (process.env.NODE_ENV !== "production") ComboboxChips.displayName = "ComboboxChips";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d638a30ee4e204be Environment-variable access.
pkgs/npm/@[email protected]/combobox/chips/ComboboxChipsContext.js:12
if (process.env.NODE_ENV !== "production") ComboboxChipsContext.displayName = "ComboboxChipsContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f33a2be1a78d5811 Environment-variable access.
pkgs/npm/@[email protected]/combobox/chips/ComboboxChipsContext.mjs:5
if (process.env.NODE_ENV !== "production") ComboboxChipsContext.displayName = "ComboboxChipsContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #065284915e3d5bd9 Environment-variable access.
pkgs/npm/@[email protected]/combobox/clear/ComboboxClear.js:130
if (process.env.NODE_ENV !== "production") ComboboxClear.displayName = "ComboboxClear";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d83ab30b02f58dba Environment-variable access.
pkgs/npm/@[email protected]/combobox/clear/ComboboxClear.mjs:124
if (process.env.NODE_ENV !== "production") ComboboxClear.displayName = "ComboboxClear";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01bc16e376cca256 Environment-variable access.
pkgs/npm/@[email protected]/combobox/collection/GroupCollectionContext.js:13
if (process.env.NODE_ENV !== "production") GroupCollectionContext.displayName = "GroupCollectionContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1cbb1f104515bcf Environment-variable access.
pkgs/npm/@[email protected]/combobox/collection/GroupCollectionContext.mjs:6
if (process.env.NODE_ENV !== "production") GroupCollectionContext.displayName = "GroupCollectionContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df72f2a83ea71f42 Environment-variable access.
pkgs/npm/@[email protected]/combobox/empty/ComboboxEmpty.js:49
if (process.env.NODE_ENV !== "production") ComboboxEmpty.displayName = "ComboboxEmpty";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7fba22d351e4908b Environment-variable access.
pkgs/npm/@[email protected]/combobox/empty/ComboboxEmpty.mjs:44
if (process.env.NODE_ENV !== "production") ComboboxEmpty.displayName = "ComboboxEmpty";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8777c448829d6c11 Environment-variable access.
pkgs/npm/@[email protected]/combobox/group-label/ComboboxGroupLabel.js:46
if (process.env.NODE_ENV !== "production") ComboboxGroupLabel.displayName = "ComboboxGroupLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7cba5390192d78ff Environment-variable access.
pkgs/npm/@[email protected]/combobox/group-label/ComboboxGroupLabel.mjs:41
if (process.env.NODE_ENV !== "production") ComboboxGroupLabel.displayName = "ComboboxGroupLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c203eb460d2485b3 Environment-variable access.
pkgs/npm/@[email protected]/combobox/group/ComboboxGroup.js:53
if (process.env.NODE_ENV !== "production") ComboboxGroup.displayName = "ComboboxGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da6960958bd73745 Environment-variable access.
pkgs/npm/@[email protected]/combobox/group/ComboboxGroup.mjs:48
if (process.env.NODE_ENV !== "production") ComboboxGroup.displayName = "ComboboxGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2cc20015012830d Environment-variable access.
pkgs/npm/@[email protected]/combobox/group/ComboboxGroupContext.js:14
if (process.env.NODE_ENV !== "production") ComboboxGroupContext.displayName = "ComboboxGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1cb4f631ed94bfe6 Environment-variable access.
pkgs/npm/@[email protected]/combobox/group/ComboboxGroupContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxGroupContext is missing. ComboboxGroup parts must be placed within <Combobox.Group>.' : (0, _formatErrorMessage2.default)(18));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bbfadaa92f830f0 Environment-variable access.
pkgs/npm/@[email protected]/combobox/group/ComboboxGroupContext.mjs:6
if (process.env.NODE_ENV !== "production") ComboboxGroupContext.displayName = "ComboboxGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a813d25da4ddd37 Environment-variable access.
pkgs/npm/@[email protected]/combobox/group/ComboboxGroupContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxGroupContext is missing. ComboboxGroup parts must be placed within <Combobox.Group>.' : _formatErrorMessage(18));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e8b484da2e57536 Environment-variable access.
pkgs/npm/@[email protected]/combobox/icon/ComboboxIcon.js:33
if (process.env.NODE_ENV !== "production") ComboboxIcon.displayName = "ComboboxIcon";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42696c1be9c7868c Environment-variable access.
pkgs/npm/@[email protected]/combobox/icon/ComboboxIcon.mjs:28
if (process.env.NODE_ENV !== "production") ComboboxIcon.displayName = "ComboboxIcon";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fc73287f21afef4 Environment-variable access.
pkgs/npm/@[email protected]/combobox/input-group/ComboboxInputGroup.js:77
if (process.env.NODE_ENV !== "production") ComboboxInputGroup.displayName = "ComboboxInputGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb9392e1d77550c2 Environment-variable access.
pkgs/npm/@[email protected]/combobox/input-group/ComboboxInputGroup.mjs:72
if (process.env.NODE_ENV !== "production") ComboboxInputGroup.displayName = "ComboboxInputGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ec9043f4df27ab4 Environment-variable access.
pkgs/npm/@[email protected]/combobox/input/ComboboxInput.js:423
if (process.env.NODE_ENV !== "production") ComboboxInput.displayName = "ComboboxInput";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a897932b5ba4bd4 Environment-variable access.
pkgs/npm/@[email protected]/combobox/input/ComboboxInput.mjs:418
if (process.env.NODE_ENV !== "production") ComboboxInput.displayName = "ComboboxInput";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40345e8a5bce4101 Environment-variable access.
pkgs/npm/@[email protected]/combobox/item-indicator/ComboboxItemIndicator.js:40
if (process.env.NODE_ENV !== "production") ComboboxItemIndicator.displayName = "ComboboxItemIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0fcf4f8d63debc5 Environment-variable access.
pkgs/npm/@[email protected]/combobox/item-indicator/ComboboxItemIndicator.js:81
if (process.env.NODE_ENV !== "production") Inner.displayName = "Inner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d66e33946a940ca7 Environment-variable access.
pkgs/npm/@[email protected]/combobox/item-indicator/ComboboxItemIndicator.mjs:35
if (process.env.NODE_ENV !== "production") ComboboxItemIndicator.displayName = "ComboboxItemIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d05a9d30568f3338 Environment-variable access.
pkgs/npm/@[email protected]/combobox/item-indicator/ComboboxItemIndicator.mjs:76
if (process.env.NODE_ENV !== "production") Inner.displayName = "Inner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e3fada1df78b857f Environment-variable access.
pkgs/npm/@[email protected]/combobox/item/ComboboxItem.js:231
if (process.env.NODE_ENV !== "production") ComboboxItem.displayName = "ComboboxItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49c7aeafb4b03961 Environment-variable access.
pkgs/npm/@[email protected]/combobox/item/ComboboxItem.mjs:225
if (process.env.NODE_ENV !== "production") ComboboxItem.displayName = "ComboboxItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1252f952d83a6bd1 Environment-variable access.
pkgs/npm/@[email protected]/combobox/item/ComboboxItemContext.js:14
if (process.env.NODE_ENV !== "production") ComboboxItemContext.displayName = "ComboboxItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d7b73fa5575f509 Environment-variable access.
pkgs/npm/@[email protected]/combobox/item/ComboboxItemContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxItemContext is missing. ComboboxItem parts must be placed within <Combobox.Item>.' : (0, _formatErrorMessage2.default)(19));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fab98db905408646 Environment-variable access.
pkgs/npm/@[email protected]/combobox/item/ComboboxItemContext.mjs:6
if (process.env.NODE_ENV !== "production") ComboboxItemContext.displayName = "ComboboxItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f497976ca1fd96cc Environment-variable access.
pkgs/npm/@[email protected]/combobox/item/ComboboxItemContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxItemContext is missing. ComboboxItem parts must be placed within <Combobox.Item>.' : _formatErrorMessage(19));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5e82fb258a23729 Environment-variable access.
pkgs/npm/@[email protected]/combobox/label/ComboboxLabel.js:44
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #451d9a3297e516ea Environment-variable access.
pkgs/npm/@[email protected]/combobox/label/ComboboxLabel.js:69
if (process.env.NODE_ENV !== "production") ComboboxLabel.displayName = "ComboboxLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94548983a251ddcb Environment-variable access.
pkgs/npm/@[email protected]/combobox/label/ComboboxLabel.mjs:39
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #feca4b34df47b997 Environment-variable access.
pkgs/npm/@[email protected]/combobox/label/ComboboxLabel.mjs:64
if (process.env.NODE_ENV !== "production") ComboboxLabel.displayName = "ComboboxLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #219818399300ee17 Environment-variable access.
pkgs/npm/@[email protected]/combobox/list/ComboboxList.js:123
if (process.env.NODE_ENV !== "production") ComboboxList.displayName = "ComboboxList";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #344fcb9d79e5eb95 Environment-variable access.
pkgs/npm/@[email protected]/combobox/list/ComboboxList.mjs:118
if (process.env.NODE_ENV !== "production") ComboboxList.displayName = "ComboboxList";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ec115eb5ba78005 Environment-variable access.
pkgs/npm/@[email protected]/combobox/popup/ComboboxPopup.js:129
if (process.env.NODE_ENV !== "production") ComboboxPopup.displayName = "ComboboxPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f650311cd6504b92 Environment-variable access.
pkgs/npm/@[email protected]/combobox/popup/ComboboxPopup.mjs:123
if (process.env.NODE_ENV !== "production") ComboboxPopup.displayName = "ComboboxPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b682c996d2a8206 Environment-variable access.
pkgs/npm/@[email protected]/combobox/portal/ComboboxPortal.js:43
if (process.env.NODE_ENV !== "production") ComboboxPortal.displayName = "ComboboxPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34e3060582ed3f40 Environment-variable access.
pkgs/npm/@[email protected]/combobox/portal/ComboboxPortal.mjs:38
if (process.env.NODE_ENV !== "production") ComboboxPortal.displayName = "ComboboxPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3d9dd40982f1082 Environment-variable access.
pkgs/npm/@[email protected]/combobox/portal/ComboboxPortalContext.js:14
if (process.env.NODE_ENV !== "production") ComboboxPortalContext.displayName = "ComboboxPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2fd15b7e7ae7594 Environment-variable access.
pkgs/npm/@[email protected]/combobox/portal/ComboboxPortalContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Combobox.Portal> is missing.' : (0, _formatErrorMessage2.default)(20));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a22c91a5867f7f20 Environment-variable access.
pkgs/npm/@[email protected]/combobox/portal/ComboboxPortalContext.mjs:6
if (process.env.NODE_ENV !== "production") ComboboxPortalContext.displayName = "ComboboxPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #703a2ca7fe98fc23 Environment-variable access.
pkgs/npm/@[email protected]/combobox/portal/ComboboxPortalContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Combobox.Portal> is missing.' : _formatErrorMessage(20));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f97cfba0f89cc90e Environment-variable access.
pkgs/npm/@[email protected]/combobox/positioner/ComboboxPositioner.js:115
if (process.env.NODE_ENV !== "production") ComboboxPositioner.displayName = "ComboboxPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2c13c08df1959ed Environment-variable access.
pkgs/npm/@[email protected]/combobox/positioner/ComboboxPositioner.mjs:110
if (process.env.NODE_ENV !== "production") ComboboxPositioner.displayName = "ComboboxPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a66a6ce9f57e6b16 Environment-variable access.
pkgs/npm/@[email protected]/combobox/positioner/ComboboxPositionerContext.js:14
if (process.env.NODE_ENV !== "production") ComboboxPositionerContext.displayName = "ComboboxPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2417a60cfa154d0 Environment-variable access.
pkgs/npm/@[email protected]/combobox/positioner/ComboboxPositionerContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Combobox.Popup> and <Combobox.Arrow> must be used within the <Combobox.Positioner> component' : (0, _formatErrorMessage2.default)(21));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5599a60164c130e3 Environment-variable access.
pkgs/npm/@[email protected]/combobox/positioner/ComboboxPositionerContext.mjs:6
if (process.env.NODE_ENV !== "production") ComboboxPositionerContext.displayName = "ComboboxPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9738b1e849f9265 Environment-variable access.
pkgs/npm/@[email protected]/combobox/positioner/ComboboxPositionerContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Combobox.Popup> and <Combobox.Arrow> must be used within the <Combobox.Positioner> component' : _formatErrorMessage(21));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5dc4cf7e10206f92 Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.js:18
if (process.env.NODE_ENV !== "production") ComboboxRootContext.displayName = "ComboboxRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f921f257ff8298a1 Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.js:20
if (process.env.NODE_ENV !== "production") ComboboxFloatingContext.displayName = "ComboboxFloatingContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8bb8366a9fdd3d2e Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.js:22
if (process.env.NODE_ENV !== "production") ComboboxDerivedItemsContext.displayName = "ComboboxDerivedItemsContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c1e807b552eb1af Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.js:26
if (process.env.NODE_ENV !== "production") ComboboxHasItemsContext.displayName = "ComboboxHasItemsContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58d9b7522b26d26b Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.js:28
if (process.env.NODE_ENV !== "production") ComboboxInputValueContext.displayName = "ComboboxInputValueContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15cee941ca0b57bb Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.js:32
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxRootContext is missing. Combobox parts must be placed within <Combobox.Root>.' : (0, _formatErrorMessage2.default)(22));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a1478057d2f2d00 Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.js:39
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxFloatingContext is missing. Combobox parts must be placed within <Combobox.Root>.' : (0, _formatErrorMessage2.default)(23));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #253ba0427688a796 Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.js:46
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxItemsContext is missing. Combobox parts must be placed within <Combobox.Root>.' : (0, _formatErrorMessage2.default)(24));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d2e00b137422ab9 Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.mjs:6
if (process.env.NODE_ENV !== "production") ComboboxRootContext.displayName = "ComboboxRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c024ca863f0a3258 Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.mjs:8
if (process.env.NODE_ENV !== "production") ComboboxFloatingContext.displayName = "ComboboxFloatingContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #198306cabbdc47a7 Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.mjs:10
if (process.env.NODE_ENV !== "production") ComboboxDerivedItemsContext.displayName = "ComboboxDerivedItemsContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40d651b0e536bd7c Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.mjs:14
if (process.env.NODE_ENV !== "production") ComboboxHasItemsContext.displayName = "ComboboxHasItemsContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc75370c270167ec Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.mjs:16
if (process.env.NODE_ENV !== "production") ComboboxInputValueContext.displayName = "ComboboxInputValueContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4340cdb58165aa0f Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.mjs:20
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxRootContext is missing. Combobox parts must be placed within <Combobox.Root>.' : _formatErrorMessage(22));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aefc652242d291e8 Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.mjs:27
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxFloatingContext is missing. Combobox parts must be placed within <Combobox.Root>.' : _formatErrorMessage(23));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #434007836f28c06e Environment-variable access.
pkgs/npm/@[email protected]/combobox/root/ComboboxRootContext.mjs:34
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ComboboxItemsContext is missing. Combobox parts must be placed within <Combobox.Root>.' : _formatErrorMessage(24));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f46e22e873aae441 Environment-variable access.
pkgs/npm/@[email protected]/combobox/row/ComboboxRow.js:38
if (process.env.NODE_ENV !== "production") ComboboxRow.displayName = "ComboboxRow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32b7a57465b1d382 Environment-variable access.
pkgs/npm/@[email protected]/combobox/row/ComboboxRow.mjs:33
if (process.env.NODE_ENV !== "production") ComboboxRow.displayName = "ComboboxRow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13cf48dc7a9e5447 Environment-variable access.
pkgs/npm/@[email protected]/combobox/row/ComboboxRowContext.js:12
if (process.env.NODE_ENV !== "production") ComboboxRowContext.displayName = "ComboboxRowContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ddf92af1080285a Environment-variable access.
pkgs/npm/@[email protected]/combobox/row/ComboboxRowContext.mjs:5
if (process.env.NODE_ENV !== "production") ComboboxRowContext.displayName = "ComboboxRowContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d0b371dd1b2f3b8 Environment-variable access.
pkgs/npm/@[email protected]/combobox/status/ComboboxStatus.js:42
if (process.env.NODE_ENV !== "production") ComboboxStatus.displayName = "ComboboxStatus";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be961e5b0106c6a7 Environment-variable access.
pkgs/npm/@[email protected]/combobox/status/ComboboxStatus.mjs:37
if (process.env.NODE_ENV !== "production") ComboboxStatus.displayName = "ComboboxStatus";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fd8d20b733e4295 Environment-variable access.
pkgs/npm/@[email protected]/combobox/trigger/ComboboxTrigger.js:246
if (process.env.NODE_ENV !== "production") ComboboxTrigger.displayName = "ComboboxTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8613f5c129cc2ba7 Environment-variable access.
pkgs/npm/@[email protected]/combobox/trigger/ComboboxTrigger.mjs:240
if (process.env.NODE_ENV !== "production") ComboboxTrigger.displayName = "ComboboxTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d114af47502e2ddc Environment-variable access.
pkgs/npm/@[email protected]/combobox/utils/ComboboxInternalDismissButton.js:43
if (process.env.NODE_ENV !== "production") ComboboxInternalDismissButton.displayName = "ComboboxInternalDismissButton";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5040d156a980d22a Environment-variable access.
pkgs/npm/@[email protected]/combobox/utils/ComboboxInternalDismissButton.mjs:37
if (process.env.NODE_ENV !== "production") ComboboxInternalDismissButton.displayName = "ComboboxInternalDismissButton";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df5846d659becae7 Environment-variable access.
pkgs/npm/@[email protected]/context-menu/root/ContextMenuRootContext.js:14
if (process.env.NODE_ENV !== "production") ContextMenuRootContext.displayName = "ContextMenuRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #276800add7991f64 Environment-variable access.
pkgs/npm/@[email protected]/context-menu/root/ContextMenuRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ContextMenuRootContext is missing. ContextMenu parts must be placed within <ContextMenu.Root>.' : (0, _formatErrorMessage2.default)(25));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af4b53a2edb75de4 Environment-variable access.
pkgs/npm/@[email protected]/context-menu/root/ContextMenuRootContext.mjs:6
if (process.env.NODE_ENV !== "production") ContextMenuRootContext.displayName = "ContextMenuRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d6806431c3187b2 Environment-variable access.
pkgs/npm/@[email protected]/context-menu/root/ContextMenuRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ContextMenuRootContext is missing. ContextMenu parts must be placed within <ContextMenu.Root>.' : _formatErrorMessage(25));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d478a58c09c8e25 Environment-variable access.
pkgs/npm/@[email protected]/context-menu/trigger/ContextMenuTrigger.js:173
if (process.env.NODE_ENV !== "production") ContextMenuTrigger.displayName = "ContextMenuTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e780dade7e673970 Environment-variable access.
pkgs/npm/@[email protected]/context-menu/trigger/ContextMenuTrigger.mjs:167
if (process.env.NODE_ENV !== "production") ContextMenuTrigger.displayName = "ContextMenuTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #398f1d3ba1354aa9 Environment-variable access.
pkgs/npm/@[email protected]/dialog/backdrop/DialogBackdrop.js:59
if (process.env.NODE_ENV !== "production") DialogBackdrop.displayName = "DialogBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6891428046b53fa9 Environment-variable access.
pkgs/npm/@[email protected]/dialog/backdrop/DialogBackdrop.mjs:53
if (process.env.NODE_ENV !== "production") DialogBackdrop.displayName = "DialogBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66f6e7cf26038559 Environment-variable access.
pkgs/npm/@[email protected]/dialog/close/DialogClose.js:57
if (process.env.NODE_ENV !== "production") DialogClose.displayName = "DialogClose";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9aca3c274999f108 Environment-variable access.
pkgs/npm/@[email protected]/dialog/close/DialogClose.mjs:52
if (process.env.NODE_ENV !== "production") DialogClose.displayName = "DialogClose";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d3a14293c5b8110 Environment-variable access.
pkgs/npm/@[email protected]/dialog/description/DialogDescription.js:39
if (process.env.NODE_ENV !== "production") DialogDescription.displayName = "DialogDescription";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a44e777abfe80c6 Environment-variable access.
pkgs/npm/@[email protected]/dialog/description/DialogDescription.mjs:33
if (process.env.NODE_ENV !== "production") DialogDescription.displayName = "DialogDescription";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #146bc1cc8166ed8e Environment-variable access.
pkgs/npm/@[email protected]/dialog/popup/DialogPopup.js:117
if (process.env.NODE_ENV !== "production") DialogPopup.displayName = "DialogPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1047410781abf6d4 Environment-variable access.
pkgs/npm/@[email protected]/dialog/popup/DialogPopup.mjs:111
if (process.env.NODE_ENV !== "production") DialogPopup.displayName = "DialogPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdf1c35c4839c22d Environment-variable access.
pkgs/npm/@[email protected]/dialog/portal/DialogPortal.js:50
if (process.env.NODE_ENV !== "production") DialogPortal.displayName = "DialogPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02d024cac97ab42c Environment-variable access.
pkgs/npm/@[email protected]/dialog/portal/DialogPortal.mjs:45
if (process.env.NODE_ENV !== "production") DialogPortal.displayName = "DialogPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b39a87750ab0a0f1 Environment-variable access.
pkgs/npm/@[email protected]/dialog/portal/DialogPortalContext.js:14
if (process.env.NODE_ENV !== "production") DialogPortalContext.displayName = "DialogPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2d36a807bb778d0 Environment-variable access.
pkgs/npm/@[email protected]/dialog/portal/DialogPortalContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Dialog.Portal> is missing.' : (0, _formatErrorMessage2.default)(26));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #149b22f4e17abf94 Environment-variable access.
pkgs/npm/@[email protected]/dialog/portal/DialogPortalContext.mjs:6
if (process.env.NODE_ENV !== "production") DialogPortalContext.displayName = "DialogPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #133da63aac2346b4 Environment-variable access.
pkgs/npm/@[email protected]/dialog/portal/DialogPortalContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Dialog.Portal> is missing.' : _formatErrorMessage(26));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b48d95e9d2e48b5c Environment-variable access.
pkgs/npm/@[email protected]/dialog/root/DialogRootContext.js:14
if (process.env.NODE_ENV !== "production") IsDrawerContext.displayName = "IsDrawerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef19ceff257f5d06 Environment-variable access.
pkgs/npm/@[email protected]/dialog/root/DialogRootContext.js:16
if (process.env.NODE_ENV !== "production") DialogRootContext.displayName = "DialogRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #279f91877a55a237 Environment-variable access.
pkgs/npm/@[email protected]/dialog/root/DialogRootContext.js:20
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: DialogRootContext is missing. Dialog parts must be placed within <Dialog.Root>.' : (0, _formatErrorMessage2.default)(27));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #546625b335074518 Environment-variable access.
pkgs/npm/@[email protected]/dialog/root/DialogRootContext.mjs:6
if (process.env.NODE_ENV !== "production") IsDrawerContext.displayName = "IsDrawerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2e7d4f5190b8f3e Environment-variable access.
pkgs/npm/@[email protected]/dialog/root/DialogRootContext.mjs:8
if (process.env.NODE_ENV !== "production") DialogRootContext.displayName = "DialogRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21b3b99b562e7642 Environment-variable access.
pkgs/npm/@[email protected]/dialog/root/DialogRootContext.mjs:12
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: DialogRootContext is missing. Dialog parts must be placed within <Dialog.Root>.' : _formatErrorMessage(27));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ff14d55acaca617 Environment-variable access.
pkgs/npm/@[email protected]/dialog/store/DialogHandle.js:34
    if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a8bef260d3dad89 Environment-variable access.
pkgs/npm/@[email protected]/dialog/store/DialogHandle.mjs:28
    if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb264c4af99cc535 Environment-variable access.
pkgs/npm/@[email protected]/dialog/title/DialogTitle.js:39
if (process.env.NODE_ENV !== "production") DialogTitle.displayName = "DialogTitle";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #576916ff8de17755 Environment-variable access.
pkgs/npm/@[email protected]/dialog/title/DialogTitle.mjs:33
if (process.env.NODE_ENV !== "production") DialogTitle.displayName = "DialogTitle";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38b8f2c4a64fe830 Environment-variable access.
pkgs/npm/@[email protected]/dialog/trigger/DialogTrigger.js:42
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Dialog.Trigger> must be used within <Dialog.Root> or provided with a handle.' : (0, _formatErrorMessage2.default)(79));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5656787cd3ebdc4d Environment-variable access.
pkgs/npm/@[email protected]/dialog/trigger/DialogTrigger.js:86
if (process.env.NODE_ENV !== "production") DialogTrigger.displayName = "DialogTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #822a6f5c906ef3ac Environment-variable access.
pkgs/npm/@[email protected]/dialog/trigger/DialogTrigger.mjs:36
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Dialog.Trigger> must be used within <Dialog.Root> or provided with a handle.' : _formatErrorMessage(79));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12ef7aae75a00702 Environment-variable access.
pkgs/npm/@[email protected]/dialog/trigger/DialogTrigger.mjs:80
if (process.env.NODE_ENV !== "production") DialogTrigger.displayName = "DialogTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f44b0be7cbc82eda Environment-variable access.
pkgs/npm/@[email protected]/dialog/viewport/DialogViewport.js:78
if (process.env.NODE_ENV !== "production") DialogViewport.displayName = "DialogViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6d40521e8c5193c Environment-variable access.
pkgs/npm/@[email protected]/dialog/viewport/DialogViewport.mjs:72
if (process.env.NODE_ENV !== "production") DialogViewport.displayName = "DialogViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e5e40bf5ba988044 Environment-variable access.
pkgs/npm/@[email protected]/direction-provider/DirectionProvider.js:29
if (process.env.NODE_ENV !== "production") DirectionProvider.displayName = "DirectionProvider";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52a6cff5aa95f21c Environment-variable access.
pkgs/npm/@[email protected]/direction-provider/DirectionProvider.mjs:24
if (process.env.NODE_ENV !== "production") DirectionProvider.displayName = "DirectionProvider";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #826a7afc28893a7b Environment-variable access.
pkgs/npm/@[email protected]/drawer/backdrop/DrawerBackdrop.js:64
if (process.env.NODE_ENV !== "production") DrawerBackdrop.displayName = "DrawerBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9dc8833c2a0cd3d Environment-variable access.
pkgs/npm/@[email protected]/drawer/backdrop/DrawerBackdrop.mjs:58
if (process.env.NODE_ENV !== "production") DrawerBackdrop.displayName = "DrawerBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f411ac7dd7486be Environment-variable access.
pkgs/npm/@[email protected]/drawer/content/DrawerContent.js:34
if (process.env.NODE_ENV !== "production") DrawerContent.displayName = "DrawerContent";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47e6486b7991d772 Environment-variable access.
pkgs/npm/@[email protected]/drawer/content/DrawerContent.mjs:29
if (process.env.NODE_ENV !== "production") DrawerContent.displayName = "DrawerContent";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #373a9b856b294ad5 Environment-variable access.
pkgs/npm/@[email protected]/drawer/indent-background/DrawerIndentBackground.js:50
if (process.env.NODE_ENV !== "production") DrawerIndentBackground.displayName = "DrawerIndentBackground";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab62c7ee8bf85ddd Environment-variable access.
pkgs/npm/@[email protected]/drawer/indent-background/DrawerIndentBackground.mjs:44
if (process.env.NODE_ENV !== "production") DrawerIndentBackground.displayName = "DrawerIndentBackground";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #804a393a7422e00b Environment-variable access.
pkgs/npm/@[email protected]/drawer/indent/DrawerIndent.js:89
if (process.env.NODE_ENV !== "production") DrawerIndent.displayName = "DrawerIndent";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee32d8f0a1092eb5 Environment-variable access.
pkgs/npm/@[email protected]/drawer/indent/DrawerIndent.mjs:83
if (process.env.NODE_ENV !== "production") DrawerIndent.displayName = "DrawerIndent";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ee0f05dec7e5892 Environment-variable access.
pkgs/npm/@[email protected]/drawer/popup/DrawerPopup.js:173
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4be3cc775b8c39a6 Environment-variable access.
pkgs/npm/@[email protected]/drawer/popup/DrawerPopup.js:361
if (process.env.NODE_ENV !== "production") DrawerPopup.displayName = "DrawerPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8875fa264cfd3986 Environment-variable access.
pkgs/npm/@[email protected]/drawer/popup/DrawerPopup.mjs:168
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d816600aaca965c Environment-variable access.
pkgs/npm/@[email protected]/drawer/popup/DrawerPopup.mjs:356
if (process.env.NODE_ENV !== "production") DrawerPopup.displayName = "DrawerPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60a73a614f6b5961 Environment-variable access.
pkgs/npm/@[email protected]/drawer/provider/DrawerProviderContext.js:14
if (process.env.NODE_ENV !== "production") DrawerProviderContext.displayName = "DrawerProviderContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #271893f30879a296 Environment-variable access.
pkgs/npm/@[email protected]/drawer/provider/DrawerProviderContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: DrawerProviderContext is missing. Use <Drawer.Provider>.' : (0, _formatErrorMessage2.default)(91));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ffa271e8c0efceb Environment-variable access.
pkgs/npm/@[email protected]/drawer/provider/DrawerProviderContext.mjs:6
if (process.env.NODE_ENV !== "production") DrawerProviderContext.displayName = "DrawerProviderContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10fa563936301eda Environment-variable access.
pkgs/npm/@[email protected]/drawer/provider/DrawerProviderContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: DrawerProviderContext is missing. Use <Drawer.Provider>.' : _formatErrorMessage(91));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d7224e9167cf474 Environment-variable access.
pkgs/npm/@[email protected]/drawer/root/DrawerRootContext.js:14
if (process.env.NODE_ENV !== "production") DrawerRootContext.displayName = "DrawerRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d59a8ee997068a64 Environment-variable access.
pkgs/npm/@[email protected]/drawer/root/DrawerRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: DrawerRootContext is missing. Drawer parts must be placed within <Drawer.Root>.' : (0, _formatErrorMessage2.default)(90));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83ca045de9419171 Environment-variable access.
pkgs/npm/@[email protected]/drawer/root/DrawerRootContext.mjs:6
if (process.env.NODE_ENV !== "production") DrawerRootContext.displayName = "DrawerRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82d968a7cac2f8f1 Environment-variable access.
pkgs/npm/@[email protected]/drawer/root/DrawerRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: DrawerRootContext is missing. Drawer parts must be placed within <Drawer.Root>.' : _formatErrorMessage(90));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5042937529daea96 Environment-variable access.
pkgs/npm/@[email protected]/drawer/swipe-area/DrawerSwipeArea.js:393
if (process.env.NODE_ENV !== "production") DrawerSwipeArea.displayName = "DrawerSwipeArea";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16d5b2cbb69027ba Environment-variable access.
pkgs/npm/@[email protected]/drawer/swipe-area/DrawerSwipeArea.mjs:387
if (process.env.NODE_ENV !== "production") DrawerSwipeArea.displayName = "DrawerSwipeArea";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97341b9458d030db Environment-variable access.
pkgs/npm/@[email protected]/drawer/viewport/DrawerViewport.js:879
if (process.env.NODE_ENV !== "production") DrawerViewport.displayName = "DrawerViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #731d09166fb57f81 Environment-variable access.
pkgs/npm/@[email protected]/drawer/viewport/DrawerViewport.mjs:873
if (process.env.NODE_ENV !== "production") DrawerViewport.displayName = "DrawerViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c46df6388e584fc Environment-variable access.
pkgs/npm/@[email protected]/drawer/viewport/DrawerViewportContext.js:14
if (process.env.NODE_ENV !== "production") DrawerViewportContext.displayName = "DrawerViewportContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a704310c38be73f1 Environment-variable access.
pkgs/npm/@[email protected]/drawer/viewport/DrawerViewportContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: DrawerViewportContext is missing. Drawer parts must be placed within <Drawer.Viewport>.' : (0, _formatErrorMessage2.default)(92));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a387a18d7ad7ce7 Environment-variable access.
pkgs/npm/@[email protected]/drawer/viewport/DrawerViewportContext.mjs:6
if (process.env.NODE_ENV !== "production") DrawerViewportContext.displayName = "DrawerViewportContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0862998d931eaec9 Environment-variable access.
pkgs/npm/@[email protected]/drawer/viewport/DrawerViewportContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: DrawerViewportContext is missing. Drawer parts must be placed within <Drawer.Viewport>.' : _formatErrorMessage(92));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b11074a22704ecbc Environment-variable access.
pkgs/npm/@[email protected]/drawer/virtual-keyboard-provider/DrawerVirtualKeyboardContext.js:12
if (process.env.NODE_ENV !== "production") DrawerVirtualKeyboardContext.displayName = "DrawerVirtualKeyboardContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4e18a7b7145fa4c Environment-variable access.
pkgs/npm/@[email protected]/drawer/virtual-keyboard-provider/DrawerVirtualKeyboardContext.mjs:5
if (process.env.NODE_ENV !== "production") DrawerVirtualKeyboardContext.displayName = "DrawerVirtualKeyboardContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34581ad735ca0275 Environment-variable access.
pkgs/npm/@[email protected]/field/control/FieldControl.js:148
if (process.env.NODE_ENV !== "production") FieldControl.displayName = "FieldControl";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36727d80e1114457 Environment-variable access.
pkgs/npm/@[email protected]/field/control/FieldControl.mjs:143
if (process.env.NODE_ENV !== "production") FieldControl.displayName = "FieldControl";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d412312da4e2af6 Environment-variable access.
pkgs/npm/@[email protected]/field/description/FieldDescription.js:60
if (process.env.NODE_ENV !== "production") FieldDescription.displayName = "FieldDescription";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6699ab0d097bb4c Environment-variable access.
pkgs/npm/@[email protected]/field/description/FieldDescription.mjs:55
if (process.env.NODE_ENV !== "production") FieldDescription.displayName = "FieldDescription";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a94694571f289252 Environment-variable access.
pkgs/npm/@[email protected]/field/error/FieldError.js:130
if (process.env.NODE_ENV !== "production") FieldError.displayName = "FieldError";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eae1dcf229dd4004 Environment-variable access.
pkgs/npm/@[email protected]/field/error/FieldError.mjs:124
if (process.env.NODE_ENV !== "production") FieldError.displayName = "FieldError";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #421dd3b75d83765d Environment-variable access.
pkgs/npm/@[email protected]/field/item/FieldItem.js:60
if (process.env.NODE_ENV !== "production") FieldItem.displayName = "FieldItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b387fbdd4f4939c0 Environment-variable access.
pkgs/npm/@[email protected]/field/item/FieldItem.mjs:55
if (process.env.NODE_ENV !== "production") FieldItem.displayName = "FieldItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #532334981fd2f825 Environment-variable access.
pkgs/npm/@[email protected]/field/item/FieldItemContext.js:14
if (process.env.NODE_ENV !== "production") FieldItemContext.displayName = "FieldItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49ce0ff13383fbab Environment-variable access.
pkgs/npm/@[email protected]/field/item/FieldItemContext.mjs:7
if (process.env.NODE_ENV !== "production") FieldItemContext.displayName = "FieldItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab5deac4fd8fd905 Environment-variable access.
pkgs/npm/@[email protected]/field/label/FieldLabel.js:47
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #860b0eea2a4330c5 Environment-variable access.
pkgs/npm/@[email protected]/field/label/FieldLabel.js:75
if (process.env.NODE_ENV !== "production") FieldLabel.displayName = "FieldLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0e7f05b62da1f16 Environment-variable access.
pkgs/npm/@[email protected]/field/label/FieldLabel.mjs:42
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70d60c7fe10bcb38 Environment-variable access.
pkgs/npm/@[email protected]/field/label/FieldLabel.mjs:70
if (process.env.NODE_ENV !== "production") FieldLabel.displayName = "FieldLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d97b3d2e5eb23592 Environment-variable access.
pkgs/npm/@[email protected]/field/root/FieldRoot.js:166
if (process.env.NODE_ENV !== "production") FieldRootInner.displayName = "FieldRootInner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdefb8913d5f1b94 Environment-variable access.
pkgs/npm/@[email protected]/field/root/FieldRoot.js:175
if (process.env.NODE_ENV !== "production") FieldRoot.displayName = "FieldRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55759206927f77a7 Environment-variable access.
pkgs/npm/@[email protected]/field/root/FieldRoot.mjs:162
if (process.env.NODE_ENV !== "production") FieldRootInner.displayName = "FieldRootInner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5dfc687954825bdf Environment-variable access.
pkgs/npm/@[email protected]/field/root/FieldRoot.mjs:171
if (process.env.NODE_ENV !== "production") FieldRoot.displayName = "FieldRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea8e71f82e9f8a70 Environment-variable access.
pkgs/npm/@[email protected]/field/validity/FieldValidity.js:44
if (process.env.NODE_ENV !== "production") FieldValidity.displayName = "FieldValidity";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00694d7bcd138d21 Environment-variable access.
pkgs/npm/@[email protected]/field/validity/FieldValidity.mjs:39
if (process.env.NODE_ENV !== "production") FieldValidity.displayName = "FieldValidity";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42a70251282c2482 Environment-variable access.
pkgs/npm/@[email protected]/fieldset/legend/FieldsetLegend.js:51
if (process.env.NODE_ENV !== "production") FieldsetLegend.displayName = "FieldsetLegend";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9714360a87781813 Environment-variable access.
pkgs/npm/@[email protected]/fieldset/legend/FieldsetLegend.mjs:45
if (process.env.NODE_ENV !== "production") FieldsetLegend.displayName = "FieldsetLegend";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f10b3b6b034a22f Environment-variable access.
pkgs/npm/@[email protected]/fieldset/root/FieldsetRoot.js:51
if (process.env.NODE_ENV !== "production") FieldsetRoot.displayName = "FieldsetRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eea8f5320e330e79 Environment-variable access.
pkgs/npm/@[email protected]/fieldset/root/FieldsetRoot.mjs:46
if (process.env.NODE_ENV !== "production") FieldsetRoot.displayName = "FieldsetRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #567b717df7343ab4 Environment-variable access.
pkgs/npm/@[email protected]/fieldset/root/FieldsetRootContext.js:14
if (process.env.NODE_ENV !== "production") FieldsetRootContext.displayName = "FieldsetRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e36ee197f6da8588 Environment-variable access.
pkgs/npm/@[email protected]/fieldset/root/FieldsetRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: FieldsetRootContext is missing. Fieldset parts must be placed within <Fieldset.Root>.' : (0, _formatErrorMessage2.default)(86));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38973c927d5075f1 Environment-variable access.
pkgs/npm/@[email protected]/fieldset/root/FieldsetRootContext.mjs:6
if (process.env.NODE_ENV !== "production") FieldsetRootContext.displayName = "FieldsetRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #016d52e458e03d75 Environment-variable access.
pkgs/npm/@[email protected]/fieldset/root/FieldsetRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: FieldsetRootContext is missing. Fieldset parts must be placed within <Fieldset.Root>.' : _formatErrorMessage(86));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5f8cb314c3f341a Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/components/FloatingDelayGroup.js:34
if (process.env.NODE_ENV !== "production") FloatingDelayGroupContext.displayName = "FloatingDelayGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64b815c068282335 Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/components/FloatingDelayGroup.mjs:27
if (process.env.NODE_ENV !== "production") FloatingDelayGroupContext.displayName = "FloatingDelayGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #264f6e0a15f2aac2 Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/components/FloatingPortal.js:29
if (process.env.NODE_ENV !== "production") PortalContext.displayName = "PortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8228622f812b2ff Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/components/FloatingPortal.js:220
if (process.env.NODE_ENV !== "production") FloatingPortal.displayName = "FloatingPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5120da0393bb404 Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/components/FloatingPortal.mjs:21
if (process.env.NODE_ENV !== "production") PortalContext.displayName = "PortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #985cbb68a931bb97 Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/components/FloatingPortal.mjs:211
if (process.env.NODE_ENV !== "production") FloatingPortal.displayName = "FloatingPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68101206554506fc Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/components/FloatingTree.js:19
if (process.env.NODE_ENV !== "production") FloatingNodeContext.displayName = "FloatingNodeContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db401adfa7fc9dfa Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/components/FloatingTree.js:26
if (process.env.NODE_ENV !== "production") FloatingTreeContext.displayName = "FloatingTreeContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a577f9cedfff3c17 Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/components/FloatingTree.mjs:10
if (process.env.NODE_ENV !== "production") FloatingNodeContext.displayName = "FloatingNodeContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23c07c1755b33f90 Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/components/FloatingTree.mjs:17
if (process.env.NODE_ENV !== "production") FloatingTreeContext.displayName = "FloatingTreeContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28709c8c9c70166c Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/hooks/useFloatingRootContext.js:23
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fe2d69a6e365e2b Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/hooks/useFloatingRootContext.mjs:18
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4130f798c1492f64 Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/hooks/useListNavigation.js:88
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc11a848f2bbaa2c Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/hooks/useListNavigation.mjs:81
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c837d415673e3ba Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/utils/composite.js:315
      if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4621ba47f85558f9 Environment-variable access.
pkgs/npm/@[email protected]/floating-ui-react/utils/composite.mjs:298
      if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ee360822fff6788 Environment-variable access.
pkgs/npm/@[email protected]/form/Form.js:135
if (process.env.NODE_ENV !== "production") Form.displayName = "Form";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d83063347aec63ed Environment-variable access.
pkgs/npm/@[email protected]/form/Form.mjs:130
if (process.env.NODE_ENV !== "production") Form.displayName = "Form";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81f0352a0f1adc98 Environment-variable access.
pkgs/npm/@[email protected]/input/Input.js:24
if (process.env.NODE_ENV !== "production") Input.displayName = "Input";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #73696e2efa96ccc6 Environment-variable access.
pkgs/npm/@[email protected]/input/Input.mjs:19
if (process.env.NODE_ENV !== "production") Input.displayName = "Input";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fb7f022a01ec680 Environment-variable access.
pkgs/npm/@[email protected]/internals/composite/list/CompositeListContext.js:24
if (process.env.NODE_ENV !== "production") CompositeListContext.displayName = "CompositeListContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9cf4bc64ae0523e Environment-variable access.
pkgs/npm/@[email protected]/internals/composite/list/CompositeListContext.mjs:17
if (process.env.NODE_ENV !== "production") CompositeListContext.displayName = "CompositeListContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #515adb001c00d84b Environment-variable access.
pkgs/npm/@[email protected]/internals/composite/root/CompositeRootContext.js:14
if (process.env.NODE_ENV !== "production") CompositeRootContext.displayName = "CompositeRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb0a211d80638181 Environment-variable access.
pkgs/npm/@[email protected]/internals/composite/root/CompositeRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: CompositeRootContext is missing. Composite parts must be placed within <Composite.Root>.' : (0, _formatErrorMessage2.default)(16));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e996885fbe8ce3a Environment-variable access.
pkgs/npm/@[email protected]/internals/composite/root/CompositeRootContext.mjs:6
if (process.env.NODE_ENV !== "production") CompositeRootContext.displayName = "CompositeRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f515019fe15983f Environment-variable access.
pkgs/npm/@[email protected]/internals/composite/root/CompositeRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: CompositeRootContext is missing. Composite parts must be placed within <Composite.Root>.' : _formatErrorMessage(16));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6c87890575332e3 Environment-variable access.
pkgs/npm/@[email protected]/internals/csp-context/CSPContext.js:15
if (process.env.NODE_ENV !== "production") CSPContext.displayName = "CSPContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #083f4d3ec73fd93d Environment-variable access.
pkgs/npm/@[email protected]/internals/csp-context/CSPContext.mjs:8
if (process.env.NODE_ENV !== "production") CSPContext.displayName = "CSPContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e4c554436934732 Environment-variable access.
pkgs/npm/@[email protected]/internals/direction-context/DirectionContext.js:15
if (process.env.NODE_ENV !== "production") DirectionContext.displayName = "DirectionContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #409c14434a49f470 Environment-variable access.
pkgs/npm/@[email protected]/internals/direction-context/DirectionContext.mjs:8
if (process.env.NODE_ENV !== "production") DirectionContext.displayName = "DirectionContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f7472371366d065 Environment-variable access.
pkgs/npm/@[email protected]/internals/field-root-context/FieldRootContext.js:56
if (process.env.NODE_ENV !== "production") FieldRootContext.displayName = "FieldRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0960a480de62c6b Environment-variable access.
pkgs/npm/@[email protected]/internals/field-root-context/FieldRootContext.js:60
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: FieldRootContext is missing. Field parts must be placed within <Field.Root>.' : (0, _formatErrorMessage2.default)(28));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #449ae19c2e319efa Environment-variable access.
pkgs/npm/@[email protected]/internals/field-root-context/FieldRootContext.mjs:48
if (process.env.NODE_ENV !== "production") FieldRootContext.displayName = "FieldRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99f00d8fcf96723c Environment-variable access.
pkgs/npm/@[email protected]/internals/field-root-context/FieldRootContext.mjs:52
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: FieldRootContext is missing. Field parts must be placed within <Field.Root>.' : _formatErrorMessage(28));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d14872152229249 Environment-variable access.
pkgs/npm/@[email protected]/internals/form-context/FormContext.js:25
if (process.env.NODE_ENV !== "production") FormContext.displayName = "FormContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f708b1a6a350e9b4 Environment-variable access.
pkgs/npm/@[email protected]/internals/form-context/FormContext.mjs:18
if (process.env.NODE_ENV !== "production") FormContext.displayName = "FormContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ad4f85a8de84e9c Environment-variable access.
pkgs/npm/@[email protected]/internals/labelable-provider/LabelableContext.js:25
if (process.env.NODE_ENV !== "production") LabelableContext.displayName = "LabelableContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ef8dce27a5a65d3 Environment-variable access.
pkgs/npm/@[email protected]/internals/labelable-provider/LabelableContext.mjs:18
if (process.env.NODE_ENV !== "production") LabelableContext.displayName = "LabelableContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #120bc0f5193c7039 Environment-variable access.
pkgs/npm/@[email protected]/internals/labelable-provider/LabelableProvider.js:77
if (process.env.NODE_ENV !== "production") LabelableProvider.displayName = "LabelableProvider";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0107f043545e1086 Environment-variable access.
pkgs/npm/@[email protected]/internals/labelable-provider/LabelableProvider.mjs:72
if (process.env.NODE_ENV !== "production") LabelableProvider.displayName = "LabelableProvider";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ead93b0e6c48ed6 Environment-variable access.
pkgs/npm/@[email protected]/internals/use-button/useButton.js:38
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95f5a17b545bfeb8 Environment-variable access.
pkgs/npm/@[email protected]/internals/use-button/useButton.mjs:32
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d79611f4eacc785a Environment-variable access.
pkgs/npm/@[email protected]/internals/useRenderElement.js:107
      if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #181fb4ed89ca96bb Environment-variable access.
pkgs/npm/@[email protected]/internals/useRenderElement.js:130
    if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a17165843b24a684 Environment-variable access.
pkgs/npm/@[email protected]/internals/useRenderElement.js:146
  throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: Render element or function are not defined.' : (0, _formatErrorMessage2.default)(8));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fb37e5f89ff7507 Environment-variable access.
pkgs/npm/@[email protected]/internals/useRenderElement.mjs:99
      if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #21a757c5be1151e4 Environment-variable access.
pkgs/npm/@[email protected]/internals/useRenderElement.mjs:122
    if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bf3c4090b6fec30 Environment-variable access.
pkgs/npm/@[email protected]/internals/useRenderElement.mjs:138
  throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: Render element or function are not defined.' : _formatErrorMessage(8));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e81b04887fe1cd8 Environment-variable access.
pkgs/npm/@[email protected]/menu/arrow/MenuArrow.js:55
if (process.env.NODE_ENV !== "production") MenuArrow.displayName = "MenuArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75abda1081833161 Environment-variable access.
pkgs/npm/@[email protected]/menu/arrow/MenuArrow.mjs:50
if (process.env.NODE_ENV !== "production") MenuArrow.displayName = "MenuArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #054ca5b05dc18bd2 Environment-variable access.
pkgs/npm/@[email protected]/menu/backdrop/MenuBackdrop.js:61
if (process.env.NODE_ENV !== "production") MenuBackdrop.displayName = "MenuBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e5573435cc7b79d Environment-variable access.
pkgs/npm/@[email protected]/menu/backdrop/MenuBackdrop.mjs:55
if (process.env.NODE_ENV !== "production") MenuBackdrop.displayName = "MenuBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49cc522cac1e9474 Environment-variable access.
pkgs/npm/@[email protected]/menu/checkbox-item-indicator/MenuCheckboxItemIndicator.js:62
if (process.env.NODE_ENV !== "production") MenuCheckboxItemIndicator.displayName = "MenuCheckboxItemIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1faf6f6e2c2dfea Environment-variable access.
pkgs/npm/@[email protected]/menu/checkbox-item-indicator/MenuCheckboxItemIndicator.mjs:57
if (process.env.NODE_ENV !== "production") MenuCheckboxItemIndicator.displayName = "MenuCheckboxItemIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3db9b3c7dbf4d308 Environment-variable access.
pkgs/npm/@[email protected]/menu/checkbox-item/MenuCheckboxItem.js:102
if (process.env.NODE_ENV !== "production") MenuCheckboxItem.displayName = "MenuCheckboxItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bf9820f16c02074 Environment-variable access.
pkgs/npm/@[email protected]/menu/checkbox-item/MenuCheckboxItem.mjs:96
if (process.env.NODE_ENV !== "production") MenuCheckboxItem.displayName = "MenuCheckboxItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49f7b12cda01411f Environment-variable access.
pkgs/npm/@[email protected]/menu/checkbox-item/MenuCheckboxItemContext.js:14
if (process.env.NODE_ENV !== "production") MenuCheckboxItemContext.displayName = "MenuCheckboxItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3c09504b9839c95 Environment-variable access.
pkgs/npm/@[email protected]/menu/checkbox-item/MenuCheckboxItemContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuCheckboxItemContext is missing. MenuCheckboxItem parts must be placed within <Menu.CheckboxItem>.' : (0, _formatErrorMessage2.default)(30));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e47d66b5b8fbfb33 Environment-variable access.
pkgs/npm/@[email protected]/menu/checkbox-item/MenuCheckboxItemContext.mjs:6
if (process.env.NODE_ENV !== "production") MenuCheckboxItemContext.displayName = "MenuCheckboxItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4edd87f762385ff6 Environment-variable access.
pkgs/npm/@[email protected]/menu/checkbox-item/MenuCheckboxItemContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuCheckboxItemContext is missing. MenuCheckboxItem parts must be placed within <Menu.CheckboxItem>.' : _formatErrorMessage(30));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe85bb256b47022b Environment-variable access.
pkgs/npm/@[email protected]/menu/group-label/MenuGroupLabel.js:45
if (process.env.NODE_ENV !== "production") MenuGroupLabel.displayName = "MenuGroupLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38502c82b09747ab Environment-variable access.
pkgs/npm/@[email protected]/menu/group-label/MenuGroupLabel.mjs:40
if (process.env.NODE_ENV !== "production") MenuGroupLabel.displayName = "MenuGroupLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47773828894969f9 Environment-variable access.
pkgs/npm/@[email protected]/menu/group/MenuGroup.js:40
if (process.env.NODE_ENV !== "production") MenuGroup.displayName = "MenuGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a0a02cd5b4ffe68 Environment-variable access.
pkgs/npm/@[email protected]/menu/group/MenuGroup.mjs:35
if (process.env.NODE_ENV !== "production") MenuGroup.displayName = "MenuGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f91dcef94bf9698 Environment-variable access.
pkgs/npm/@[email protected]/menu/group/MenuGroupContext.js:14
if (process.env.NODE_ENV !== "production") MenuGroupContext.displayName = "MenuGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #deba6cda17aaee41 Environment-variable access.
pkgs/npm/@[email protected]/menu/group/MenuGroupContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuGroupContext is missing. Menu group parts must be used within <Menu.Group> or <Menu.RadioGroup>.' : (0, _formatErrorMessage2.default)(31));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03985e9a3398b0fa Environment-variable access.
pkgs/npm/@[email protected]/menu/group/MenuGroupContext.mjs:6
if (process.env.NODE_ENV !== "production") MenuGroupContext.displayName = "MenuGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8336957777980de Environment-variable access.
pkgs/npm/@[email protected]/menu/group/MenuGroupContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuGroupContext is missing. Menu group parts must be used within <Menu.Group> or <Menu.RadioGroup>.' : _formatErrorMessage(31));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #022b33f8f9ea9af8 Environment-variable access.
pkgs/npm/@[email protected]/menu/item/MenuItem.js:67
if (process.env.NODE_ENV !== "production") MenuItem.displayName = "MenuItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d4c56defdc733cc Environment-variable access.
pkgs/npm/@[email protected]/menu/item/MenuItem.mjs:62
if (process.env.NODE_ENV !== "production") MenuItem.displayName = "MenuItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bfe930b048e19df Environment-variable access.
pkgs/npm/@[email protected]/menu/link-item/MenuLinkItem.js:75
if (process.env.NODE_ENV !== "production") MenuLinkItem.displayName = "MenuLinkItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c4657db8a5b415c4 Environment-variable access.
pkgs/npm/@[email protected]/menu/link-item/MenuLinkItem.mjs:70
if (process.env.NODE_ENV !== "production") MenuLinkItem.displayName = "MenuLinkItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #469c8e206cd66ddf Environment-variable access.
pkgs/npm/@[email protected]/menu/popup/MenuPopup.js:133
if (process.env.NODE_ENV !== "production") MenuPopup.displayName = "MenuPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1bddaf41b43ef5bf Environment-variable access.
pkgs/npm/@[email protected]/menu/popup/MenuPopup.mjs:127
if (process.env.NODE_ENV !== "production") MenuPopup.displayName = "MenuPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e20d876d28cfb3b Environment-variable access.
pkgs/npm/@[email protected]/menu/portal/MenuPortal.js:42
if (process.env.NODE_ENV !== "production") MenuPortal.displayName = "MenuPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa0c1d2726c410dc Environment-variable access.
pkgs/npm/@[email protected]/menu/portal/MenuPortal.mjs:37
if (process.env.NODE_ENV !== "production") MenuPortal.displayName = "MenuPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ca5c071938708be Environment-variable access.
pkgs/npm/@[email protected]/menu/portal/MenuPortalContext.js:14
if (process.env.NODE_ENV !== "production") MenuPortalContext.displayName = "MenuPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf12f5ad15dc0549 Environment-variable access.
pkgs/npm/@[email protected]/menu/portal/MenuPortalContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Menu.Portal> is missing.' : (0, _formatErrorMessage2.default)(32));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #155ce9a3d516d90f Environment-variable access.
pkgs/npm/@[email protected]/menu/portal/MenuPortalContext.mjs:6
if (process.env.NODE_ENV !== "production") MenuPortalContext.displayName = "MenuPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e85561934af09423 Environment-variable access.
pkgs/npm/@[email protected]/menu/portal/MenuPortalContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Menu.Portal> is missing.' : _formatErrorMessage(32));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33b768ac3f25fdac Environment-variable access.
pkgs/npm/@[email protected]/menu/positioner/MenuPositioner.js:265
if (process.env.NODE_ENV !== "production") MenuPositioner.displayName = "MenuPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1327681b048385a9 Environment-variable access.
pkgs/npm/@[email protected]/menu/positioner/MenuPositioner.mjs:260
if (process.env.NODE_ENV !== "production") MenuPositioner.displayName = "MenuPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7dbef811524c4b30 Environment-variable access.
pkgs/npm/@[email protected]/menu/positioner/MenuPositionerContext.js:14
if (process.env.NODE_ENV !== "production") MenuPositionerContext.displayName = "MenuPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a1c1f7240e47ead Environment-variable access.
pkgs/npm/@[email protected]/menu/positioner/MenuPositionerContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuPositionerContext is missing. MenuPositioner parts must be placed within <Menu.Positioner>.' : (0, _formatErrorMessage2.default)(33));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34af6c0cab7b3e25 Environment-variable access.
pkgs/npm/@[email protected]/menu/positioner/MenuPositionerContext.mjs:6
if (process.env.NODE_ENV !== "production") MenuPositionerContext.displayName = "MenuPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8b7a2fab7cdd8f6f Environment-variable access.
pkgs/npm/@[email protected]/menu/positioner/MenuPositionerContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuPositionerContext is missing. MenuPositioner parts must be placed within <Menu.Positioner>.' : _formatErrorMessage(33));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a46c0b8088d8643 Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-group/MenuRadioGroup.js:73
if (process.env.NODE_ENV !== "production") MenuRadioGroup.displayName = "MenuRadioGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5b1d47655caf2de Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-group/MenuRadioGroup.mjs:67
if (process.env.NODE_ENV !== "production") MenuRadioGroup.displayName = "MenuRadioGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87bfdb51485f4454 Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-group/MenuRadioGroupContext.js:14
if (process.env.NODE_ENV !== "production") MenuRadioGroupContext.displayName = "MenuRadioGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9d1cf73ff184cdc Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-group/MenuRadioGroupContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuRadioGroupContext is missing. MenuRadioGroup parts must be placed within <Menu.RadioGroup>.' : (0, _formatErrorMessage2.default)(34));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7219cf7e28be9ac3 Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-group/MenuRadioGroupContext.mjs:6
if (process.env.NODE_ENV !== "production") MenuRadioGroupContext.displayName = "MenuRadioGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d26da73433a9890f Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-group/MenuRadioGroupContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuRadioGroupContext is missing. MenuRadioGroup parts must be placed within <Menu.RadioGroup>.' : _formatErrorMessage(34));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab6f9dec1994618c Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-item-indicator/MenuRadioItemIndicator.js:62
if (process.env.NODE_ENV !== "production") MenuRadioItemIndicator.displayName = "MenuRadioItemIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dec031fd603256d1 Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-item-indicator/MenuRadioItemIndicator.mjs:57
if (process.env.NODE_ENV !== "production") MenuRadioItemIndicator.displayName = "MenuRadioItemIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d795d69bacf08f94 Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-item/MenuRadioItem.js:97
if (process.env.NODE_ENV !== "production") MenuRadioItem.displayName = "MenuRadioItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80d406e3ebac8fd8 Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-item/MenuRadioItem.mjs:92
if (process.env.NODE_ENV !== "production") MenuRadioItem.displayName = "MenuRadioItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b38de1ae5bcc8d11 Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-item/MenuRadioItemContext.js:14
if (process.env.NODE_ENV !== "production") MenuRadioItemContext.displayName = "MenuRadioItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be7316efc0811493 Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-item/MenuRadioItemContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuRadioItemContext is missing. MenuRadioItem parts must be placed within <Menu.RadioItem>.' : (0, _formatErrorMessage2.default)(35));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ea73f4ca764d66f Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-item/MenuRadioItemContext.mjs:6
if (process.env.NODE_ENV !== "production") MenuRadioItemContext.displayName = "MenuRadioItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a16cd16ef562fd75 Environment-variable access.
pkgs/npm/@[email protected]/menu/radio-item/MenuRadioItemContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuRadioItemContext is missing. MenuRadioItem parts must be placed within <Menu.RadioItem>.' : _formatErrorMessage(35));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e3838a93c9c927f Environment-variable access.
pkgs/npm/@[email protected]/menu/root/MenuRoot.js:117
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88fb3ea99d248fc8 Environment-variable access.
pkgs/npm/@[email protected]/menu/root/MenuRoot.js:388
if (process.env.NODE_ENV !== "production") MenuRoot.displayName = "MenuRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4afc73f5aefe7471 Environment-variable access.
pkgs/npm/@[email protected]/menu/root/MenuRoot.mjs:112
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c421f7f4769510e Environment-variable access.
pkgs/npm/@[email protected]/menu/root/MenuRoot.mjs:383
if (process.env.NODE_ENV !== "production") MenuRoot.displayName = "MenuRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #895905296a5d664a Environment-variable access.
pkgs/npm/@[email protected]/menu/root/MenuRootContext.js:14
if (process.env.NODE_ENV !== "production") MenuRootContext.displayName = "MenuRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98b237885e1dc019 Environment-variable access.
pkgs/npm/@[email protected]/menu/root/MenuRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuRootContext is missing. Menu parts must be placed within <Menu.Root>.' : (0, _formatErrorMessage2.default)(36));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f360fd33323acb1a Environment-variable access.
pkgs/npm/@[email protected]/menu/root/MenuRootContext.mjs:6
if (process.env.NODE_ENV !== "production") MenuRootContext.displayName = "MenuRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a2036bd23bd4c52 Environment-variable access.
pkgs/npm/@[email protected]/menu/root/MenuRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenuRootContext is missing. Menu parts must be placed within <Menu.Root>.' : _formatErrorMessage(36));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee8b8d7367a7ce0f Environment-variable access.
pkgs/npm/@[email protected]/menu/store/MenuHandle.js:31
      throw new Error(process.env.NODE_ENV !== "production" ? `Base UI: MenuHandle.open: No trigger found with id "${triggerId}".` : (0, _formatErrorMessage2.default)(83, triggerId));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdc9f6106a6509fb Environment-variable access.
pkgs/npm/@[email protected]/menu/store/MenuHandle.mjs:23
      throw new Error(process.env.NODE_ENV !== "production" ? `Base UI: MenuHandle.open: No trigger found with id "${triggerId}".` : _formatErrorMessage(83, triggerId));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6077f309d6a6eb6 Environment-variable access.
pkgs/npm/@[email protected]/menu/submenu-root/MenuSubmenuRootContext.js:12
if (process.env.NODE_ENV !== "production") MenuSubmenuRootContext.displayName = "MenuSubmenuRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9262d310db2a9ecb Environment-variable access.
pkgs/npm/@[email protected]/menu/submenu-root/MenuSubmenuRootContext.mjs:5
if (process.env.NODE_ENV !== "production") MenuSubmenuRootContext.displayName = "MenuSubmenuRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #127a8a24b9aafade Environment-variable access.
pkgs/npm/@[email protected]/menu/submenu-trigger/MenuSubmenuTrigger.js:78
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Menu.SubmenuTrigger> must be placed in <Menu.SubmenuRoot>.' : (0, _formatErrorMessage2.default)(37));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ee271b542b1ff7d Environment-variable access.
pkgs/npm/@[email protected]/menu/submenu-trigger/MenuSubmenuTrigger.js:85
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2428dc96359099a0 Environment-variable access.
pkgs/npm/@[email protected]/menu/submenu-trigger/MenuSubmenuTrigger.js:168
if (process.env.NODE_ENV !== "production") MenuSubmenuTrigger.displayName = "MenuSubmenuTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #601fd30678132d5b Environment-variable access.
pkgs/npm/@[email protected]/menu/submenu-trigger/MenuSubmenuTrigger.mjs:72
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Menu.SubmenuTrigger> must be placed in <Menu.SubmenuRoot>.' : _formatErrorMessage(37));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c814bea317e3987 Environment-variable access.
pkgs/npm/@[email protected]/menu/submenu-trigger/MenuSubmenuTrigger.mjs:79
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f1a79701c15b909 Environment-variable access.
pkgs/npm/@[email protected]/menu/submenu-trigger/MenuSubmenuTrigger.mjs:162
if (process.env.NODE_ENV !== "production") MenuSubmenuTrigger.displayName = "MenuSubmenuTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0defbba5780fc80b Environment-variable access.
pkgs/npm/@[email protected]/menu/trigger/MenuTrigger.js:66
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Menu.Trigger> must be either used within a <Menu.Root> component or provided with a handle.' : (0, _formatErrorMessage2.default)(85));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a260836dda46757 Environment-variable access.
pkgs/npm/@[email protected]/menu/trigger/MenuTrigger.js:252
if (process.env.NODE_ENV !== "production") MenuTrigger.displayName = "MenuTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4f111f56d2a702f Environment-variable access.
pkgs/npm/@[email protected]/menu/trigger/MenuTrigger.mjs:59
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Menu.Trigger> must be either used within a <Menu.Root> component or provided with a handle.' : _formatErrorMessage(85));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df40c88d88c86732 Environment-variable access.
pkgs/npm/@[email protected]/menu/trigger/MenuTrigger.mjs:245
if (process.env.NODE_ENV !== "production") MenuTrigger.displayName = "MenuTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80eac842671c617c Environment-variable access.
pkgs/npm/@[email protected]/menu/viewport/MenuViewport.js:67
if (process.env.NODE_ENV !== "production") MenuViewport.displayName = "MenuViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2229f4b4fa3344a4 Environment-variable access.
pkgs/npm/@[email protected]/menu/viewport/MenuViewport.mjs:61
if (process.env.NODE_ENV !== "production") MenuViewport.displayName = "MenuViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13e170e5cea4314f Environment-variable access.
pkgs/npm/@[email protected]/menubar/Menubar.js:87
if (process.env.NODE_ENV !== "production") Menubar.displayName = "Menubar";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #296f5dcc4d9e1e3c Environment-variable access.
pkgs/npm/@[email protected]/menubar/Menubar.mjs:81
if (process.env.NODE_ENV !== "production") Menubar.displayName = "Menubar";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95f619c97543e096 Environment-variable access.
pkgs/npm/@[email protected]/menubar/MenubarContext.js:14
if (process.env.NODE_ENV !== "production") MenubarContext.displayName = "MenubarContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02b12f7d7dfe7a64 Environment-variable access.
pkgs/npm/@[email protected]/menubar/MenubarContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenubarContext is missing. Menubar parts must be placed within <Menubar>.' : (0, _formatErrorMessage2.default)(5));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb587cf24afb59bf Environment-variable access.
pkgs/npm/@[email protected]/menubar/MenubarContext.mjs:6
if (process.env.NODE_ENV !== "production") MenubarContext.displayName = "MenubarContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9a4ae1282b5c8891 Environment-variable access.
pkgs/npm/@[email protected]/menubar/MenubarContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MenubarContext is missing. Menubar parts must be placed within <Menubar>.' : _formatErrorMessage(5));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a19a6b02ee79ee21 Environment-variable access.
pkgs/npm/@[email protected]/meter/indicator/MeterIndicator.js:39
if (process.env.NODE_ENV !== "production") MeterIndicator.displayName = "MeterIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c5e5f6cb143f77c Environment-variable access.
pkgs/npm/@[email protected]/meter/indicator/MeterIndicator.mjs:34
if (process.env.NODE_ENV !== "production") MeterIndicator.displayName = "MeterIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #98258cf5247aaeab Environment-variable access.
pkgs/npm/@[email protected]/meter/label/MeterLabel.js:39
if (process.env.NODE_ENV !== "production") MeterLabel.displayName = "MeterLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ccef6c3f8089d02 Environment-variable access.
pkgs/npm/@[email protected]/meter/label/MeterLabel.mjs:34
if (process.env.NODE_ENV !== "production") MeterLabel.displayName = "MeterLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #142a81ba644bee2e Environment-variable access.
pkgs/npm/@[email protected]/meter/root/MeterRoot.js:85
if (process.env.NODE_ENV !== "production") MeterRoot.displayName = "MeterRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f951e8b0c22184f Environment-variable access.
pkgs/npm/@[email protected]/meter/root/MeterRoot.mjs:80
if (process.env.NODE_ENV !== "production") MeterRoot.displayName = "MeterRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdfa82b40379ad6b Environment-variable access.
pkgs/npm/@[email protected]/meter/root/MeterRootContext.js:14
if (process.env.NODE_ENV !== "production") MeterRootContext.displayName = "MeterRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66d050661ff6437c Environment-variable access.
pkgs/npm/@[email protected]/meter/root/MeterRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MeterRootContext is missing. Meter parts must be placed within <Meter.Root>.' : (0, _formatErrorMessage2.default)(38));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb28bcdabbcd1de9 Environment-variable access.
pkgs/npm/@[email protected]/meter/root/MeterRootContext.mjs:6
if (process.env.NODE_ENV !== "production") MeterRootContext.displayName = "MeterRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2e3e24f98c277e1 Environment-variable access.
pkgs/npm/@[email protected]/meter/root/MeterRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: MeterRootContext is missing. Meter parts must be placed within <Meter.Root>.' : _formatErrorMessage(38));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d5a6bd3ce00a88b Environment-variable access.
pkgs/npm/@[email protected]/meter/track/MeterTrack.js:29
if (process.env.NODE_ENV !== "production") MeterTrack.displayName = "MeterTrack";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f971ed46b339a541 Environment-variable access.
pkgs/npm/@[email protected]/meter/track/MeterTrack.mjs:24
if (process.env.NODE_ENV !== "production") MeterTrack.displayName = "MeterTrack";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #039781cd54effbcd Environment-variable access.
pkgs/npm/@[email protected]/meter/value/MeterValue.js:38
if (process.env.NODE_ENV !== "production") MeterValue.displayName = "MeterValue";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1560088f8c88f65 Environment-variable access.
pkgs/npm/@[email protected]/meter/value/MeterValue.mjs:33
if (process.env.NODE_ENV !== "production") MeterValue.displayName = "MeterValue";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a2d46b58e3ba745 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/arrow/NavigationMenuArrow.js:56
if (process.env.NODE_ENV !== "production") NavigationMenuArrow.displayName = "NavigationMenuArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0be5af288ed80d5 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/arrow/NavigationMenuArrow.mjs:51
if (process.env.NODE_ENV !== "production") NavigationMenuArrow.displayName = "NavigationMenuArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1ed093b30885a14 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/backdrop/NavigationMenuBackdrop.js:56
if (process.env.NODE_ENV !== "production") NavigationMenuBackdrop.displayName = "NavigationMenuBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ea8ff00ca8f26f8 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/backdrop/NavigationMenuBackdrop.mjs:50
if (process.env.NODE_ENV !== "production") NavigationMenuBackdrop.displayName = "NavigationMenuBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ffe17fd820a1f3e Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/content/NavigationMenuContent.js:171
if (process.env.NODE_ENV !== "production") NavigationMenuContent.displayName = "NavigationMenuContent";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08d0dd145dc8966f Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/content/NavigationMenuContent.mjs:165
if (process.env.NODE_ENV !== "production") NavigationMenuContent.displayName = "NavigationMenuContent";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c925058d763bc36f Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/icon/NavigationMenuIcon.js:48
if (process.env.NODE_ENV !== "production") NavigationMenuIcon.displayName = "NavigationMenuIcon";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e80226f01dfd969f Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/icon/NavigationMenuIcon.mjs:43
if (process.env.NODE_ENV !== "production") NavigationMenuIcon.displayName = "NavigationMenuIcon";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe5bf955ea245b0b Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/item/NavigationMenuItem.js:42
if (process.env.NODE_ENV !== "production") NavigationMenuItem.displayName = "NavigationMenuItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfc8a1f48752e05e Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/item/NavigationMenuItem.mjs:37
if (process.env.NODE_ENV !== "production") NavigationMenuItem.displayName = "NavigationMenuItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7eba1c8f2405021e Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/item/NavigationMenuItemContext.js:14
if (process.env.NODE_ENV !== "production") NavigationMenuItemContext.displayName = "NavigationMenuItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f058d31b42cc517 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/item/NavigationMenuItemContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: NavigationMenuItem parts must be used within a <NavigationMenu.Item>.' : (0, _formatErrorMessage2.default)(39));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93c5aaf0b56e21cd Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/item/NavigationMenuItemContext.mjs:6
if (process.env.NODE_ENV !== "production") NavigationMenuItemContext.displayName = "NavigationMenuItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfe405f009e1f7ec Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/item/NavigationMenuItemContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: NavigationMenuItem parts must be used within a <NavigationMenu.Item>.' : _formatErrorMessage(39));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3aeb0752b69bcb9b Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/link/NavigationMenuLink.js:75
if (process.env.NODE_ENV !== "production") NavigationMenuLink.displayName = "NavigationMenuLink";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b895277a46e0d3f Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/link/NavigationMenuLink.mjs:70
if (process.env.NODE_ENV !== "production") NavigationMenuLink.displayName = "NavigationMenuLink";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0e3fd9452758477 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/list/NavigationMenuDismissContext.js:12
if (process.env.NODE_ENV !== "production") NavigationMenuDismissContext.displayName = "NavigationMenuDismissContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #729c92e53bf4ea99 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/list/NavigationMenuDismissContext.mjs:5
if (process.env.NODE_ENV !== "production") NavigationMenuDismissContext.displayName = "NavigationMenuDismissContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb64d461d897cb57 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/list/NavigationMenuList.js:110
if (process.env.NODE_ENV !== "production") NavigationMenuList.displayName = "NavigationMenuList";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bde16ed26dd0aaf Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/list/NavigationMenuList.mjs:105
if (process.env.NODE_ENV !== "production") NavigationMenuList.displayName = "NavigationMenuList";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08439322d800d348 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/popup/NavigationMenuPopup.js:77
if (process.env.NODE_ENV !== "production") NavigationMenuPopup.displayName = "NavigationMenuPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #83feeb77421c3140 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/popup/NavigationMenuPopup.mjs:71
if (process.env.NODE_ENV !== "production") NavigationMenuPopup.displayName = "NavigationMenuPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4b49b8fb3dd408e Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/portal/NavigationMenuPortal.js:41
if (process.env.NODE_ENV !== "production") NavigationMenuPortal.displayName = "NavigationMenuPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9f4f0a734713261 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/portal/NavigationMenuPortal.mjs:36
if (process.env.NODE_ENV !== "production") NavigationMenuPortal.displayName = "NavigationMenuPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f938ee1f40a3a76 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/portal/NavigationMenuPortalContext.js:14
if (process.env.NODE_ENV !== "production") NavigationMenuPortalContext.displayName = "NavigationMenuPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f04aee326bc5ad7 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/portal/NavigationMenuPortalContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <NavigationMenu.Portal> is missing.' : (0, _formatErrorMessage2.default)(40));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ecf298cfb049e39d Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/portal/NavigationMenuPortalContext.mjs:6
if (process.env.NODE_ENV !== "production") NavigationMenuPortalContext.displayName = "NavigationMenuPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31b67884010abdd6 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/portal/NavigationMenuPortalContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <NavigationMenu.Portal> is missing.' : _formatErrorMessage(40));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #811806a0c1d93dc1 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/positioner/NavigationMenuPositioner.js:159
if (process.env.NODE_ENV !== "production") NavigationMenuPositioner.displayName = "NavigationMenuPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef611ffa8fb575ea Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/positioner/NavigationMenuPositioner.mjs:153
if (process.env.NODE_ENV !== "production") NavigationMenuPositioner.displayName = "NavigationMenuPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd140b063b94971c Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/positioner/NavigationMenuPositionerContext.js:14
if (process.env.NODE_ENV !== "production") NavigationMenuPositionerContext.displayName = "NavigationMenuPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d23bb7438a49343 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/positioner/NavigationMenuPositionerContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: NavigationMenuPositionerContext is missing. NavigationMenuPositioner parts must be placed within <NavigationMenu.Positioner>.' : (0, _formatErrorMessage2.default)(42));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6fff7c4c78bf23f6 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/positioner/NavigationMenuPositionerContext.mjs:6
if (process.env.NODE_ENV !== "production") NavigationMenuPositionerContext.displayName = "NavigationMenuPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #331561e1dec44037 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/positioner/NavigationMenuPositionerContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: NavigationMenuPositionerContext is missing. NavigationMenuPositioner parts must be placed within <NavigationMenu.Positioner>.' : _formatErrorMessage(42));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15b856c61a192c74 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/root/NavigationMenuRoot.js:230
if (process.env.NODE_ENV !== "production") NavigationMenuRoot.displayName = "NavigationMenuRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01f4cc76c0ab41c2 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/root/NavigationMenuRoot.mjs:224
if (process.env.NODE_ENV !== "production") NavigationMenuRoot.displayName = "NavigationMenuRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0085d58314909035 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/root/NavigationMenuRootContext.js:15
if (process.env.NODE_ENV !== "production") NavigationMenuRootContext.displayName = "NavigationMenuRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03dae50e0ddf647e Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/root/NavigationMenuRootContext.js:16
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c5301f65b9a74de Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/root/NavigationMenuRootContext.js:22
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: NavigationMenuRootContext is missing. Navigation Menu parts must be placed within <NavigationMenu.Root>.' : (0, _formatErrorMessage2.default)(41));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d9b5d003f308638 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/root/NavigationMenuRootContext.js:27
if (process.env.NODE_ENV !== "production") NavigationMenuTreeContext.displayName = "NavigationMenuTreeContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15861601d3219394 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/root/NavigationMenuRootContext.mjs:6
if (process.env.NODE_ENV !== "production") NavigationMenuRootContext.displayName = "NavigationMenuRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5dc5b8b5c6b757e4 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/root/NavigationMenuRootContext.mjs:7
if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3556bb2adaf7e8d5 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/root/NavigationMenuRootContext.mjs:13
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: NavigationMenuRootContext is missing. Navigation Menu parts must be placed within <NavigationMenu.Root>.' : _formatErrorMessage(41));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa1d641d2be07de3 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/root/NavigationMenuRootContext.mjs:18
if (process.env.NODE_ENV !== "production") NavigationMenuTreeContext.displayName = "NavigationMenuTreeContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f14dda3efd3bb47b Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/trigger/NavigationMenuTrigger.js:671
if (process.env.NODE_ENV !== "production") NavigationMenuTrigger.displayName = "NavigationMenuTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76b7887ad31a5ae6 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/trigger/NavigationMenuTrigger.mjs:665
if (process.env.NODE_ENV !== "production") NavigationMenuTrigger.displayName = "NavigationMenuTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9856e9634ee06e30 Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/viewport/NavigationMenuViewport.js:122
if (process.env.NODE_ENV !== "production") NavigationMenuViewport.displayName = "NavigationMenuViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e45743566a14197b Environment-variable access.
pkgs/npm/@[email protected]/navigation-menu/viewport/NavigationMenuViewport.mjs:116
if (process.env.NODE_ENV !== "production") NavigationMenuViewport.displayName = "NavigationMenuViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8bbd169ae0553d3 Environment-variable access.
pkgs/npm/@[email protected]/number-field/decrement/NumberFieldDecrement.js:20
if (process.env.NODE_ENV !== "production") NumberFieldDecrement.displayName = "NumberFieldDecrement";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f9b11c638fb500e Environment-variable access.
pkgs/npm/@[email protected]/number-field/decrement/NumberFieldDecrement.mjs:14
if (process.env.NODE_ENV !== "production") NumberFieldDecrement.displayName = "NumberFieldDecrement";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfca8850ee9d9d76 Environment-variable access.
pkgs/npm/@[email protected]/number-field/group/NumberFieldGroup.js:39
if (process.env.NODE_ENV !== "production") NumberFieldGroup.displayName = "NumberFieldGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bf23173c705e7e5 Environment-variable access.
pkgs/npm/@[email protected]/number-field/group/NumberFieldGroup.mjs:34
if (process.env.NODE_ENV !== "production") NumberFieldGroup.displayName = "NumberFieldGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7efd1f8098d4bde Environment-variable access.
pkgs/npm/@[email protected]/number-field/increment/NumberFieldIncrement.js:20
if (process.env.NODE_ENV !== "production") NumberFieldIncrement.displayName = "NumberFieldIncrement";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #218067affcb50304 Environment-variable access.
pkgs/npm/@[email protected]/number-field/increment/NumberFieldIncrement.mjs:14
if (process.env.NODE_ENV !== "production") NumberFieldIncrement.displayName = "NumberFieldIncrement";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab2553851a884893 Environment-variable access.
pkgs/npm/@[email protected]/number-field/input/NumberFieldInput.js:357
        if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9edcabd1dfdf844f Environment-variable access.
pkgs/npm/@[email protected]/number-field/input/NumberFieldInput.js:390
if (process.env.NODE_ENV !== "production") NumberFieldInput.displayName = "NumberFieldInput";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #501fcffd2b695243 Environment-variable access.
pkgs/npm/@[email protected]/number-field/input/NumberFieldInput.mjs:351
        if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53d322d5f22ef7e1 Environment-variable access.
pkgs/npm/@[email protected]/number-field/input/NumberFieldInput.mjs:384
if (process.env.NODE_ENV !== "production") NumberFieldInput.displayName = "NumberFieldInput";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6710e875e4274b9d Environment-variable access.
pkgs/npm/@[email protected]/number-field/root/NumberFieldRoot.js:405
if (process.env.NODE_ENV !== "production") NumberFieldRoot.displayName = "NumberFieldRoot"; // `none` is kept for consistency with other components even though the number field never

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #088f94b95149691d Environment-variable access.
pkgs/npm/@[email protected]/number-field/root/NumberFieldRoot.mjs:400
if (process.env.NODE_ENV !== "production") NumberFieldRoot.displayName = "NumberFieldRoot"; // `none` is kept for consistency with other components even though the number field never

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f10a3f25170a4003 Environment-variable access.
pkgs/npm/@[email protected]/number-field/root/NumberFieldRootContext.js:14
if (process.env.NODE_ENV !== "production") NumberFieldRootContext.displayName = "NumberFieldRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ea82fe5d4d1173e Environment-variable access.
pkgs/npm/@[email protected]/number-field/root/NumberFieldRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: NumberFieldRootContext is missing. NumberField parts must be placed within <NumberField.Root>.' : (0, _formatErrorMessage2.default)(43));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f20352202f057f2a Environment-variable access.
pkgs/npm/@[email protected]/number-field/root/NumberFieldRootContext.mjs:6
if (process.env.NODE_ENV !== "production") NumberFieldRootContext.displayName = "NumberFieldRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87038b2048de4de7 Environment-variable access.
pkgs/npm/@[email protected]/number-field/root/NumberFieldRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: NumberFieldRootContext is missing. NumberField parts must be placed within <NumberField.Root>.' : _formatErrorMessage(43));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6107f9fb78e28e5e Environment-variable access.
pkgs/npm/@[email protected]/number-field/scrub-area-cursor/NumberFieldScrubAreaCursor.js:63
if (process.env.NODE_ENV !== "production") NumberFieldScrubAreaCursor.displayName = "NumberFieldScrubAreaCursor";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac8895068cc296d6 Environment-variable access.
pkgs/npm/@[email protected]/number-field/scrub-area-cursor/NumberFieldScrubAreaCursor.mjs:57
if (process.env.NODE_ENV !== "production") NumberFieldScrubAreaCursor.displayName = "NumberFieldScrubAreaCursor";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d82f4db42b09982d Environment-variable access.
pkgs/npm/@[email protected]/number-field/scrub-area/NumberFieldScrubArea.js:296
if (process.env.NODE_ENV !== "production") NumberFieldScrubArea.displayName = "NumberFieldScrubArea";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ec3f91ef5a93367 Environment-variable access.
pkgs/npm/@[email protected]/number-field/scrub-area/NumberFieldScrubArea.mjs:290
if (process.env.NODE_ENV !== "production") NumberFieldScrubArea.displayName = "NumberFieldScrubArea";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #580d9459d3cd1af8 Environment-variable access.
pkgs/npm/@[email protected]/number-field/scrub-area/NumberFieldScrubAreaContext.js:14
if (process.env.NODE_ENV !== "production") NumberFieldScrubAreaContext.displayName = "NumberFieldScrubAreaContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #768e0897b8bb9850 Environment-variable access.
pkgs/npm/@[email protected]/number-field/scrub-area/NumberFieldScrubAreaContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: NumberFieldScrubAreaContext is missing. NumberFieldScrubArea parts must be placed within <NumberField.ScrubArea>.' : (0, _formatErrorMessage2.default)(44));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53166165b70018c2 Environment-variable access.
pkgs/npm/@[email protected]/number-field/scrub-area/NumberFieldScrubAreaContext.mjs:6
if (process.env.NODE_ENV !== "production") NumberFieldScrubAreaContext.displayName = "NumberFieldScrubAreaContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77702e136f62fdd4 Environment-variable access.
pkgs/npm/@[email protected]/number-field/scrub-area/NumberFieldScrubAreaContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: NumberFieldScrubAreaContext is missing. NumberFieldScrubArea parts must be placed within <NumberField.ScrubArea>.' : _formatErrorMessage(44));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8bde50da3d9fd9c3 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/input/OTPFieldInput.js:74
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b95868bc8703ffe Environment-variable access.
pkgs/npm/@[email protected]/otp-field/input/OTPFieldInput.js:222
        if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67cde64d2cf1de84 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/input/OTPFieldInput.js:251
if (process.env.NODE_ENV !== "production") OTPFieldInput.displayName = "OTPFieldInput";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b761fe723e84beb2 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/input/OTPFieldInput.mjs:69
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d708bc769cb476af Environment-variable access.
pkgs/npm/@[email protected]/otp-field/input/OTPFieldInput.mjs:217
        if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db145ae9d5d855e6 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/input/OTPFieldInput.mjs:246
if (process.env.NODE_ENV !== "production") OTPFieldInput.displayName = "OTPFieldInput";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c4237fd65013b54 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/root/OTPFieldRoot.js:126
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9350fd2db533df4 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/root/OTPFieldRoot.js:331
if (process.env.NODE_ENV !== "production") OTPFieldRoot.displayName = "OTPFieldRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75819b423bb617a6 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/root/OTPFieldRoot.mjs:121
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f45284777fcf6f6 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/root/OTPFieldRoot.mjs:326
if (process.env.NODE_ENV !== "production") OTPFieldRoot.displayName = "OTPFieldRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e94f0a036a3e207 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/root/OTPFieldRootContext.js:15
if (process.env.NODE_ENV !== "production") OTPFieldRootContext.displayName = "OTPFieldRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f79a07b9cd9dd1b0 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/root/OTPFieldRootContext.js:19
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: OTPFieldRootContext is missing. OTPField parts must be placed within <OTPField.Root>.' : (0, _formatErrorMessage2.default)(98));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #322823c545a360f7 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/root/OTPFieldRootContext.mjs:6
if (process.env.NODE_ENV !== "production") OTPFieldRootContext.displayName = "OTPFieldRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e59f6201bf28624 Environment-variable access.
pkgs/npm/@[email protected]/otp-field/root/OTPFieldRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: OTPFieldRootContext is missing. OTPField parts must be placed within <OTPField.Root>.' : _formatErrorMessage(98));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b8637a7711abf95 Environment-variable access.
pkgs/npm/@[email protected]/popover/arrow/PopoverArrow.js:55
if (process.env.NODE_ENV !== "production") PopoverArrow.displayName = "PopoverArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e88cd3e79af8c01e Environment-variable access.
pkgs/npm/@[email protected]/popover/arrow/PopoverArrow.mjs:50
if (process.env.NODE_ENV !== "production") PopoverArrow.displayName = "PopoverArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea9a6abb773d8842 Environment-variable access.
pkgs/npm/@[email protected]/popover/backdrop/PopoverBackdrop.js:60
if (process.env.NODE_ENV !== "production") PopoverBackdrop.displayName = "PopoverBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1006e9565693fd2 Environment-variable access.
pkgs/npm/@[email protected]/popover/backdrop/PopoverBackdrop.mjs:54
if (process.env.NODE_ENV !== "production") PopoverBackdrop.displayName = "PopoverBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebae929f5d33c103 Environment-variable access.
pkgs/npm/@[email protected]/popover/close/PopoverClose.js:53
if (process.env.NODE_ENV !== "production") PopoverClose.displayName = "PopoverClose";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #043ce979233f358c Environment-variable access.
pkgs/npm/@[email protected]/popover/close/PopoverClose.mjs:48
if (process.env.NODE_ENV !== "production") PopoverClose.displayName = "PopoverClose";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3430394dbb17407 Environment-variable access.
pkgs/npm/@[email protected]/popover/description/PopoverDescription.js:39
if (process.env.NODE_ENV !== "production") PopoverDescription.displayName = "PopoverDescription";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5762df980a2af4c Environment-variable access.
pkgs/npm/@[email protected]/popover/description/PopoverDescription.mjs:34
if (process.env.NODE_ENV !== "production") PopoverDescription.displayName = "PopoverDescription";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58d099e348bdc4e2 Environment-variable access.
pkgs/npm/@[email protected]/popover/popup/PopoverPopup.js:131
if (process.env.NODE_ENV !== "production") PopoverPopup.displayName = "PopoverPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcf24889bc160a8f Environment-variable access.
pkgs/npm/@[email protected]/popover/popup/PopoverPopup.mjs:125
if (process.env.NODE_ENV !== "production") PopoverPopup.displayName = "PopoverPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #143ee33b4ab14b13 Environment-variable access.
pkgs/npm/@[email protected]/popover/portal/PopoverPortal.js:42
if (process.env.NODE_ENV !== "production") PopoverPortal.displayName = "PopoverPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #711a0a692650c8e9 Environment-variable access.
pkgs/npm/@[email protected]/popover/portal/PopoverPortal.mjs:37
if (process.env.NODE_ENV !== "production") PopoverPortal.displayName = "PopoverPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62d12ae73cba2efd Environment-variable access.
pkgs/npm/@[email protected]/popover/portal/PopoverPortalContext.js:14
if (process.env.NODE_ENV !== "production") PopoverPortalContext.displayName = "PopoverPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93c1f04179a96b23 Environment-variable access.
pkgs/npm/@[email protected]/popover/portal/PopoverPortalContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Popover.Portal> is missing.' : (0, _formatErrorMessage2.default)(45));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a82d3dde5a2312d Environment-variable access.
pkgs/npm/@[email protected]/popover/portal/PopoverPortalContext.mjs:6
if (process.env.NODE_ENV !== "production") PopoverPortalContext.displayName = "PopoverPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #358d33a3e88eb6ac Environment-variable access.
pkgs/npm/@[email protected]/popover/portal/PopoverPortalContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Popover.Portal> is missing.' : _formatErrorMessage(45));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9e184f2fcc59b44 Environment-variable access.
pkgs/npm/@[email protected]/popover/positioner/PopoverPositioner.js:140
if (process.env.NODE_ENV !== "production") PopoverPositioner.displayName = "PopoverPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d28ef6782e7528c1 Environment-variable access.
pkgs/npm/@[email protected]/popover/positioner/PopoverPositioner.mjs:135
if (process.env.NODE_ENV !== "production") PopoverPositioner.displayName = "PopoverPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcb7a08f9cab1867 Environment-variable access.
pkgs/npm/@[email protected]/popover/positioner/PopoverPositionerContext.js:14
if (process.env.NODE_ENV !== "production") PopoverPositionerContext.displayName = "PopoverPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3712c9789a3c4453 Environment-variable access.
pkgs/npm/@[email protected]/popover/positioner/PopoverPositionerContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: PopoverPositionerContext is missing. PopoverPositioner parts must be placed within <Popover.Positioner>.' : (0, _formatErrorMessage2.default)(46));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab7da701a6fd04da Environment-variable access.
pkgs/npm/@[email protected]/popover/positioner/PopoverPositionerContext.mjs:6
if (process.env.NODE_ENV !== "production") PopoverPositionerContext.displayName = "PopoverPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8411731545caf53e Environment-variable access.
pkgs/npm/@[email protected]/popover/positioner/PopoverPositionerContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: PopoverPositionerContext is missing. PopoverPositioner parts must be placed within <Popover.Positioner>.' : _formatErrorMessage(46));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25afc700356d5c41 Environment-variable access.
pkgs/npm/@[email protected]/popover/root/PopoverRootContext.js:14
if (process.env.NODE_ENV !== "production") PopoverRootContext.displayName = "PopoverRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be76e268cba67777 Environment-variable access.
pkgs/npm/@[email protected]/popover/root/PopoverRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: PopoverRootContext is missing. Popover parts must be placed within <Popover.Root>.' : (0, _formatErrorMessage2.default)(47));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8feb2de79d695b70 Environment-variable access.
pkgs/npm/@[email protected]/popover/root/PopoverRootContext.mjs:6
if (process.env.NODE_ENV !== "production") PopoverRootContext.displayName = "PopoverRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b16cdb9f00e54274 Environment-variable access.
pkgs/npm/@[email protected]/popover/root/PopoverRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: PopoverRootContext is missing. Popover parts must be placed within <Popover.Root>.' : _formatErrorMessage(47));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59b6ea7f9f66f4c0 Environment-variable access.
pkgs/npm/@[email protected]/popover/store/PopoverHandle.js:32
      throw new Error(process.env.NODE_ENV !== "production" ? `Base UI: PopoverHandle.open: No trigger found with id "${triggerId}".` : (0, _formatErrorMessage2.default)(80, triggerId));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1739b97b7ea38ce Environment-variable access.
pkgs/npm/@[email protected]/popover/store/PopoverHandle.mjs:24
      throw new Error(process.env.NODE_ENV !== "production" ? `Base UI: PopoverHandle.open: No trigger found with id "${triggerId}".` : _formatErrorMessage(80, triggerId));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4777eae2c51fdc5 Environment-variable access.
pkgs/npm/@[email protected]/popover/title/PopoverTitle.js:39
if (process.env.NODE_ENV !== "production") PopoverTitle.displayName = "PopoverTitle";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d95cb84a2f731cfc Environment-variable access.
pkgs/npm/@[email protected]/popover/title/PopoverTitle.mjs:34
if (process.env.NODE_ENV !== "production") PopoverTitle.displayName = "PopoverTitle";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #adfbcb701a4f63a0 Environment-variable access.
pkgs/npm/@[email protected]/popover/trigger/PopoverTrigger.js:50
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Popover.Trigger> must be either used within a <Popover.Root> component or provided with a handle.' : (0, _formatErrorMessage2.default)(74));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57d7098a7b524268 Environment-variable access.
pkgs/npm/@[email protected]/popover/trigger/PopoverTrigger.js:149
if (process.env.NODE_ENV !== "production") PopoverTrigger.displayName = "PopoverTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b7026c2f6502bb9 Environment-variable access.
pkgs/npm/@[email protected]/popover/trigger/PopoverTrigger.mjs:44
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Popover.Trigger> must be either used within a <Popover.Root> component or provided with a handle.' : _formatErrorMessage(74));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #159ca21a39bbf522 Environment-variable access.
pkgs/npm/@[email protected]/popover/trigger/PopoverTrigger.mjs:143
if (process.env.NODE_ENV !== "production") PopoverTrigger.displayName = "PopoverTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c02f5b0a50bcc79d Environment-variable access.
pkgs/npm/@[email protected]/popover/viewport/PopoverViewport.js:67
if (process.env.NODE_ENV !== "production") PopoverViewport.displayName = "PopoverViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31c8ca396c754eb3 Environment-variable access.
pkgs/npm/@[email protected]/popover/viewport/PopoverViewport.mjs:61
if (process.env.NODE_ENV !== "production") PopoverViewport.displayName = "PopoverViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #189379799073b4d6 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/arrow/PreviewCardArrow.js:53
if (process.env.NODE_ENV !== "production") PreviewCardArrow.displayName = "PreviewCardArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ddb2785396978d1 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/arrow/PreviewCardArrow.mjs:48
if (process.env.NODE_ENV !== "production") PreviewCardArrow.displayName = "PreviewCardArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #285e643bbb993304 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/backdrop/PreviewCardBackdrop.js:56
if (process.env.NODE_ENV !== "production") PreviewCardBackdrop.displayName = "PreviewCardBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cff5aaf6a6f3bd9f Environment-variable access.
pkgs/npm/@[email protected]/preview-card/backdrop/PreviewCardBackdrop.mjs:50
if (process.env.NODE_ENV !== "production") PreviewCardBackdrop.displayName = "PreviewCardBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #590f5618758abaaa Environment-variable access.
pkgs/npm/@[email protected]/preview-card/popup/PreviewCardPopup.js:75
if (process.env.NODE_ENV !== "production") PreviewCardPopup.displayName = "PreviewCardPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a62f8de63e898594 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/popup/PreviewCardPopup.mjs:69
if (process.env.NODE_ENV !== "production") PreviewCardPopup.displayName = "PreviewCardPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b02ea85426b5955b Environment-variable access.
pkgs/npm/@[email protected]/preview-card/portal/PreviewCardPortal.js:40
if (process.env.NODE_ENV !== "production") PreviewCardPortal.displayName = "PreviewCardPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #693a89473b3a6e8e Environment-variable access.
pkgs/npm/@[email protected]/preview-card/portal/PreviewCardPortal.mjs:35
if (process.env.NODE_ENV !== "production") PreviewCardPortal.displayName = "PreviewCardPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f98c174cb4b27f36 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/portal/PreviewCardPortalContext.js:14
if (process.env.NODE_ENV !== "production") PreviewCardPortalContext.displayName = "PreviewCardPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf250bff5ed25998 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/portal/PreviewCardPortalContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <PreviewCard.Portal> is missing.' : (0, _formatErrorMessage2.default)(48));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #235d85224d6dac95 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/portal/PreviewCardPortalContext.mjs:6
if (process.env.NODE_ENV !== "production") PreviewCardPortalContext.displayName = "PreviewCardPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8d7c0ba9a717bc1 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/portal/PreviewCardPortalContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <PreviewCard.Portal> is missing.' : _formatErrorMessage(48));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c48c6a2b8ac5bee9 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/positioner/PreviewCardPositioner.js:105
if (process.env.NODE_ENV !== "production") PreviewCardPositioner.displayName = "PreviewCardPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d5ec5c8de3bec20 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/positioner/PreviewCardPositioner.mjs:100
if (process.env.NODE_ENV !== "production") PreviewCardPositioner.displayName = "PreviewCardPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24b128250c4ec59c Environment-variable access.
pkgs/npm/@[email protected]/preview-card/positioner/PreviewCardPositionerContext.js:14
if (process.env.NODE_ENV !== "production") PreviewCardPositionerContext.displayName = "PreviewCardPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e651e69d3942a741 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/positioner/PreviewCardPositionerContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <PreviewCard.Popup> and <PreviewCard.Arrow> must be used within the <PreviewCard.Positioner> component' : (0, _formatErrorMessage2.default)(49));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1c3a3d32859268c Environment-variable access.
pkgs/npm/@[email protected]/preview-card/positioner/PreviewCardPositionerContext.mjs:6
if (process.env.NODE_ENV !== "production") PreviewCardPositionerContext.displayName = "PreviewCardPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4e71ba38a07601f Environment-variable access.
pkgs/npm/@[email protected]/preview-card/positioner/PreviewCardPositionerContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <PreviewCard.Popup> and <PreviewCard.Arrow> must be used within the <PreviewCard.Positioner> component' : _formatErrorMessage(49));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72ab7a9156111274 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/root/PreviewCardContext.js:14
if (process.env.NODE_ENV !== "production") PreviewCardRootContext.displayName = "PreviewCardRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bdb1d961d06d05e Environment-variable access.
pkgs/npm/@[email protected]/preview-card/root/PreviewCardContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: PreviewCardRootContext is missing. PreviewCard parts must be placed within <PreviewCard.Root>.' : (0, _formatErrorMessage2.default)(50));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2ee2303240ae110 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/root/PreviewCardContext.mjs:6
if (process.env.NODE_ENV !== "production") PreviewCardRootContext.displayName = "PreviewCardRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #957c0669b0f80589 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/root/PreviewCardContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: PreviewCardRootContext is missing. PreviewCard parts must be placed within <PreviewCard.Root>.' : _formatErrorMessage(50));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #211ff7d969380e93 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/root/PreviewCardRoot.js:114
if (process.env.NODE_ENV !== "production") PreviewCardRoot.displayName = "PreviewCardRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ba5265db91ca0c2 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/root/PreviewCardRoot.mjs:108
if (process.env.NODE_ENV !== "production") PreviewCardRoot.displayName = "PreviewCardRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de6bddc8dff12299 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/store/PreviewCardHandle.js:37
      throw new Error(process.env.NODE_ENV !== "production" ? `Base UI: PreviewCardHandle.open: No trigger found with id "${triggerId}".` : (0, _formatErrorMessage2.default)(88, triggerId));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8238a0f1515865f Environment-variable access.
pkgs/npm/@[email protected]/preview-card/store/PreviewCardHandle.mjs:30
      throw new Error(process.env.NODE_ENV !== "production" ? `Base UI: PreviewCardHandle.open: No trigger found with id "${triggerId}".` : _formatErrorMessage(88, triggerId));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3719ade6532915ff Environment-variable access.
pkgs/npm/@[email protected]/preview-card/trigger/PreviewCardTrigger.js:42
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <PreviewCard.Trigger> must be either used within a <PreviewCard.Root> component or provided with a handle.' : (0, _formatErrorMessage2.default)(89));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e92a43b5784dbfe Environment-variable access.
pkgs/npm/@[email protected]/preview-card/trigger/PreviewCardTrigger.js:93
if (process.env.NODE_ENV !== "production") PreviewCardTrigger.displayName = "PreviewCardTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1b20f69a58bb4df Environment-variable access.
pkgs/npm/@[email protected]/preview-card/trigger/PreviewCardTrigger.mjs:36
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <PreviewCard.Trigger> must be either used within a <PreviewCard.Root> component or provided with a handle.' : _formatErrorMessage(89));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e8a92d0f022fa762 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/trigger/PreviewCardTrigger.mjs:87
if (process.env.NODE_ENV !== "production") PreviewCardTrigger.displayName = "PreviewCardTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bdb042ef8f86d88 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/viewport/PreviewCardViewport.js:63
if (process.env.NODE_ENV !== "production") PreviewCardViewport.displayName = "PreviewCardViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58b660a0c12b9263 Environment-variable access.
pkgs/npm/@[email protected]/preview-card/viewport/PreviewCardViewport.mjs:57
if (process.env.NODE_ENV !== "production") PreviewCardViewport.displayName = "PreviewCardViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f69e662dc56b4f6a Environment-variable access.
pkgs/npm/@[email protected]/progress/indicator/ProgressIndicator.js:49
if (process.env.NODE_ENV !== "production") ProgressIndicator.displayName = "ProgressIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb0f914d357f17fb Environment-variable access.
pkgs/npm/@[email protected]/progress/indicator/ProgressIndicator.mjs:43
if (process.env.NODE_ENV !== "production") ProgressIndicator.displayName = "ProgressIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4585985a17ac8191 Environment-variable access.
pkgs/npm/@[email protected]/progress/label/ProgressLabel.js:44
if (process.env.NODE_ENV !== "production") ProgressLabel.displayName = "ProgressLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4332f1ed02e4fde0 Environment-variable access.
pkgs/npm/@[email protected]/progress/label/ProgressLabel.mjs:38
if (process.env.NODE_ENV !== "production") ProgressLabel.displayName = "ProgressLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48edc527f69c43d3 Environment-variable access.
pkgs/npm/@[email protected]/progress/root/ProgressRoot.js:89
if (process.env.NODE_ENV !== "production") ProgressRoot.displayName = "ProgressRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3b3b9478c878af6 Environment-variable access.
pkgs/npm/@[email protected]/progress/root/ProgressRoot.mjs:83
if (process.env.NODE_ENV !== "production") ProgressRoot.displayName = "ProgressRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #140fa992def3de07 Environment-variable access.
pkgs/npm/@[email protected]/progress/root/ProgressRootContext.js:17
if (process.env.NODE_ENV !== "production") ProgressRootContext.displayName = "ProgressRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ca4d3f55c13f8c1 Environment-variable access.
pkgs/npm/@[email protected]/progress/root/ProgressRootContext.js:21
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ProgressRootContext is missing. Progress parts must be placed within <Progress.Root>.' : (0, _formatErrorMessage2.default)(51));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b680460fd580b897 Environment-variable access.
pkgs/npm/@[email protected]/progress/root/ProgressRootContext.mjs:9
if (process.env.NODE_ENV !== "production") ProgressRootContext.displayName = "ProgressRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #75c48917a83ce29c Environment-variable access.
pkgs/npm/@[email protected]/progress/root/ProgressRootContext.mjs:13
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ProgressRootContext is missing. Progress parts must be placed within <Progress.Root>.' : _formatErrorMessage(51));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6cbaf2ae661e7728 Environment-variable access.
pkgs/npm/@[email protected]/progress/track/ProgressTrack.js:37
if (process.env.NODE_ENV !== "production") ProgressTrack.displayName = "ProgressTrack";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09d8a54a6f79a1e7 Environment-variable access.
pkgs/npm/@[email protected]/progress/track/ProgressTrack.mjs:31
if (process.env.NODE_ENV !== "production") ProgressTrack.displayName = "ProgressTrack";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #111f0f7f9d300c44 Environment-variable access.
pkgs/npm/@[email protected]/progress/value/ProgressValue.js:45
if (process.env.NODE_ENV !== "production") ProgressValue.displayName = "ProgressValue";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e4d55dbc4d8b7aa Environment-variable access.
pkgs/npm/@[email protected]/progress/value/ProgressValue.mjs:39
if (process.env.NODE_ENV !== "production") ProgressValue.displayName = "ProgressValue";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10cf2d33320ad215 Environment-variable access.
pkgs/npm/@[email protected]/radio-group/RadioGroup.js:212
if (process.env.NODE_ENV !== "production") RadioGroup.displayName = "RadioGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ec0de23339b3c13 Environment-variable access.
pkgs/npm/@[email protected]/radio-group/RadioGroup.mjs:206
if (process.env.NODE_ENV !== "production") RadioGroup.displayName = "RadioGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ce81b2c2183091f6 Environment-variable access.
pkgs/npm/@[email protected]/radio-group/RadioGroupContext.js:12
if (process.env.NODE_ENV !== "production") RadioGroupContext.displayName = "RadioGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a83ce57030a15104 Environment-variable access.
pkgs/npm/@[email protected]/radio-group/RadioGroupContext.mjs:5
if (process.env.NODE_ENV !== "production") RadioGroupContext.displayName = "RadioGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8785587db61d798f Environment-variable access.
pkgs/npm/@[email protected]/radio/indicator/RadioIndicator.js:62
if (process.env.NODE_ENV !== "production") RadioIndicator.displayName = "RadioIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54a5f38a490d7c54 Environment-variable access.
pkgs/npm/@[email protected]/radio/indicator/RadioIndicator.mjs:57
if (process.env.NODE_ENV !== "production") RadioIndicator.displayName = "RadioIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3784dc2cc708e97e Environment-variable access.
pkgs/npm/@[email protected]/radio/root/RadioRoot.js:237
if (process.env.NODE_ENV !== "production") RadioRoot.displayName = "RadioRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3882f6a1115a473e Environment-variable access.
pkgs/npm/@[email protected]/radio/root/RadioRoot.mjs:232
if (process.env.NODE_ENV !== "production") RadioRoot.displayName = "RadioRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14405ab65c2762b5 Environment-variable access.
pkgs/npm/@[email protected]/radio/root/RadioRootContext.js:14
if (process.env.NODE_ENV !== "production") RadioRootContext.displayName = "RadioRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5a0b3349036f76f Environment-variable access.
pkgs/npm/@[email protected]/radio/root/RadioRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: RadioRootContext is missing. Radio parts must be placed within <Radio.Root>.' : (0, _formatErrorMessage2.default)(52));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a64dac66e6ba2333 Environment-variable access.
pkgs/npm/@[email protected]/radio/root/RadioRootContext.mjs:6
if (process.env.NODE_ENV !== "production") RadioRootContext.displayName = "RadioRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c62ddc81761a5f8d Environment-variable access.
pkgs/npm/@[email protected]/radio/root/RadioRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: RadioRootContext is missing. Radio parts must be placed within <Radio.Root>.' : _formatErrorMessage(52));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11e6cda807e1e183 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/content/ScrollAreaContent.js:76
if (process.env.NODE_ENV !== "production") ScrollAreaContent.displayName = "ScrollAreaContent";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df9b43d63b248f6b Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/content/ScrollAreaContent.mjs:70
if (process.env.NODE_ENV !== "production") ScrollAreaContent.displayName = "ScrollAreaContent";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccdd83cc40c1eb19 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/corner/ScrollAreaCorner.js:47
if (process.env.NODE_ENV !== "production") ScrollAreaCorner.displayName = "ScrollAreaCorner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fd9e08794afb190 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/corner/ScrollAreaCorner.mjs:42
if (process.env.NODE_ENV !== "production") ScrollAreaCorner.displayName = "ScrollAreaCorner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d0f0dbc25a2183e Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/root/ScrollAreaRoot.js:263
if (process.env.NODE_ENV !== "production") ScrollAreaRoot.displayName = "ScrollAreaRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bea4054b71162b77 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/root/ScrollAreaRoot.mjs:257
if (process.env.NODE_ENV !== "production") ScrollAreaRoot.displayName = "ScrollAreaRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3a30e00a6b9fc30 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/root/ScrollAreaRootContext.js:14
if (process.env.NODE_ENV !== "production") ScrollAreaRootContext.displayName = "ScrollAreaRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5df4ae0d5c6e178 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/root/ScrollAreaRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ScrollAreaRootContext is missing. ScrollArea parts must be placed within <ScrollArea.Root>.' : (0, _formatErrorMessage2.default)(53));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9673f6aeb30052ea Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/root/ScrollAreaRootContext.mjs:6
if (process.env.NODE_ENV !== "production") ScrollAreaRootContext.displayName = "ScrollAreaRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #900ffa90a8b92224 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/root/ScrollAreaRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ScrollAreaRootContext is missing. ScrollArea parts must be placed within <ScrollArea.Root>.' : _formatErrorMessage(53));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5102edf303eb440d Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/scrollbar/ScrollAreaScrollbar.js:219
if (process.env.NODE_ENV !== "production") ScrollAreaScrollbar.displayName = "ScrollAreaScrollbar";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #414bf56623ec64e5 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/scrollbar/ScrollAreaScrollbar.mjs:213
if (process.env.NODE_ENV !== "production") ScrollAreaScrollbar.displayName = "ScrollAreaScrollbar";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fcd668456167a41 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/scrollbar/ScrollAreaScrollbarContext.js:14
if (process.env.NODE_ENV !== "production") ScrollAreaScrollbarContext.displayName = "ScrollAreaScrollbarContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7daa0af5024992ad Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/scrollbar/ScrollAreaScrollbarContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ScrollAreaScrollbarContext is missing. ScrollAreaScrollbar parts must be placed within <ScrollArea.Scrollbar>.' : (0, _formatErrorMessage2.default)(54));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca6d5136cadfaefe Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/scrollbar/ScrollAreaScrollbarContext.mjs:6
if (process.env.NODE_ENV !== "production") ScrollAreaScrollbarContext.displayName = "ScrollAreaScrollbarContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1250d76c957663d7 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/scrollbar/ScrollAreaScrollbarContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ScrollAreaScrollbarContext is missing. ScrollAreaScrollbar parts must be placed within <ScrollArea.Scrollbar>.' : _formatErrorMessage(54));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f22fda9cdc0fe97e Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/thumb/ScrollAreaThumb.js:76
if (process.env.NODE_ENV !== "production") ScrollAreaThumb.displayName = "ScrollAreaThumb";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b60196de059a8959 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/thumb/ScrollAreaThumb.mjs:71
if (process.env.NODE_ENV !== "production") ScrollAreaThumb.displayName = "ScrollAreaThumb";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a9d2707dc45a136 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/viewport/ScrollAreaViewport.js:362
if (process.env.NODE_ENV !== "production") ScrollAreaViewport.displayName = "ScrollAreaViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92dd1b9929e3125a Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/viewport/ScrollAreaViewport.mjs:357
if (process.env.NODE_ENV !== "production") ScrollAreaViewport.displayName = "ScrollAreaViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #44d716f2d5ece607 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/viewport/ScrollAreaViewportContext.js:14
if (process.env.NODE_ENV !== "production") ScrollAreaViewportContext.displayName = "ScrollAreaViewportContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ef945965aa8f023 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/viewport/ScrollAreaViewportContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ScrollAreaViewportContext missing. ScrollAreaViewport parts must be placed within <ScrollArea.Viewport>.' : (0, _formatErrorMessage2.default)(55));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e07f9a324437c2f6 Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/viewport/ScrollAreaViewportContext.mjs:6
if (process.env.NODE_ENV !== "production") ScrollAreaViewportContext.displayName = "ScrollAreaViewportContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6cfdec3f496e948e Environment-variable access.
pkgs/npm/@[email protected]/scroll-area/viewport/ScrollAreaViewportContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ScrollAreaViewportContext missing. ScrollAreaViewport parts must be placed within <ScrollArea.Viewport>.' : _formatErrorMessage(55));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d39c71f15b5870c Environment-variable access.
pkgs/npm/@[email protected]/select/arrow/SelectArrow.js:67
if (process.env.NODE_ENV !== "production") SelectArrow.displayName = "SelectArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0616c68f52de7f98 Environment-variable access.
pkgs/npm/@[email protected]/select/arrow/SelectArrow.mjs:61
if (process.env.NODE_ENV !== "production") SelectArrow.displayName = "SelectArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a2cb5ad76c34d6e Environment-variable access.
pkgs/npm/@[email protected]/select/backdrop/SelectBackdrop.js:59
if (process.env.NODE_ENV !== "production") SelectBackdrop.displayName = "SelectBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ab4121341a808e2 Environment-variable access.
pkgs/npm/@[email protected]/select/backdrop/SelectBackdrop.mjs:53
if (process.env.NODE_ENV !== "production") SelectBackdrop.displayName = "SelectBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81ea1d9c513ca66e Environment-variable access.
pkgs/npm/@[email protected]/select/group-label/SelectGroupLabel.js:43
if (process.env.NODE_ENV !== "production") SelectGroupLabel.displayName = "SelectGroupLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5219318e70841812 Environment-variable access.
pkgs/npm/@[email protected]/select/group-label/SelectGroupLabel.mjs:38
if (process.env.NODE_ENV !== "production") SelectGroupLabel.displayName = "SelectGroupLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f19158de8f9c5d4 Environment-variable access.
pkgs/npm/@[email protected]/select/group/SelectGroup.js:43
if (process.env.NODE_ENV !== "production") SelectGroup.displayName = "SelectGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb8650f3afc5f61c Environment-variable access.
pkgs/npm/@[email protected]/select/group/SelectGroup.mjs:38
if (process.env.NODE_ENV !== "production") SelectGroup.displayName = "SelectGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #367e7e5c1722b11b Environment-variable access.
pkgs/npm/@[email protected]/select/group/SelectGroupContext.js:14
if (process.env.NODE_ENV !== "production") SelectGroupContext.displayName = "SelectGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e3aa60d7e1c0e09 Environment-variable access.
pkgs/npm/@[email protected]/select/group/SelectGroupContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SelectGroupContext is missing. SelectGroup parts must be placed within <Select.Group>.' : (0, _formatErrorMessage2.default)(56));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9b9f93785c5336d Environment-variable access.
pkgs/npm/@[email protected]/select/group/SelectGroupContext.mjs:6
if (process.env.NODE_ENV !== "production") SelectGroupContext.displayName = "SelectGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcd87e5550949b1d Environment-variable access.
pkgs/npm/@[email protected]/select/group/SelectGroupContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SelectGroupContext is missing. SelectGroup parts must be placed within <Select.Group>.' : _formatErrorMessage(56));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5cacb2108aa8bd2 Environment-variable access.
pkgs/npm/@[email protected]/select/icon/SelectIcon.js:46
if (process.env.NODE_ENV !== "production") SelectIcon.displayName = "SelectIcon";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3795cb80a13818dd Environment-variable access.
pkgs/npm/@[email protected]/select/icon/SelectIcon.mjs:41
if (process.env.NODE_ENV !== "production") SelectIcon.displayName = "SelectIcon";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05c8c6d7ad10624e Environment-variable access.
pkgs/npm/@[email protected]/select/item-indicator/SelectItemIndicator.js:40
if (process.env.NODE_ENV !== "production") SelectItemIndicator.displayName = "SelectItemIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf6520dffeec19f1 Environment-variable access.
pkgs/npm/@[email protected]/select/item-indicator/SelectItemIndicator.js:81
if (process.env.NODE_ENV !== "production") Inner.displayName = "Inner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f93c09f530b5dfc Environment-variable access.
pkgs/npm/@[email protected]/select/item-indicator/SelectItemIndicator.mjs:35
if (process.env.NODE_ENV !== "production") SelectItemIndicator.displayName = "SelectItemIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b83bae6ffe879329 Environment-variable access.
pkgs/npm/@[email protected]/select/item-indicator/SelectItemIndicator.mjs:76
if (process.env.NODE_ENV !== "production") Inner.displayName = "Inner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efb04e3c35f7ea6a Environment-variable access.
pkgs/npm/@[email protected]/select/item-text/SelectItemText.js:53
if (process.env.NODE_ENV !== "production") SelectItemText.displayName = "SelectItemText";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34aa960bc2ff18fa Environment-variable access.
pkgs/npm/@[email protected]/select/item-text/SelectItemText.mjs:48
if (process.env.NODE_ENV !== "production") SelectItemText.displayName = "SelectItemText";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d3c3da734a9ae5b Environment-variable access.
pkgs/npm/@[email protected]/select/item/SelectItem.js:222
if (process.env.NODE_ENV !== "production") SelectItem.displayName = "SelectItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b039d2e9bf02ea3e Environment-variable access.
pkgs/npm/@[email protected]/select/item/SelectItem.mjs:217
if (process.env.NODE_ENV !== "production") SelectItem.displayName = "SelectItem";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a5ee78ffd6df54b Environment-variable access.
pkgs/npm/@[email protected]/select/item/SelectItemContext.js:14
if (process.env.NODE_ENV !== "production") SelectItemContext.displayName = "SelectItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1aba76eede537ceb Environment-variable access.
pkgs/npm/@[email protected]/select/item/SelectItemContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SelectItemContext is missing. SelectItem parts must be placed within <Select.Item>.' : (0, _formatErrorMessage2.default)(57));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50d4c39e41ee0330 Environment-variable access.
pkgs/npm/@[email protected]/select/item/SelectItemContext.mjs:6
if (process.env.NODE_ENV !== "production") SelectItemContext.displayName = "SelectItemContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c7293d56b75753b Environment-variable access.
pkgs/npm/@[email protected]/select/item/SelectItemContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SelectItemContext is missing. SelectItem parts must be placed within <Select.Item>.' : _formatErrorMessage(57));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ecefa55bbe356fec Environment-variable access.
pkgs/npm/@[email protected]/select/label/SelectLabel.js:55
if (process.env.NODE_ENV !== "production") SelectLabel.displayName = "SelectLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c603dc0db2d7a3fc Environment-variable access.
pkgs/npm/@[email protected]/select/label/SelectLabel.mjs:50
if (process.env.NODE_ENV !== "production") SelectLabel.displayName = "SelectLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc4a2757b25e3f5a Environment-variable access.
pkgs/npm/@[email protected]/select/list/SelectList.js:62
if (process.env.NODE_ENV !== "production") SelectList.displayName = "SelectList";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f2decec5240474a Environment-variable access.
pkgs/npm/@[email protected]/select/list/SelectList.mjs:57
if (process.env.NODE_ENV !== "production") SelectList.displayName = "SelectList";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dff1a0a19819175a Environment-variable access.
pkgs/npm/@[email protected]/select/popup/SelectPopup.js:400
if (process.env.NODE_ENV !== "production") SelectPopup.displayName = "SelectPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9a8639cd681a5e3 Environment-variable access.
pkgs/npm/@[email protected]/select/popup/SelectPopup.mjs:394
if (process.env.NODE_ENV !== "production") SelectPopup.displayName = "SelectPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47b979041007db2a Environment-variable access.
pkgs/npm/@[email protected]/select/portal/SelectPortal.js:41
if (process.env.NODE_ENV !== "production") SelectPortal.displayName = "SelectPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bec7582c3ccc73ae Environment-variable access.
pkgs/npm/@[email protected]/select/portal/SelectPortal.mjs:36
if (process.env.NODE_ENV !== "production") SelectPortal.displayName = "SelectPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d62368d6d193629d Environment-variable access.
pkgs/npm/@[email protected]/select/portal/SelectPortalContext.js:14
if (process.env.NODE_ENV !== "production") SelectPortalContext.displayName = "SelectPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #481726931794c37a Environment-variable access.
pkgs/npm/@[email protected]/select/portal/SelectPortalContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Select.Portal> is missing.' : (0, _formatErrorMessage2.default)(58));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9242ca52691faf52 Environment-variable access.
pkgs/npm/@[email protected]/select/portal/SelectPortalContext.mjs:6
if (process.env.NODE_ENV !== "production") SelectPortalContext.displayName = "SelectPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0eb3cf7d345180b Environment-variable access.
pkgs/npm/@[email protected]/select/portal/SelectPortalContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Select.Portal> is missing.' : _formatErrorMessage(58));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0310763ff72449a Environment-variable access.
pkgs/npm/@[email protected]/select/positioner/SelectPositioner.js:208
if (process.env.NODE_ENV !== "production") SelectPositioner.displayName = "SelectPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0869c1e6a1f395a Environment-variable access.
pkgs/npm/@[email protected]/select/positioner/SelectPositioner.mjs:202
if (process.env.NODE_ENV !== "production") SelectPositioner.displayName = "SelectPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7e138370db780e4 Environment-variable access.
pkgs/npm/@[email protected]/select/positioner/SelectPositionerContext.js:14
if (process.env.NODE_ENV !== "production") SelectPositionerContext.displayName = "SelectPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c1d8bae7515341c1 Environment-variable access.
pkgs/npm/@[email protected]/select/positioner/SelectPositionerContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SelectPositionerContext is missing. SelectPositioner parts must be placed within <Select.Positioner>.' : (0, _formatErrorMessage2.default)(59));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf5413f0b2d1c015 Environment-variable access.
pkgs/npm/@[email protected]/select/positioner/SelectPositionerContext.mjs:6
if (process.env.NODE_ENV !== "production") SelectPositionerContext.displayName = "SelectPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8d80b5aa3badeac Environment-variable access.
pkgs/npm/@[email protected]/select/positioner/SelectPositionerContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SelectPositionerContext is missing. SelectPositioner parts must be placed within <Select.Positioner>.' : _formatErrorMessage(59));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1175da2719e5206b Environment-variable access.
pkgs/npm/@[email protected]/select/root/SelectRootContext.js:15
if (process.env.NODE_ENV !== "production") SelectRootContext.displayName = "SelectRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #601aa518156ec5fb Environment-variable access.
pkgs/npm/@[email protected]/select/root/SelectRootContext.js:17
if (process.env.NODE_ENV !== "production") SelectFloatingContext.displayName = "SelectFloatingContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3690ef274e93a84b Environment-variable access.
pkgs/npm/@[email protected]/select/root/SelectRootContext.js:21
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SelectRootContext is missing. Select parts must be placed within <Select.Root>.' : (0, _formatErrorMessage2.default)(60));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a96b70cde5d39b0 Environment-variable access.
pkgs/npm/@[email protected]/select/root/SelectRootContext.js:28
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SelectFloatingContext is missing. Select parts must be placed within <Select.Root>.' : (0, _formatErrorMessage2.default)(61));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #020d1831890781df Environment-variable access.
pkgs/npm/@[email protected]/select/root/SelectRootContext.mjs:6
if (process.env.NODE_ENV !== "production") SelectRootContext.displayName = "SelectRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c28c4c209daeb75 Environment-variable access.
pkgs/npm/@[email protected]/select/root/SelectRootContext.mjs:8
if (process.env.NODE_ENV !== "production") SelectFloatingContext.displayName = "SelectFloatingContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db2e8d07f79a4c25 Environment-variable access.
pkgs/npm/@[email protected]/select/root/SelectRootContext.mjs:12
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SelectRootContext is missing. Select parts must be placed within <Select.Root>.' : _formatErrorMessage(60));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9dae7e2fd56694ab Environment-variable access.
pkgs/npm/@[email protected]/select/root/SelectRootContext.mjs:19
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SelectFloatingContext is missing. Select parts must be placed within <Select.Root>.' : _formatErrorMessage(61));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7555b28045dec15 Environment-variable access.
pkgs/npm/@[email protected]/select/scroll-arrow/SelectScrollArrow.js:144
if (process.env.NODE_ENV !== "production") SelectScrollArrow.displayName = "SelectScrollArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c6aa4a65e5dc336 Environment-variable access.
pkgs/npm/@[email protected]/select/scroll-arrow/SelectScrollArrow.mjs:139
if (process.env.NODE_ENV !== "production") SelectScrollArrow.displayName = "SelectScrollArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #203aaff2f1b79cf0 Environment-variable access.
pkgs/npm/@[email protected]/select/scroll-down-arrow/SelectScrollDownArrow.js:25
if (process.env.NODE_ENV !== "production") SelectScrollDownArrow.displayName = "SelectScrollDownArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #901ad8d96ca8b7ee Environment-variable access.
pkgs/npm/@[email protected]/select/scroll-down-arrow/SelectScrollDownArrow.mjs:19
if (process.env.NODE_ENV !== "production") SelectScrollDownArrow.displayName = "SelectScrollDownArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41f4f1338df1ac49 Environment-variable access.
pkgs/npm/@[email protected]/select/scroll-up-arrow/SelectScrollUpArrow.js:25
if (process.env.NODE_ENV !== "production") SelectScrollUpArrow.displayName = "SelectScrollUpArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da1a08cf8c051258 Environment-variable access.
pkgs/npm/@[email protected]/select/scroll-up-arrow/SelectScrollUpArrow.mjs:19
if (process.env.NODE_ENV !== "production") SelectScrollUpArrow.displayName = "SelectScrollUpArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9140e6c69d613944 Environment-variable access.
pkgs/npm/@[email protected]/select/trigger/SelectTrigger.js:219
if (process.env.NODE_ENV !== "production") SelectTrigger.displayName = "SelectTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78657e95d1293243 Environment-variable access.
pkgs/npm/@[email protected]/select/trigger/SelectTrigger.mjs:213
if (process.env.NODE_ENV !== "production") SelectTrigger.displayName = "SelectTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a96ec1a5203ec18b Environment-variable access.
pkgs/npm/@[email protected]/select/value/SelectValue.js:70
if (process.env.NODE_ENV !== "production") SelectValue.displayName = "SelectValue";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3842a19c5d8faf7e Environment-variable access.
pkgs/npm/@[email protected]/select/value/SelectValue.mjs:64
if (process.env.NODE_ENV !== "production") SelectValue.displayName = "SelectValue";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae9f9fbd192dd115 Environment-variable access.
pkgs/npm/@[email protected]/separator/Separator.js:38
if (process.env.NODE_ENV !== "production") Separator.displayName = "Separator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b943f7ced97c7ff3 Environment-variable access.
pkgs/npm/@[email protected]/separator/Separator.mjs:33
if (process.env.NODE_ENV !== "production") Separator.displayName = "Separator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e33e293f8787ecbb Environment-variable access.
pkgs/npm/@[email protected]/slider/control/SliderControl.js:443
if (process.env.NODE_ENV !== "production") SliderControl.displayName = "SliderControl";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84a6a072c5f47dce Environment-variable access.
pkgs/npm/@[email protected]/slider/control/SliderControl.mjs:437
if (process.env.NODE_ENV !== "production") SliderControl.displayName = "SliderControl";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a59aca129dee440 Environment-variable access.
pkgs/npm/@[email protected]/slider/indicator/SliderIndicator.js:94
if (process.env.NODE_ENV !== "production") SliderIndicator.displayName = "SliderIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fa4da0fc0f63a5e Environment-variable access.
pkgs/npm/@[email protected]/slider/indicator/SliderIndicator.mjs:88
if (process.env.NODE_ENV !== "production") SliderIndicator.displayName = "SliderIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bb739b5e3504ff6 Environment-variable access.
pkgs/npm/@[email protected]/slider/label/SliderLabel.js:64
if (process.env.NODE_ENV !== "production") SliderLabel.displayName = "SliderLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c836295e7926cdaf Environment-variable access.
pkgs/npm/@[email protected]/slider/label/SliderLabel.mjs:59
if (process.env.NODE_ENV !== "production") SliderLabel.displayName = "SliderLabel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82a2c63f99c0625f Environment-variable access.
pkgs/npm/@[email protected]/slider/root/SliderRoot.js:211
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b92051ea67f0e918 Environment-variable access.
pkgs/npm/@[email protected]/slider/root/SliderRoot.js:300
if (process.env.NODE_ENV !== "production") SliderRoot.displayName = "SliderRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e1be08d5390c56c Environment-variable access.
pkgs/npm/@[email protected]/slider/root/SliderRoot.mjs:205
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a613037f43d2cbc3 Environment-variable access.
pkgs/npm/@[email protected]/slider/root/SliderRoot.mjs:294
if (process.env.NODE_ENV !== "production") SliderRoot.displayName = "SliderRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb7828069152df37 Environment-variable access.
pkgs/npm/@[email protected]/slider/root/SliderRootContext.js:14
if (process.env.NODE_ENV !== "production") SliderRootContext.displayName = "SliderRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09fa2ccf7f8b664e Environment-variable access.
pkgs/npm/@[email protected]/slider/root/SliderRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SliderRootContext is missing. Slider parts must be placed within <Slider.Root>.' : (0, _formatErrorMessage2.default)(62));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #930b3afd9ed96a24 Environment-variable access.
pkgs/npm/@[email protected]/slider/root/SliderRootContext.mjs:6
if (process.env.NODE_ENV !== "production") SliderRootContext.displayName = "SliderRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85b3ce11ab6ac252 Environment-variable access.
pkgs/npm/@[email protected]/slider/root/SliderRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SliderRootContext is missing. Slider parts must be placed within <Slider.Root>.' : _formatErrorMessage(62));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dde13ce9e440ba19 Environment-variable access.
pkgs/npm/@[email protected]/slider/thumb/SliderThumb.js:403
if (process.env.NODE_ENV !== "production") SliderThumb.displayName = "SliderThumb";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #784d763f241e40bb Environment-variable access.
pkgs/npm/@[email protected]/slider/thumb/SliderThumb.mjs:397
if (process.env.NODE_ENV !== "production") SliderThumb.displayName = "SliderThumb";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0097f4108987a51 Environment-variable access.
pkgs/npm/@[email protected]/slider/track/SliderTrack.js:41
if (process.env.NODE_ENV !== "production") SliderTrack.displayName = "SliderTrack";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #815cda817a38b5f6 Environment-variable access.
pkgs/npm/@[email protected]/slider/track/SliderTrack.mjs:36
if (process.env.NODE_ENV !== "production") SliderTrack.displayName = "SliderTrack";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f841b257b491f81 Environment-variable access.
pkgs/npm/@[email protected]/slider/value/SliderValue.js:65
if (process.env.NODE_ENV !== "production") SliderValue.displayName = "SliderValue";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #240de0474bd9d55e Environment-variable access.
pkgs/npm/@[email protected]/slider/value/SliderValue.mjs:59
if (process.env.NODE_ENV !== "production") SliderValue.displayName = "SliderValue";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8b5a7d40d9937c7 Environment-variable access.
pkgs/npm/@[email protected]/switch/root/SwitchRoot.js:221
if (process.env.NODE_ENV !== "production") SwitchRoot.displayName = "SwitchRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #033a6eafbbaa6f51 Environment-variable access.
pkgs/npm/@[email protected]/switch/root/SwitchRoot.mjs:216
if (process.env.NODE_ENV !== "production") SwitchRoot.displayName = "SwitchRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abe390bfd49fb566 Environment-variable access.
pkgs/npm/@[email protected]/switch/root/SwitchRootContext.js:14
if (process.env.NODE_ENV !== "production") SwitchRootContext.displayName = "SwitchRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93ccad9604d97c27 Environment-variable access.
pkgs/npm/@[email protected]/switch/root/SwitchRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SwitchRootContext is missing. Switch parts must be placed within <Switch.Root>.' : (0, _formatErrorMessage2.default)(63));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ce624de23f020e2 Environment-variable access.
pkgs/npm/@[email protected]/switch/root/SwitchRootContext.mjs:6
if (process.env.NODE_ENV !== "production") SwitchRootContext.displayName = "SwitchRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea507570098f1fbf Environment-variable access.
pkgs/npm/@[email protected]/switch/root/SwitchRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: SwitchRootContext is missing. Switch parts must be placed within <Switch.Root>.' : _formatErrorMessage(63));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #382cdd67e55eb16c Environment-variable access.
pkgs/npm/@[email protected]/switch/thumb/SwitchThumb.js:34
if (process.env.NODE_ENV !== "production") SwitchThumb.displayName = "SwitchThumb";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1620be9df7ac950 Environment-variable access.
pkgs/npm/@[email protected]/switch/thumb/SwitchThumb.mjs:29
if (process.env.NODE_ENV !== "production") SwitchThumb.displayName = "SwitchThumb";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc813599172a26aa Environment-variable access.
pkgs/npm/@[email protected]/tabs/indicator/TabsIndicator.js:150
if (process.env.NODE_ENV !== "production") TabsIndicator.displayName = "TabsIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f708e77d227934b Environment-variable access.
pkgs/npm/@[email protected]/tabs/indicator/TabsIndicator.mjs:144
if (process.env.NODE_ENV !== "production") TabsIndicator.displayName = "TabsIndicator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d09d97673b8e098 Environment-variable access.
pkgs/npm/@[email protected]/tabs/list/TabsList.js:122
if (process.env.NODE_ENV !== "production") TabsList.displayName = "TabsList";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #286052963ccba6ed Environment-variable access.
pkgs/npm/@[email protected]/tabs/list/TabsList.mjs:117
if (process.env.NODE_ENV !== "production") TabsList.displayName = "TabsList";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #138a008a74bc339d Environment-variable access.
pkgs/npm/@[email protected]/tabs/list/TabsListContext.js:14
if (process.env.NODE_ENV !== "production") TabsListContext.displayName = "TabsListContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6066b6411f312d27 Environment-variable access.
pkgs/npm/@[email protected]/tabs/list/TabsListContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: TabsListContext is missing. TabsList parts must be placed within <Tabs.List>.' : (0, _formatErrorMessage2.default)(65));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85ad28a87fb93bd7 Environment-variable access.
pkgs/npm/@[email protected]/tabs/list/TabsListContext.mjs:6
if (process.env.NODE_ENV !== "production") TabsListContext.displayName = "TabsListContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7187e142f581428e Environment-variable access.
pkgs/npm/@[email protected]/tabs/list/TabsListContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: TabsListContext is missing. TabsList parts must be placed within <Tabs.List>.' : _formatErrorMessage(65));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0a1d5fddbfae44c Environment-variable access.
pkgs/npm/@[email protected]/tabs/panel/TabsPanel.js:116
if (process.env.NODE_ENV !== "production") TabsPanel.displayName = "TabsPanel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df30e38ee62eb145 Environment-variable access.
pkgs/npm/@[email protected]/tabs/panel/TabsPanel.mjs:110
if (process.env.NODE_ENV !== "production") TabsPanel.displayName = "TabsPanel";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97d8c0bf58a70efa Environment-variable access.
pkgs/npm/@[email protected]/tabs/root/TabsRoot.js:276
if (process.env.NODE_ENV !== "production") TabsRoot.displayName = "TabsRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #233bef14f075c452 Environment-variable access.
pkgs/npm/@[email protected]/tabs/root/TabsRoot.mjs:271
if (process.env.NODE_ENV !== "production") TabsRoot.displayName = "TabsRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34b2688410628ca5 Environment-variable access.
pkgs/npm/@[email protected]/tabs/root/TabsRootContext.js:17
if (process.env.NODE_ENV !== "production") TabsRootContext.displayName = "TabsRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d068e07dcb61dbb Environment-variable access.
pkgs/npm/@[email protected]/tabs/root/TabsRootContext.js:21
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: TabsRootContext is missing. Tabs parts must be placed within <Tabs.Root>.' : (0, _formatErrorMessage2.default)(64));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e06954ef8dda044e Environment-variable access.
pkgs/npm/@[email protected]/tabs/root/TabsRootContext.mjs:9
if (process.env.NODE_ENV !== "production") TabsRootContext.displayName = "TabsRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ace467b7d9c6fd6b Environment-variable access.
pkgs/npm/@[email protected]/tabs/root/TabsRootContext.mjs:13
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: TabsRootContext is missing. Tabs parts must be placed within <Tabs.Root>.' : _formatErrorMessage(64));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2e4a0af30549ae8 Environment-variable access.
pkgs/npm/@[email protected]/tabs/tab/TabsTab.js:191
if (process.env.NODE_ENV !== "production") TabsTab.displayName = "TabsTab";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31b507913ef415fb Environment-variable access.
pkgs/npm/@[email protected]/tabs/tab/TabsTab.mjs:186
if (process.env.NODE_ENV !== "production") TabsTab.displayName = "TabsTab";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #680f39d318b548b3 Environment-variable access.
pkgs/npm/@[email protected]/toast/action/ToastAction.js:55
if (process.env.NODE_ENV !== "production") ToastAction.displayName = "ToastAction";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06530f9d77062055 Environment-variable access.
pkgs/npm/@[email protected]/toast/action/ToastAction.mjs:50
if (process.env.NODE_ENV !== "production") ToastAction.displayName = "ToastAction";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b820b5c144f249d5 Environment-variable access.
pkgs/npm/@[email protected]/toast/arrow/ToastArrow.js:47
if (process.env.NODE_ENV !== "production") ToastArrow.displayName = "ToastArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b91a002501abf383 Environment-variable access.
pkgs/npm/@[email protected]/toast/arrow/ToastArrow.mjs:42
if (process.env.NODE_ENV !== "production") ToastArrow.displayName = "ToastArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7413c21f174ebde2 Environment-variable access.
pkgs/npm/@[email protected]/toast/close/ToastClose.js:63
if (process.env.NODE_ENV !== "production") ToastClose.displayName = "ToastClose";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b93cf8f7bd4f9fd Environment-variable access.
pkgs/npm/@[email protected]/toast/close/ToastClose.mjs:58
if (process.env.NODE_ENV !== "production") ToastClose.displayName = "ToastClose";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6735a4279a959722 Environment-variable access.
pkgs/npm/@[email protected]/toast/content/ToastContent.js:66
if (process.env.NODE_ENV !== "production") ToastContent.displayName = "ToastContent";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d88503d56ef0dc33 Environment-variable access.
pkgs/npm/@[email protected]/toast/content/ToastContent.mjs:61
if (process.env.NODE_ENV !== "production") ToastContent.displayName = "ToastContent";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e0cfd82c79cb3e5 Environment-variable access.
pkgs/npm/@[email protected]/toast/description/ToastDescription.js:63
if (process.env.NODE_ENV !== "production") ToastDescription.displayName = "ToastDescription";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a81c9b181ce000b7 Environment-variable access.
pkgs/npm/@[email protected]/toast/description/ToastDescription.mjs:58
if (process.env.NODE_ENV !== "production") ToastDescription.displayName = "ToastDescription";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #568c4b640a02ad88 Environment-variable access.
pkgs/npm/@[email protected]/toast/positioner/ToastPositioner.js:100
if (process.env.NODE_ENV !== "production") ToastPositioner.displayName = "ToastPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aba5cb7c7e74c5b3 Environment-variable access.
pkgs/npm/@[email protected]/toast/positioner/ToastPositioner.mjs:95
if (process.env.NODE_ENV !== "production") ToastPositioner.displayName = "ToastPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e992d89a98af32a2 Environment-variable access.
pkgs/npm/@[email protected]/toast/positioner/ToastPositionerContext.js:14
if (process.env.NODE_ENV !== "production") ToastPositionerContext.displayName = "ToastPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a7ae161db103f82 Environment-variable access.
pkgs/npm/@[email protected]/toast/positioner/ToastPositionerContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ToastPositionerContext is missing. ToastPositioner parts must be placed within <Toast.Positioner>.' : (0, _formatErrorMessage2.default)(84));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9038d69782af8ff9 Environment-variable access.
pkgs/npm/@[email protected]/toast/positioner/ToastPositionerContext.mjs:6
if (process.env.NODE_ENV !== "production") ToastPositionerContext.displayName = "ToastPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #883695848af61851 Environment-variable access.
pkgs/npm/@[email protected]/toast/positioner/ToastPositionerContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ToastPositionerContext is missing. ToastPositioner parts must be placed within <Toast.Positioner>.' : _formatErrorMessage(84));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #195b414a63cee9eb Environment-variable access.
pkgs/npm/@[email protected]/toast/provider/ToastProvider.js:74
if (process.env.NODE_ENV !== "production") ToastProvider.displayName = "ToastProvider";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd76529468428327 Environment-variable access.
pkgs/npm/@[email protected]/toast/provider/ToastProvider.mjs:69
if (process.env.NODE_ENV !== "production") ToastProvider.displayName = "ToastProvider";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5245fefe9b405bb8 Environment-variable access.
pkgs/npm/@[email protected]/toast/provider/ToastProviderContext.js:14
if (process.env.NODE_ENV !== "production") ToastContext.displayName = "ToastContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc23e75fd4f6c723 Environment-variable access.
pkgs/npm/@[email protected]/toast/provider/ToastProviderContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: useToastManager must be used within <Toast.Provider>.' : (0, _formatErrorMessage2.default)(73));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f25552e0d1231ee Environment-variable access.
pkgs/npm/@[email protected]/toast/provider/ToastProviderContext.mjs:6
if (process.env.NODE_ENV !== "production") ToastContext.displayName = "ToastContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbff62f4cd3eface Environment-variable access.
pkgs/npm/@[email protected]/toast/provider/ToastProviderContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: useToastManager must be used within <Toast.Provider>.' : _formatErrorMessage(73));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ac74e9839bb65d8 Environment-variable access.
pkgs/npm/@[email protected]/toast/root/ToastRoot.js:513
if (process.env.NODE_ENV !== "production") ToastRoot.displayName = "ToastRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e178a32309a039eb Environment-variable access.
pkgs/npm/@[email protected]/toast/root/ToastRoot.mjs:507
if (process.env.NODE_ENV !== "production") ToastRoot.displayName = "ToastRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f699f40af0dbc1cd Environment-variable access.
pkgs/npm/@[email protected]/toast/root/ToastRootContext.js:14
if (process.env.NODE_ENV !== "production") ToastRootContext.displayName = "ToastRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b860f13c878ff9a2 Environment-variable access.
pkgs/npm/@[email protected]/toast/root/ToastRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ToastRootContext is missing. Toast parts must be used within <Toast.Root>.' : (0, _formatErrorMessage2.default)(66));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f78597dd5fc5fea4 Environment-variable access.
pkgs/npm/@[email protected]/toast/root/ToastRootContext.mjs:6
if (process.env.NODE_ENV !== "production") ToastRootContext.displayName = "ToastRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e721f041deea0a50 Environment-variable access.
pkgs/npm/@[email protected]/toast/root/ToastRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ToastRootContext is missing. Toast parts must be used within <Toast.Root>.' : _formatErrorMessage(66));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be8acb82af2d0a1a Environment-variable access.
pkgs/npm/@[email protected]/toast/title/ToastTitle.js:62
if (process.env.NODE_ENV !== "production") ToastTitle.displayName = "ToastTitle";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6b60997ae5caaff Environment-variable access.
pkgs/npm/@[email protected]/toast/title/ToastTitle.mjs:57
if (process.env.NODE_ENV !== "production") ToastTitle.displayName = "ToastTitle";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d910592c2cc5705 Environment-variable access.
pkgs/npm/@[email protected]/toast/useToastManager.js:19
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: useToastManager must be used within <Toast.Provider>.' : (0, _formatErrorMessage2.default)(73));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4565c3907d308070 Environment-variable access.
pkgs/npm/@[email protected]/toast/useToastManager.mjs:12
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: useToastManager must be used within <Toast.Provider>.' : _formatErrorMessage(73));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b5c9e725f2fc1fa Environment-variable access.
pkgs/npm/@[email protected]/toast/viewport/ToastViewport.js:270
if (process.env.NODE_ENV !== "production") ToastViewport.displayName = "ToastViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a72793090c0c0a1 Environment-variable access.
pkgs/npm/@[email protected]/toast/viewport/ToastViewport.mjs:265
if (process.env.NODE_ENV !== "production") ToastViewport.displayName = "ToastViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c55764088a970f45 Environment-variable access.
pkgs/npm/@[email protected]/toggle-group/ToggleGroup.js:116
if (process.env.NODE_ENV !== "production") ToggleGroup.displayName = "ToggleGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff454b0e345ca09f Environment-variable access.
pkgs/npm/@[email protected]/toggle-group/ToggleGroup.mjs:110
if (process.env.NODE_ENV !== "production") ToggleGroup.displayName = "ToggleGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb12030d4f0460d3 Environment-variable access.
pkgs/npm/@[email protected]/toggle-group/ToggleGroupContext.js:14
if (process.env.NODE_ENV !== "production") ToggleGroupContext.displayName = "ToggleGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f54d84e55921408 Environment-variable access.
pkgs/npm/@[email protected]/toggle-group/ToggleGroupContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ToggleGroupContext is missing. ToggleGroup parts must be placed within <ToggleGroup>.' : (0, _formatErrorMessage2.default)(7));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c87448349f19bb54 Environment-variable access.
pkgs/npm/@[email protected]/toggle-group/ToggleGroupContext.mjs:6
if (process.env.NODE_ENV !== "production") ToggleGroupContext.displayName = "ToggleGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4814a3c2713d31af Environment-variable access.
pkgs/npm/@[email protected]/toggle-group/ToggleGroupContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ToggleGroupContext is missing. ToggleGroup parts must be placed within <ToggleGroup>.' : _formatErrorMessage(7));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2acc135ef12c17c Environment-variable access.
pkgs/npm/@[email protected]/toggle/Toggle.js:51
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5651b197426ef48f Environment-variable access.
pkgs/npm/@[email protected]/toggle/Toggle.js:125
if (process.env.NODE_ENV !== "production") Toggle.displayName = "Toggle";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d75d55eb43e42ee Environment-variable access.
pkgs/npm/@[email protected]/toggle/Toggle.mjs:46
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #490ac920efe93a9b Environment-variable access.
pkgs/npm/@[email protected]/toggle/Toggle.mjs:120
if (process.env.NODE_ENV !== "production") Toggle.displayName = "Toggle";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7278e755bf8a714c Environment-variable access.
pkgs/npm/@[email protected]/toolbar/button/ToolbarButton.js:75
if (process.env.NODE_ENV !== "production") ToolbarButton.displayName = "ToolbarButton";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb165fe61d91473a Environment-variable access.
pkgs/npm/@[email protected]/toolbar/button/ToolbarButton.mjs:70
if (process.env.NODE_ENV !== "production") ToolbarButton.displayName = "ToolbarButton";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #513c6849287addf9 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/group/ToolbarGroup.js:52
if (process.env.NODE_ENV !== "production") ToolbarGroup.displayName = "ToolbarGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #73ec27dd074db050 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/group/ToolbarGroup.mjs:47
if (process.env.NODE_ENV !== "production") ToolbarGroup.displayName = "ToolbarGroup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d5748de397702b7 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/group/ToolbarGroupContext.js:14
if (process.env.NODE_ENV !== "production") ToolbarGroupContext.displayName = "ToolbarGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81aa787b260e8783 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/group/ToolbarGroupContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ToolbarGroupContext is missing. ToolbarGroup parts must be placed within <Toolbar.Group>.' : (0, _formatErrorMessage2.default)(68));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e5aae3b1d27b8d7 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/group/ToolbarGroupContext.mjs:6
if (process.env.NODE_ENV !== "production") ToolbarGroupContext.displayName = "ToolbarGroupContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #808baa38dfa11d59 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/group/ToolbarGroupContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ToolbarGroupContext is missing. ToolbarGroup parts must be placed within <Toolbar.Group>.' : _formatErrorMessage(68));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d915c0305afa976 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/input/ToolbarInput.js:76
if (process.env.NODE_ENV !== "production") ToolbarInput.displayName = "ToolbarInput";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7d4e27ac0983d51 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/input/ToolbarInput.mjs:71
if (process.env.NODE_ENV !== "production") ToolbarInput.displayName = "ToolbarInput";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c206513b023f17f Environment-variable access.
pkgs/npm/@[email protected]/toolbar/link/ToolbarLink.js:49
if (process.env.NODE_ENV !== "production") ToolbarLink.displayName = "ToolbarLink";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9333c1d36f6bf1aa Environment-variable access.
pkgs/npm/@[email protected]/toolbar/link/ToolbarLink.mjs:43
if (process.env.NODE_ENV !== "production") ToolbarLink.displayName = "ToolbarLink";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b05c07d7ced7ef3b Environment-variable access.
pkgs/npm/@[email protected]/toolbar/root/ToolbarRoot.js:70
if (process.env.NODE_ENV !== "production") ToolbarRoot.displayName = "ToolbarRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df9b2542668be348 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/root/ToolbarRoot.mjs:65
if (process.env.NODE_ENV !== "production") ToolbarRoot.displayName = "ToolbarRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36aa0dc4ee78ecf2 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/root/ToolbarRootContext.js:14
if (process.env.NODE_ENV !== "production") ToolbarRootContext.displayName = "ToolbarRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a3a0de118a30c68 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/root/ToolbarRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ToolbarRootContext is missing. Toolbar parts must be placed within <Toolbar.Root>.' : (0, _formatErrorMessage2.default)(69));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1713754cc18dceec Environment-variable access.
pkgs/npm/@[email protected]/toolbar/root/ToolbarRootContext.mjs:6
if (process.env.NODE_ENV !== "production") ToolbarRootContext.displayName = "ToolbarRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c23593d3c0afcec Environment-variable access.
pkgs/npm/@[email protected]/toolbar/root/ToolbarRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: ToolbarRootContext is missing. Toolbar parts must be placed within <Toolbar.Root>.' : _formatErrorMessage(69));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ae39c38e9dd771e Environment-variable access.
pkgs/npm/@[email protected]/toolbar/separator/ToolbarSeparator.js:31
if (process.env.NODE_ENV !== "production") ToolbarSeparator.displayName = "ToolbarSeparator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46b298e9655bbac7 Environment-variable access.
pkgs/npm/@[email protected]/toolbar/separator/ToolbarSeparator.mjs:25
if (process.env.NODE_ENV !== "production") ToolbarSeparator.displayName = "ToolbarSeparator";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #320586efc42ea0c5 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/arrow/TooltipArrow.js:55
if (process.env.NODE_ENV !== "production") TooltipArrow.displayName = "TooltipArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3db85b2b217e005 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/arrow/TooltipArrow.mjs:50
if (process.env.NODE_ENV !== "production") TooltipArrow.displayName = "TooltipArrow";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c00ccec7572fbd27 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/popup/TooltipPopup.js:77
if (process.env.NODE_ENV !== "production") TooltipPopup.displayName = "TooltipPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f43f154f64cb472 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/popup/TooltipPopup.mjs:71
if (process.env.NODE_ENV !== "production") TooltipPopup.displayName = "TooltipPopup";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7950d2808cd1257a Environment-variable access.
pkgs/npm/@[email protected]/tooltip/portal/TooltipPortal.js:40
if (process.env.NODE_ENV !== "production") TooltipPortal.displayName = "TooltipPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #856d0149659fdbf8 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/portal/TooltipPortal.mjs:35
if (process.env.NODE_ENV !== "production") TooltipPortal.displayName = "TooltipPortal";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #469b82a98dc1b08b Environment-variable access.
pkgs/npm/@[email protected]/tooltip/portal/TooltipPortalContext.js:14
if (process.env.NODE_ENV !== "production") TooltipPortalContext.displayName = "TooltipPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5e56bea4c4a91abf Environment-variable access.
pkgs/npm/@[email protected]/tooltip/portal/TooltipPortalContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Tooltip.Portal> is missing.' : (0, _formatErrorMessage2.default)(70));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f5e44127e541eb0 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/portal/TooltipPortalContext.mjs:6
if (process.env.NODE_ENV !== "production") TooltipPortalContext.displayName = "TooltipPortalContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f8ddec7380c7aa8 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/portal/TooltipPortalContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Tooltip.Portal> is missing.' : _formatErrorMessage(70));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aeb760b13ff59949 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/positioner/TooltipPositioner.js:91
if (process.env.NODE_ENV !== "production") TooltipPositioner.displayName = "TooltipPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #85575ecddda6de2b Environment-variable access.
pkgs/npm/@[email protected]/tooltip/positioner/TooltipPositioner.mjs:86
if (process.env.NODE_ENV !== "production") TooltipPositioner.displayName = "TooltipPositioner";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b31890156968979 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/positioner/TooltipPositionerContext.js:14
if (process.env.NODE_ENV !== "production") TooltipPositionerContext.displayName = "TooltipPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf58d014d92903c2 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/positioner/TooltipPositionerContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: TooltipPositionerContext is missing. TooltipPositioner parts must be placed within <Tooltip.Positioner>.' : (0, _formatErrorMessage2.default)(71));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #491beec72f585a90 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/positioner/TooltipPositionerContext.mjs:6
if (process.env.NODE_ENV !== "production") TooltipPositionerContext.displayName = "TooltipPositionerContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6613efe7a960afc Environment-variable access.
pkgs/npm/@[email protected]/tooltip/positioner/TooltipPositionerContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: TooltipPositionerContext is missing. TooltipPositioner parts must be placed within <Tooltip.Positioner>.' : _formatErrorMessage(71));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37eca413d4a33b47 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/provider/TooltipProvider.js:42
if (process.env.NODE_ENV !== "production") TooltipProvider.displayName = "TooltipProvider";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #076991898dafcb7e Environment-variable access.
pkgs/npm/@[email protected]/tooltip/provider/TooltipProvider.mjs:37
if (process.env.NODE_ENV !== "production") TooltipProvider.displayName = "TooltipProvider";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55a0e45da4dda8e7 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/provider/TooltipProviderContext.js:12
if (process.env.NODE_ENV !== "production") TooltipProviderContext.displayName = "TooltipProviderContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abe6afdc2c52dcbe Environment-variable access.
pkgs/npm/@[email protected]/tooltip/provider/TooltipProviderContext.mjs:5
if (process.env.NODE_ENV !== "production") TooltipProviderContext.displayName = "TooltipProviderContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2a4d0d0aed4c732 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/root/TooltipRoot.js:124
if (process.env.NODE_ENV !== "production") TooltipRoot.displayName = "TooltipRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01750ec4c722bef0 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/root/TooltipRoot.mjs:119
if (process.env.NODE_ENV !== "production") TooltipRoot.displayName = "TooltipRoot";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26c106b1ad80f5cd Environment-variable access.
pkgs/npm/@[email protected]/tooltip/root/TooltipRootContext.js:14
if (process.env.NODE_ENV !== "production") TooltipRootContext.displayName = "TooltipRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91e710717a072640 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/root/TooltipRootContext.js:18
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: TooltipRootContext is missing. Tooltip parts must be placed within <Tooltip.Root>.' : (0, _formatErrorMessage2.default)(72));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b254809fe945411 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/root/TooltipRootContext.mjs:6
if (process.env.NODE_ENV !== "production") TooltipRootContext.displayName = "TooltipRootContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8036cc1781d6422b Environment-variable access.
pkgs/npm/@[email protected]/tooltip/root/TooltipRootContext.mjs:10
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: TooltipRootContext is missing. Tooltip parts must be placed within <Tooltip.Root>.' : _formatErrorMessage(72));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdde5d218042b050 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/store/TooltipHandle.js:37
      throw new Error(process.env.NODE_ENV !== "production" ? `Base UI: TooltipHandle.open: No trigger found with id "${triggerId}".` : (0, _formatErrorMessage2.default)(81, triggerId));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df9f95a6e71ab3b9 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/store/TooltipHandle.mjs:30
      throw new Error(process.env.NODE_ENV !== "production" ? `Base UI: TooltipHandle.open: No trigger found with id "${triggerId}".` : _formatErrorMessage(81, triggerId));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1464a927be53986 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/trigger/TooltipTrigger.js:87
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Tooltip.Trigger> must be either used within a <Tooltip.Root> component or provided with a handle.' : (0, _formatErrorMessage2.default)(82));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01d11279440ffbe1 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/trigger/TooltipTrigger.js:260
if (process.env.NODE_ENV !== "production") TooltipTrigger.displayName = "TooltipTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be4d9840f4b1092f Environment-variable access.
pkgs/npm/@[email protected]/tooltip/trigger/TooltipTrigger.mjs:80
    throw new Error(process.env.NODE_ENV !== "production" ? 'Base UI: <Tooltip.Trigger> must be either used within a <Tooltip.Root> component or provided with a handle.' : _formatErrorMessage(82));

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5022c1b1e708999 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/trigger/TooltipTrigger.mjs:253
if (process.env.NODE_ENV !== "production") TooltipTrigger.displayName = "TooltipTrigger";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e49586f676bee66 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/viewport/TooltipViewport.js:63
if (process.env.NODE_ENV !== "production") TooltipViewport.displayName = "TooltipViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f70ecb5fcaafe568 Environment-variable access.
pkgs/npm/@[email protected]/tooltip/viewport/TooltipViewport.mjs:57
if (process.env.NODE_ENV !== "production") TooltipViewport.displayName = "TooltipViewport";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b266405025359aa5 Environment-variable access.
pkgs/npm/@[email protected]/unstable-use-media-query/index.js:45
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0748141d2432c39 Environment-variable access.
pkgs/npm/@[email protected]/unstable-use-media-query/index.mjs:38
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91bd58d9e1d32c51 Environment-variable access.
pkgs/npm/@[email protected]/utils/FloatingPortalLite.js:43
if (process.env.NODE_ENV !== "production") FloatingPortalLite.displayName = "FloatingPortalLite";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2914e3b18802cc21 Environment-variable access.
pkgs/npm/@[email protected]/utils/FloatingPortalLite.mjs:38
if (process.env.NODE_ENV !== "production") FloatingPortalLite.displayName = "FloatingPortalLite";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb5f17945c6cb3fb Environment-variable access.
pkgs/npm/@[email protected]/utils/FocusGuard.js:42
if (process.env.NODE_ENV !== "production") FocusGuard.displayName = "FocusGuard";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9981bc501366692 Environment-variable access.
pkgs/npm/@[email protected]/utils/FocusGuard.mjs:37
if (process.env.NODE_ENV !== "production") FocusGuard.displayName = "FocusGuard";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff4d68ec0727f034 Environment-variable access.
pkgs/npm/@[email protected]/utils/InternalBackdrop.js:40
if (process.env.NODE_ENV !== "production") InternalBackdrop.displayName = "InternalBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57e7d2bd96851d09 Environment-variable access.
pkgs/npm/@[email protected]/utils/InternalBackdrop.mjs:34
if (process.env.NODE_ENV !== "production") InternalBackdrop.displayName = "InternalBackdrop";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e887b3ab560450dd Environment-variable access.
pkgs/npm/@[email protected]/utils/closePart.js:16
if (process.env.NODE_ENV !== "production") ClosePartContext.displayName = "ClosePartContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13c080ee0f6a9a5e Environment-variable access.
pkgs/npm/@[email protected]/utils/closePart.mjs:8
if (process.env.NODE_ENV !== "production") ClosePartContext.displayName = "ClosePartContext";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ff9656b32119bd3 Environment-variable access.
pkgs/npm/@[email protected]/utils/popups/popupTriggerMap.js:34
    if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37b55557e9daa973 Environment-variable access.
pkgs/npm/@[email protected]/utils/popups/popupTriggerMap.mjs:28
    if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e00c33268f83ed03 Environment-variable access.
pkgs/npm/@[email protected]/utils/styles.js:20
if (process.env.NODE_ENV !== "production") styleDisableScrollbar.getElement.displayName = "styleDisableScrollbar.getElement";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50b80ce807e43d45 Environment-variable access.
pkgs/npm/@[email protected]/utils/styles.mjs:14
if (process.env.NODE_ENV !== "production") styleDisableScrollbar.getElement.displayName = "styleDisableScrollbar.getElement";

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

@modelcontextprotocol/sdk

npm dependency
expand_more 38 low-confidence finding(s)
low egress tooling Excluded from app score unknown #87179b508d42c59c Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/scripts/cli.ts:54
    await client.request({ method: 'resources/list' }, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d8052df6ebc82a9a Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:16
    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d036f73b9faf30db Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:32
    const response = await fetch(url);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #9f41a478f773ebfc Filesystem access.
pkgs/npm/@[email protected]__reposrc/scripts/fetch-spec-types.ts:77
        writeFileSync(outputPath, fullContent, 'utf-8');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b62c428bc82a26d8 Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/client/stdio.ts:71
        const value = process.env[key];

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #4a54a298f3a86603 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/elicitationUrlExample.ts:632
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #2f74f9be7485c522 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/elicitationUrlExample.ts:663
        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #d676efa8801191a0 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/multipleClientsParallel.ts:64
        const result = await client.request(toolRequest, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #45adb26d1bc0fa2e Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:95
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #22e918034923076a Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/parallelToolCallsClient.ts:167
            return client
                .request(request, CallToolResultSchema)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #b203140a0aea3c1f Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:26
const DEFAULT_SERVER_URL = process.env.MCP_SERVER_URL || 'http://localhost:3000/mcp';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #57085e36f3b3973d Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:29
    const clientId = process.env.MCP_CLIENT_ID;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #cb304590aba6959a Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:36
    const privateKeyPem = process.env.MCP_CLIENT_PRIVATE_KEY_PEM;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #47b33d79b586bc01 Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:38
        const algorithm = process.env.MCP_CLIENT_ALGORITHM || 'RS256';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4272255bb2534b1d Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleClientCredentials.ts:48
    const clientSecret = process.env.MCP_CLIENT_SECRET;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #e3e7d8ad183b7a67 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:232
            const result = await this.client.request(request, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #9e9f2c7cbe406717 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleOAuthClient.ts:290
            const result = await this.client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #53228ef1711b330b Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:510
                const resourcesResult = await client.request(
                    {
                        method: 'resources/list',
                        params: {}
                    },
                    ListResourcesResultSchema
                );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #73e90122df4fbde4 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:601
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #2d03163cfd57c866 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:632
        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #9ab0218a83445632 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:719
        const result = await client.request(request, CallToolResultSchema, {
            resumptionToken: notificationsToolLastEventId,
            onresumptiontoken: onLastEventIdUpdate
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #8669b53d1fc059f4 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:748
        const promptsResult = await client.request(promptsRequest, ListPromptsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b2acb692b9b570d5 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:777
        const promptResult = await client.request(promptRequest, GetPromptResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #3e806b65bb825e85 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:798
        const resourcesResult = await client.request(resourcesRequest, ListResourcesResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #f99d832888e3d061 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/simpleStreamableHttp.ts:826
        const result = await client.request(request, ReadResourceResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #b6215d9844cb516e Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/ssePollingClient.ts:75
        const result = await client.request(
            {
                method: 'tools/call',
                params: {
                    name: 'long-task',
                    arguments: {}
                }
            },
            CallToolResultSchema,
            {
                // Track resumption tokens for debugging
                onresumptiontoken: token => {
                    lastEventId = token;
                    console.log(`[Event ID] ${token}`);
                }
            }
        );

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #f28f5af1b2796d88 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:139
        const toolsResult = await client.request(toolsRequest, ListToolsResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress tooling Excluded from app score unknown #cd2ef645edb6b7d5 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/client/streamableHttpWithSseFallbackClient.ts:172
        const result = await client.request(request, CallToolResultSchema);

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #f0d5c80913539eb5 Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationFormExample.ts:350
    const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c02ab5c362eafd3a Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:215
const MCP_PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b47541be07645df0 Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:216
const AUTH_PORT = process.env.MCP_AUTH_PORT ? parseInt(process.env.MCP_AUTH_PORT, 10) : 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #92daff02e71089d8 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/server/elicitationUrlExample.ts:245
        const response = await fetch(endpoint, {
            method: 'POST',
            headers: {
                'Content-Type': 'application/x-www-form-urlencoded'
            },
            body: new URLSearchParams({
                token: token
            }).toString()
        });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #1afcde5744821304 Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/honoWebStandardStreamableHttp.ts:69
const PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ea89ca9db15e8139 Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:621
const MCP_PORT = process.env.MCP_PORT ? parseInt(process.env.MCP_PORT, 10) : 3000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e66ef5a57448ec76 Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:622
const AUTH_PORT = process.env.MCP_AUTH_PORT ? parseInt(process.env.MCP_AUTH_PORT, 10) : 3001;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #3901efdd7ebf912d Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleStreamableHttp.ts:643
            const response = await fetch(endpoint, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/x-www-form-urlencoded'
                },
                body: new URLSearchParams({
                    token: token
                }).toString()
            });

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #9a133b42d7f16523 Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/examples/server/simpleTaskInteractive.ts:448
const PORT = process.env.PORT ? parseInt(process.env.PORT, 10) : 8000;

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #149f1a9896856e2f Environment-variable access.
pkgs/npm/@[email protected]__reposrc/src/server/auth/router.ts:12
    process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL === 'true' || process.env.MCP_DANGEROUSLY_ALLOW_INSECURE_ISSUER_URL === '1';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

class-variance-authority

npm dependency
expand_more 3 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #e74a0813d1ffd849 Environment-variable access.
pkgs/npm/[email protected]__reposrc/docs/latest/theme.config.tsx:15
  branch: process.env.NEXT_PUBLIC_VERCEL_GIT_COMMIT_REF || "main",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #912fc29ea3690789 Environment-variable access.
pkgs/npm/[email protected]__reposrc/docs/latest/theme.config.tsx:17
    process.env.NEXT_PUBLIC_VERCEL_GIT_REPO_OWNER || "joe-bell",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c93fef1dd229a22e Environment-variable access.
pkgs/npm/[email protected]__reposrc/docs/latest/theme.config.tsx:18
    process.env.NEXT_PUBLIC_VERCEL_GIT_REPO_SLUG || "cva",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

dotenv

npm dependency
expand_more 18 low-confidence finding(s)
low env_fs dependency Excluded from app score #6d4a23d88e821c63 Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:4
if (process.env.DOTENV_CONFIG_ENCODING != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5121a656824b1411 Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:5
  options.encoding = process.env.DOTENV_CONFIG_ENCODING

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d36a7d0e922daea Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:8
if (process.env.DOTENV_CONFIG_PATH != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69090e1a0d0de9ba Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:9
  options.path = process.env.DOTENV_CONFIG_PATH

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #927b349a7c0e44d3 Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:12
if (process.env.DOTENV_CONFIG_QUIET != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fe7256fe612598d Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:13
  options.quiet = process.env.DOTENV_CONFIG_QUIET

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27aa1d37a26ff19a Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:16
if (process.env.DOTENV_CONFIG_DEBUG != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddcade996acb065c Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:17
  options.debug = process.env.DOTENV_CONFIG_DEBUG

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd1ae1bc28df8cc5 Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:20
if (process.env.DOTENV_CONFIG_OVERRIDE != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdf32e84b0481f7a Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:21
  options.override = process.env.DOTENV_CONFIG_OVERRIDE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #65a2918474be3fda Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:24
if (process.env.DOTENV_CONFIG_DOTENV_KEY != null) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #60d51bc665243bde Environment-variable access.
pkgs/npm/[email protected]/lib/env-options.js:25
  options.DOTENV_KEY = process.env.DOTENV_CONFIG_DOTENV_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46a965c934dac23b Filesystem access.
pkgs/npm/[email protected]/lib/main.js:1
const fs = require('fs')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e6a8d71ede6d1ac Environment-variable access.
pkgs/npm/[email protected]/lib/main.js:141
  if (process.env.DOTENV_KEY && process.env.DOTENV_KEY.length > 0) {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6e1c63351118fdf Environment-variable access.
pkgs/npm/[email protected]/lib/main.js:142
    return process.env.DOTENV_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88704c633a3bce59 Environment-variable access.
pkgs/npm/[email protected]/lib/main.js:221
  const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || (options && options.debug))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e4755a804a3eccd1 Environment-variable access.
pkgs/npm/[email protected]/lib/main.js:222
  const quiet = parseBoolean(process.env.DOTENV_CONFIG_QUIET || (options && options.quiet))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #12f752a93200f587 Filesystem access.
pkgs/npm/[email protected]/lib/main.js:277
      const parsed = DotenvModule.parse(fs.readFileSync(path, { encoding }))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

express

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #cf0e1a4c5bbb3b66 Environment-variable access.
pkgs/npm/[email protected]/lib/application.js:91
  var env = process.env.NODE_ENV || 'development';

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

react

npm dependency
expand_more 14 low-confidence finding(s)
low env_fs dependency Excluded from app score #ee930cc22af5bd04 Environment-variable access.
pkgs/npm/[email protected]/cjs/react-compiler-runtime.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcf80addf1d88ff6 Environment-variable access.
pkgs/npm/[email protected]/cjs/react-jsx-dev-runtime.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02fd426d8fc6f7ea Environment-variable access.
pkgs/npm/[email protected]/cjs/react-jsx-dev-runtime.react-server.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23fff737251ad8d4 Environment-variable access.
pkgs/npm/[email protected]/cjs/react-jsx-runtime.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69b66b513500a261 Environment-variable access.
pkgs/npm/[email protected]/cjs/react-jsx-runtime.react-server.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #643611053af95bb5 Environment-variable access.
pkgs/npm/[email protected]/cjs/react.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abf5c2d930fca354 Environment-variable access.
pkgs/npm/[email protected]/cjs/react.react-server.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55701a51a2b8aa0c Environment-variable access.
pkgs/npm/[email protected]/compiler-runtime.js:10
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9acfa8ff5915b83 Environment-variable access.
pkgs/npm/[email protected]/index.js:3
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9261196ccaeb166b Environment-variable access.
pkgs/npm/[email protected]/jsx-dev-runtime.js:3
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #616fe7481e7d3913 Environment-variable access.
pkgs/npm/[email protected]/jsx-dev-runtime.react-server.js:3
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b29ef811e4ab2bc9 Environment-variable access.
pkgs/npm/[email protected]/jsx-runtime.js:3
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #334bbc17b1cdeea5 Environment-variable access.
pkgs/npm/[email protected]/jsx-runtime.react-server.js:3
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23da6d35e33040ee Environment-variable access.
pkgs/npm/[email protected]/react.react-server.js:3
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

react-dom

npm dependency
expand_more 25 low-confidence finding(s)
low env_fs dependency Excluded from app score #21f32eb515361bb0 Environment-variable access.
pkgs/npm/[email protected]/cjs/react-dom-client.development.js:15
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db69edf658fd6931 Environment-variable access.
pkgs/npm/[email protected]/cjs/react-dom-profiling.development.js:15
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d42f38427ee62626 Environment-variable access.
pkgs/npm/[email protected]/cjs/react-dom-server-legacy.browser.development.js:36
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c193329913947616 Environment-variable access.
pkgs/npm/[email protected]/cjs/react-dom-server-legacy.node.development.js:36
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da97591e03acf70d Environment-variable access.
pkgs/npm/[email protected]/cjs/react-dom-server.browser.development.js:36
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f01da2ac70b34d8f Environment-variable access.
pkgs/npm/[email protected]/cjs/react-dom-server.edge.development.js:36
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9b4a323f8c08fed Environment-variable access.
pkgs/npm/[email protected]/cjs/react-dom-server.node.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0330741d56ebf6ec Environment-variable access.
pkgs/npm/[email protected]/cjs/react-dom-test-utils.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5810bf784783df5 Environment-variable access.
pkgs/npm/[email protected]/cjs/react-dom.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97adba86cb38b837 Environment-variable access.
pkgs/npm/[email protected]/cjs/react-dom.react-server.development.js:12
"production" !== process.env.NODE_ENV &&

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5fe4d6244684da22 Environment-variable access.
pkgs/npm/[email protected]/client.js:11
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c95e61ae14073db9 Environment-variable access.
pkgs/npm/[email protected]/client.js:31
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #869fab2561a489bd Environment-variable access.
pkgs/npm/[email protected]/index.js:11
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5121cc4b183a1e83 Environment-variable access.
pkgs/npm/[email protected]/index.js:31
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c90e10ffae06efa Environment-variable access.
pkgs/npm/[email protected]/profiling.js:11
  if (process.env.NODE_ENV !== 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #362e25d4220ff76c Environment-variable access.
pkgs/npm/[email protected]/profiling.js:31
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9431412c892d4427 Environment-variable access.
pkgs/npm/[email protected]/react-dom.react-server.js:3
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a47b86891c82657 Environment-variable access.
pkgs/npm/[email protected]/server.browser.js:4
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19f38e465eb5d7e0 Environment-variable access.
pkgs/npm/[email protected]/server.bun.js:5
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #240a9963c8a09513 Environment-variable access.
pkgs/npm/[email protected]/server.edge.js:5
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #872584073c91224a Environment-variable access.
pkgs/npm/[email protected]/server.node.js:4
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab963a10aaeb390b Environment-variable access.
pkgs/npm/[email protected]/static.browser.js:4
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89bf6632a7f18506 Environment-variable access.
pkgs/npm/[email protected]/static.edge.js:4
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #476d305921304dad Environment-variable access.
pkgs/npm/[email protected]/static.node.js:4
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #606aa70327ef9fed Environment-variable access.
pkgs/npm/[email protected]/test-utils.js:3
if (process.env.NODE_ENV === 'production') {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ssh-config

npm dependency
expand_more 1 low-confidence finding(s)
low env_fs dependency Excluded from app score #0e08ee9252793272 Environment-variable access.
pkgs/npm/[email protected]/lib/ssh-config.js:118
            userInfo = { username: process.env.USER || process.env.USERNAME || '' };

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

ssh2

npm dependency
expand_more 13 low-confidence finding(s)
low env_fs tooling Excluded from app score unknown #464c7f4e4ed2733a Filesystem access.
pkgs/npm/[email protected]/examples/server-chat.js:9
const { readFileSync } = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #53beba68d24e7fe4 Filesystem access.
pkgs/npm/[email protected]/examples/server-chat.js:51
  hostKeys: [readFileSync('host.key')],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dfbd20f2a33b712a Filesystem access.
pkgs/npm/[email protected]/examples/sftp-server-download-only.js:4
const { constants, readFileSync } = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b9c06301dfcf34d8 Filesystem access.
pkgs/npm/[email protected]/examples/sftp-server-download-only.js:23
  hostKeys: [readFileSync('host.key')]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e62d38042f1a3ac2 Environment-variable access.
pkgs/npm/[email protected]/install.js:5
const forceFailOnNonZero = (process.env.CI_CHECK_FAIL === 'ssh2');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0029a3fabfe2d1f2 Filesystem access.
pkgs/npm/[email protected]/lib/agent.js:6
const { readFile } = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be9ddcc0591fb04c Filesystem access.
pkgs/npm/[email protected]/lib/agent.js:277
      readFile(socketPath, function readCygsocket(err, data) {
        if (err) {
          if (triedCygpath)
            return cb(new Error('Invalid cygwin unix socket path'));

          // Try using `cygpath` to convert a possible *nix-style path to the
          // real Windows path before giving up ...
          execFile('cygpath', ['-w', socketPath], (err, stdout, stderr) => {
            if (err || stdout.length === 0)
              return cb(new Error('Invalid cygwin unix socket path'));

            triedCygpath = true;
            socketPath = stdout.toString().replace(/[\r\n]/g, '');
            readFile(socketPath, readCygsocket);
          });
          return;
        }

        const m = RE_CYGWIN_SOCK.exec(data.toString('ascii'));
        if (!m)
          return cb(new Error('Malformed cygwin unix socket file'));

        let state;
        let bc = 0;
        let isRetrying = false;
        const inBuf = [];
        let sock;

        // Use 0 for pid, uid, and gid to ensure we get an error and also
        // a valid uid and gid from cygwin so that we don't have to figure it
        // out ourselves
        let credsBuf = Buffer.alloc(12);

        // Parse cygwin unix socket file contents
        const port = parseInt(m[1], 10);
        const secret = m[2].replace(/-/g, '');
        const secretBuf = Buffer.allocUnsafe(16);
        for (let i = 0, j = 0; j < 32; ++i, j += 2)
          secretBuf[i] = parseInt(secret.substring(j, j + 2), 16);

        // Convert to host order (always LE for Windows)
        for (let i = 0; i < 16; i += 4)
          writeUInt32LE(secretBuf, readUInt32BE(secretBuf, i), i);

        tryConnect();

        function _onconnect() {
          bc = 0;
          state = 'secret';
          sock.write(secretBuf);
        }

        function _ondata(data) {
          bc += data.length;

          if (state === 'secret') {
            // The secret we sent is echoed back to us by cygwin, not sure of
            // the reason for that, but we ignore it nonetheless ...
            if (bc === 16) {
              bc = 0;
              state = 'creds';
              sock.write(credsBuf);
            }
            return;
          }

          if (state === 'creds') {
            // If this is the first attempt, make sure to gather the valid
            // uid and gid for our next attempt
            if (!isRetrying)
              inBuf.push(data);

            if (bc === 12) {
              sock.removeListener('connect', _onconnect);
              sock.removeListener('data', _ondata);
              sock.removeListener('error', onFail);
              sock.removeListener('end', onFail);
              sock.removeListener('close', onFail);

              if (isRetrying)
                return cb(null, sock);

              isRetrying = true;
              credsBuf = Buffer.concat(inBuf);
              writeUInt32LE(credsBuf, process.pid, 0);
              sock.on('error', () => {});
              sock.destroy();

              tryConnect();
            }
          }
        }

        function onFail() {
          cb(new Error('Problem negotiating cygwin unix socket security'));
        }

        function tryConnect() {
          sock = new Socket();
          sock.on('connect', _onconnect);
          sock.on('data', _ondata);
          sock.on('error', onFail);
          sock.on('end', onFail);
          sock.on('close', onFail);
          sock.connect(port);
        }
      });

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3656bab25a6a4af0 Filesystem access.
pkgs/npm/[email protected]/lib/agent.js:290
            readFile(socketPath, readCygsocket);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afdc42ef84b105bd Filesystem access.
pkgs/npm/[email protected]/lib/protocol/SFTP.js:4
const fs = require('fs');

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebbfe9dc0f0b5dc1 Filesystem access.
pkgs/npm/[email protected]/lib/protocol/SFTP.js:719
    this.writeFile(path, data, options, callback);

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2b33fa35bc73050 Filesystem access.
pkgs/npm/[email protected]/lib/protocol/crypto/poly1305.js:11
if(z)B=y?require("path").dirname(B)+"/":__dirname+"/",C=function(a,c){var d=H(a);if(d)return c?d:d.toString();F||(F=require("fs"));G||(G=require("path"));a=G.normalize(a);return F.readFileSync(a,c?null:"utf8")},E=function(a){a=C(a,!0);a.buffer||(a=new Uint8Array(a));assert(a.buffer);return a},D=function(a,c,d){var e=H(a);e&&c(e);F||(F=require("fs"));G||(G=require("path"));a=G.normalize(a);F.readFile(a,function(f,l){f?d(f):c(l.buffer)})},1<process.argv.length&&process.argv[1].replace(/\\/g,"/"),process.argv.slice(2),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d00d2a1991981eb3 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/protocol/crypto/poly1305.js:20
function qa(){if(!J&&(x||y)){if("function"===typeof fetch&&!W.startsWith("file://"))return fetch(W,{credentials:"same-origin"}).then(function(a){if(!a.ok)throw"failed to load wasm binary file at '"+W+"'";return a.arrayBuffer()}).catch(function(){return pa()});if(D)return new Promise(function(a,c){D(W,function(d){a(new Uint8Array(d))},c)})}return Promise.resolve().then(function(){return pa()})}

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress dependency Excluded from app score #e5306ceaebeb4fb5 Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/npm/[email protected]/lib/protocol/crypto/poly1305.js:27
a)}catch(f){return I("Module.instantiateWasm callback failed with error: "+f),!1}(function(){return J||"function"!==typeof WebAssembly.instantiateStreaming||W.startsWith(V)||W.startsWith("file://")||"function"!==typeof fetch?d(c):fetch(W,{credentials:"same-origin"}).then(function(f){return WebAssembly.instantiateStreaming(f,e).then(c,function(l){I("wasm streaming compile failed: "+l);I("falling back to ArrayBuffer instantiation");return d(c)})})})().catch(r);return{}})();

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

Skipped dependencies

Production

  • @codemirror/commands prod — dist-only: no readable source
  • @codemirror/state prod — dist-only: no readable source
  • @codemirror/view prod — dist-only: no readable source
  • tw-animate-css prod — no javascript source